SUSE-SU-2020:2537-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-249 fixes one issue. The following security issue was fixed: - CVE-2020-14331: Fixed a buffer over-write in vgaconscroll bsc1174247...

OPENSUSE-SU-2020:1254-1 Security update for python

This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs bsc1174091. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1241-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: - CVE-2020-12673: improper implementation of NTLM does not check message buffer size bsc1174922. - CVE-2020-12674: improper implementation of RPA mechanism bsc1174923. This update was imported from the SUSE:SLE-15-SP1:Update update project...

Vulnerability fixed in libvirt

A vulnerability has been fixed in libvirt. The vulnerability allows a local malicious person to gain elevated privileges. -= SUSE =- SUSE has made updates available to fix the vulnerability in SUSE 12 and 15. fixes in SUSE 12 and 15. You can install these custom packages by using 'YaST'. You can...

OPENSUSE-SU-2020:1200-1 Security update for xrdp

This update for xrdp fixes the following issues: - Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1194-1 Security update for go1.13

This update for go1.13 fixes the following issues: - go1.13 was updated to version 1.13.5 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1182-1 Security update for libX11

This update for libX11 fixes the following issues: - Fixed XIM client heap overflows CVE-2020-14344, bsc1174628. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:1177-1 Security update for perl-XML-Twig

This update for perl-XML-Twig fixes the following issues: - Security fix bsc1008644, CVE-2016-9180 Setting expandexternalents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use noxxe. Update documentation for XML::Twig to mention problems with...

OPENSUSE-SU-2020:1144-1 Security update for targetcli-fb

This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP2:Update update project...

OPENSUSE-SU-2020:1141-1 Security update for targetcli-fb

This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP1:Update update project...

openSUSE Security Update : go1.13 (openSUSE-2020-1087)

This update for go1.13 fixes the following issues : - go1.13.14 released 2020/07/16 includes fixes to the compiler, vet, and the database/sql, net/http, and reflect packages Refs bsc1149259 go1.13 release tracking - go39925 net/http: panic on misformed If-None-Match Header with http.ServeContent ...

OPENSUSE-SU-2020:1102-1 Security update for tomcat

This update for tomcat fixes the following issues: - Fixed CVEs: CVE-2020-13934 bsc1174121 CVE-2020-13935 bsc1174117 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:1027-1 Security update for openconnect

This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service bsc1171862. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0990-1 Security update for rubygem-puma

This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage bsc1172175. - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header bsc1172176. - Disabled TLSv1.0 and TLSv1.1...

OPENSUSE-SU-2020:0970-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

OPENSUSE-SU-2020:0960-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: - CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution bsc1173477. This update was imported from the...

OPENSUSE-SU-2020:0931-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service bsc1173274. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0911-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions bsc1172405 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:0908-1 Security update for curl

This update for curl fixes the following issues: - CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option bsc1173027. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0804-1 Security update for texlive-filesystem

This update for texlive-filesystem fixes the following issues: Security issues fixed: - CVE-2020-8016: Fixed a race condition in the spec file bsc1159740. - CVE-2020-8017: Fixed a race condition on a cron job bsc1158910. This update was imported from the SUSE:SLE-15:Update update project...