SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:3732-1)

This update for openssl-100 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:3383-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.5.0 ESR bsc1178824 - CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code - CVE-2020-16012: Variable time processing of cross-origin images during...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2020:3548-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.5.0 ESR bsc1178824 - CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code - CVE-2020-16012: Variable time processing of cross-origin images during...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2822-1)

This update for xen fixes the following issues : CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s bsc1176343,XSA-336 CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers bsc1176344,XSA-337 CVE-2020-25597: Fixed an issue...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:3359-1)

"This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.9-11 October 2020 CPU, bsc1177943 - New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector - Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling +...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2020:3315-1)

This update for openldap2 fixes the following issues : CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules bsc1178387. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securit...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:3126-1)

This update for ovmf fixes the following issues : CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. Note that Tenable Network Security has extracted the preceding description block directly from the SU...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:2747-1)

This update for MozillaFirefox fixes the following issues : -Firefox was updated to 78.3.0 ESR bsc1176756, MFSA 2020-43 - CVE-2020-15677: Download origin spoofing via redirect - CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a contenteditable element - CVE-2020-15678: Whe...

SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2020:3722-1)

This update for openssl-11 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2020:3276-1)

This update for ucode-intel fixes the following issues : Intel CPU Microcode updated to 20201027 prerelease CVE-2020-8695: Fixed Intel RAPL sidechannel attack SGX bsc1170446 CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 bsc1173594 New Platforms: | Processor | Stepping | F-M-S/P...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3433-1)

This update for the Linux Kernel 4.4.180-94113 fixes one issue. The following security issue was fixed : CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted bnc1177513. Note that Tenable Network Security has extracted the preceding...

SUSE SLES15 Security Update : spice (SUSE-SU-2020:3070-1)

This update for spice fixes the following issues : CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES15 Security Update : apache2 (SUSE-SU-2020:3067-1)

This update for apache2 fixes the following issues : Enables the patch for CVE-2020-11993 and CVE-2020-9490. The patch was included but not applied in the previous update. bsc1178074 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : graphviz (SUSE-SU-2020:3090-1)

This update for graphviz fixes the following issues : CVE-2018-10196: Fixed a null dereference in rebuildvlis bsc1093447. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2020:3310-1)

This update for java-170-openjdk fixes the following issues : Update to 2.6.24 - OpenJDK 7u281 October 2020 CPU, bsc1177943 - Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts +...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2020:2712-1)

This update for openldap2 fixes the following issues : CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:2788-1)

This update for xen fixes the following issues : CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 CVE-2020-25604: Fixed a...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2020:2988-1)

This update for gnutls fixes the following issues : Fix heap buffer overflow in handshake with norenegotiation alert sent CVE-2020-24659 bsc1176181 FIPS: Implement ECDH requirements from SP800-56Arev3 bsc1176086 FIPS: Use 2048 bit prime in DH selftest bsc1176086 FIPS: Add TLS KDF selftest...

SUSE SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:2748-1)

This update for libqt5-qtbase fixes the following issues : CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 Made handling of XDGRUNTIMEDIR more secure bsc1172515 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLES12 Security Update : taglib (SUSE-SU-2020:2968-1)

This update for taglib fixes the following issues : CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function allowed remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file bsc1096180. Note that Tenable Network Security has extracted the preceding...