SUSE SLED12 / SLES12 Security Update : audit (SUSE-SU-2019:0563-1)

This update for audit fixes the following issues : Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0298-1 Rating: important References: 1127602 Cross-References: CVE-2019-5786 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 An...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:0541-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.175 to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-6974: kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandled reference counting because of a race condition, leading to a use-after-free...

SUSE-SU-2019:0541-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.175 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-6974: kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandled reference counting because of a race condition, leading to a use-after-free...

Security update for procps (important)

openSUSE Security Update: Security update for procps Announcement ID: openSUSE-SU-2019:0291-1 Rating: important References: 1092100 1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 42.3 An update that fixes 5...

SUSE SLED12 / SLES12 Security Update : openssl-1_1 (SUSE-SU-2019:0512-1)

This update for openssl-11 fixes the following issues : The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations bsc1117951 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2019:0439-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19985: The function hsoprobe read ifnum from the USB device as an u8 and used it without a length check to index an array, resulting in an OOB memory re...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0206-1 Rating: important References: 1123641 1124936 Cross-References: CVE-2019-5754 CVE-2019-5755 CVE-2019-5756 CVE-2019-5757 CVE-2019-5758 CVE-2019-5759 CVE-2019-5760 CVE-2019-5761 CVE-2019-5762 CVE-2019-57...

SUSE-SU-2019:0387-1 Security update for build

This update for build version 20190128 fixes the following issues: Security issue fixed: - CVE-2017-14804: Improve file name check extractbuild bsc1069904 Non-security issue fixed: - Add initial SLE 15 SP1 config bsc1122895...

SUSE-SU-2019:0320-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpuscanioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service NULL pointer dereference and BUG via...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:0224-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features : Support for Enhanced-IBRS on new Intel CPUs fate326564 The following security bugs were fixed: CVE-2018-9568: In skclonelock of sock.c, there is a possible memory...

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2019:0131-1 Rating: moderate References: 1121887 1121889 Cross-References: CVE-2019-3806 CVE-2019-3807 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes two vulnerabilities...

SUSE-SU-2019:0224-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features: - Support for Enhanced-IBRS on new Intel CPUs fate326564 The following security bugs were fixed: - CVE-2018-9568: In skclonelock of sock.c, there is a possible memory...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:0196-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2018-9568: In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no...

SUSE-SU-2019:0150-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9568: In skclonelock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with...

SUSE-SU-2019:0148-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpuscanioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service NULL pointer dereference and BUG via...

Linux 3 a serious vulnerability systemd, may lead to data breaches-vulnerability warning-the black bar safety net

! Recently, security researchers announced a Linux system systemd in three serious vulnerabilities, namely CVE-2018-16864, CVE-2018-16865, and CVE-2018-16866。 Attackers exploiting these vulnerabilities may obtain a target machine's root access, and even may lead to information disclosure. Systemd...

SUSE-SU-2019:0095-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 Azure kernel was updated to 4.4.162 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-18281: The mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the...

Security update for irssi (important)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2019:0048-1 Rating: important References: 1121396 Cross-References: CVE-2019-5882 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 An...

systemd-journald Memory Corruption / Information Leak Vulnerability

This is a thorough analysis of how Qualys approached exploiting three vulnerabilities in systemd-journald. Although they have not released formal exploits yet, they detail in here is useful in understanding the flaws. Qualys Security Advisory System Down: A systemd-journald exploit...