OPENSUSE-SU-2019:2685-1 Security update for postgresql

This update for postgresql fixes the following issues: - Changed permissions, so that the directory can only be used by users in the postgres group bsc1123886. - Moved bash profile out of /var/lib to allow transactional updates bsc1100397. This update was imported from the SUSE:SLE-15:Update upda...

OPENSUSE-SU-2019:2670-1 Security update for munge

This update for munge fixes the following issues: Security issue fixed: - CVE-2019-3691: Fixed a Local privilege escalation vulnerability which allowed escalation from munge to root bsc1155075. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2631-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to 20191115 security release bsc1157004 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2019:2608-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. - CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2019:2588-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2573-1 Security update for cups

This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359. This update was imported from the SUSE:SLE-15:Update update...

OPENSUSE-SU-2019:2557-1 Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues: Security issues fixed October 2019 CPU bsc1154212: - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Bette...

OPENSUSE-SU-2019:2529-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. bsc1156402 This update was imported from the SUSE:SLE-15:Update update project...

Vulnerability fixed in libSSH2

A vulnerability has been fixed in libSSH2. The vulnerability can lead to the release of sensitive information or a denial-of-service. -= SUSE =- SUSE has made updates available to fix the vulnerability fix in SUSE 12. You can install these custom packages using 'YaST'. You can also download the...

OPENSUSE-SU-2019:2435-1 Security update for nfs-utils

This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2019:2434-1 Security update for docker-runc

This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2385-1 Security update for openconnect

This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. bsc1151178 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2306-1 Security update for libopenmpt

This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlugInstrumentName and ModPlugSampleName bsc1153102. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2298-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlitestat1 field that could lead to denial of service bsc1150137. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2281-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: - CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. bsc1145559 - CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channel bsc1133625. - CVE-2019-11494: Fixed a...

OPENSUSE-SU-2019:2278-1 Security update for dovecot23

This update for dovecot23 fixes the following issue: - CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. bsc1145559 - CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channel bsc1133625. - CVE-2019-11494: Fixed a...

Security update for python-numpy (moderate)

openSUSE Security Update: Security update for python-numpy Announcement ID: openSUSE-SU-2019:2259-1 Rating: moderate References: 1149203 Cross-References: CVE-2019-6446 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This upda...

SUSE-SU-2019:2561-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 In addition fix...

OPENSUSE-SU-2019:2225-1 Security update for python-numpy

This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. bsc1149203 jscSLE-8532 This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:2208-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: - CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666,...