OPENSUSE-SU-2019:2200-1 Security update for nmap

This update for nmap fixes the following issues: Security issue fixed: - CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. bsc1148742 Non-security issue fixed: - Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173...

OPENSUSE-SU-2019:2189-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: OpenSSL Security Advisory 10 September 2019 CVE-2019-1547: Added ECGROUPsetgenerator side channel attack avoidance. bsc1150003 CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key bsc1150250 This update was...

OPENSUSE-SU-2019:2143-1 Security update for podman

This update for podman fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065 This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2019:2133-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue bsc1129071. - CVE-2019-11324: Fixed invalid CA certificat verification bsc1132900. - CVE-2019-11236: Fixed CRLF injection via request parameter bsc1132663. This update was...

OPENSUSE-SU-2019:2110-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks bsc1138461. This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the...

OPENSUSE-SU-2019:2078-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. This update was imported from the SUSE:SLE-15:Update update...

OPENSUSE-SU-2019:1988-1 Security update for python

This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation bsc1141853. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1965-1 Security update for wireshark

This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash bsc1141980. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1907-1 Security update for nodejs8

This update for nodejs8 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter bsc1140290. Non-security issue fixed: - Backported fixes for OpenSSL 1.1.1 from nodejs8 bsc1134209. This update was imported from the...

OPENSUSE-SU-2019:1760-1 Security update for python-Twisted

This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1750-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2019:1718-1 Security update for libqb

This update for libqb fixes the following issues: Security issue fixed: - CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1671-1 Security update for dbus-1

This update for dbus-1 fixes the following issue: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUSCOOKIESHA1 which could have allowed local attackers to bypass authentication bsc1137832. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1650-1 Security update for glib2

This update for glib2 fixes the following issues: Security issue fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed: - glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus...

OPENSUSE-SU-2019:1649-1 Security update for exempi

This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libcroco (moderate)

openSUSE Security Update: Security update for libcroco Announcement ID: openSUSE-SU-2019:1575-1 Rating: moderate References: 1034481 1034482 1043898 1043899 Cross-References: CVE-2017-7960 CVE-2017-7961 CVE-2017-8834 CVE-2017-8871 Affected Products: openSUSE Leap 42.3 An update that fixes four...

OPENSUSE-SU-2019:1476-1 Security update for bluez

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9797: Fixed a buffer over-read in l2capdump bsc1013708. - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. - CVE-2016-9917: Fixed a heap-based buffer overflow in readn bsc1015171. This update was...

OPENSUSE-SU-2019:1435-1 Security update for bzip2

This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover bsc985657. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2019:1195-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: - Backport changes to support quotas with SMB2 bsc1106119...

OPENSUSE-SU-2019:1310-1 Security update for libsoup

This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. This update was imported from the SUSE:SLE-15:Update update project...