6,771 results · Clear filters · Feed
-
Medium max 6.8SUSE-SU-2019:0126-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client wo…
first Jan 18, 2019 -
Medium max 6.5SUSE-SU-2019:0341-1 1 CVE
Security update for SUSE Manager Server 3.2
This update fixes the following issues: branch-network-formula: - Netconfig update requires bind directory to exists for bind forward, ensure it (bsc#1116365) - Rework network update in branch-network formula (bsc#1116365) py26-compat-salt: - Remove arch from…
first Feb 13, 2019 -
Medium max 6.5SUSE-SU-2019:0298-1 1 CVE
Security update for the Linux Kernel (Live Patch 0 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-94_41 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could mak…
first Feb 8, 2019 -
Medium max 5.3SUSE-SU-2019:0209-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: Security issue fixed: - CVE-2018-16881: Fixed a denial of service when both the imtcp module and Octet-Counted TCP Framing is enabled (bsc#1123164).
first Jan 31, 2019 -
Medium max 6.5SUSE-SU-2019:0439-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19985: The function hso_probe read if_num from the USB device (as an u8) and used it without a length check to ind…
first Feb 19, 2019 -
Medium max 4.4SUSE-SU-2018:3608-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2018-16840: A use after free in closing SASL handles was fixed (bsc#1112758) - CVE-2018-16842: A Out-of-bounds Read in tool_msgs.c was fixed which could lead to crashes (bsc#1113660)
first Nov 2, 2018 -
Medium max 6.3SUSE-SU-2020:0359-1 2 CVEs
Security update for rubygem-rack
This update for rubygem-rack to version 2.0.8 fixes the following issues: - CVE-2018-16471: Fixed a cross-site scripting (XSS) flaw via the scheme method on Rack::Request (bsc#1116600). - CVE-2019-16782: Fixed a possible information leak and session hijack vu…
first Feb 7, 2020 -
Medium max 5.3SUSE-SU-2019:2673-1 2 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).
first Oct 15, 2019 -
Medium max 5.9SUSE-SU-2018:3776-2 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Following security issues have been fixed: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS…
first Apr 29, 2019 -
Medium max 5.9SUSE-SU-2019:0482-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191). - CVE-2018-14647: Fixed a denial-of-service vulnerability in Expat (bsc#1109847). …
first Feb 25, 2019 -
Medium max 6.1SUSE-SU-2018:3549-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2018-14574: Prevent open redirect in django.middleware.common.CommonMiddleware (bsc#1102680)
first Oct 29, 2018 -
Medium max 6.5SUSE-SU-2019:3340-1 2 CVEs
Security update for spectre-meltdown-checker
This update for spectre-meltdown-checker fixes the following issues: - version 0.43 - feat: implement TAA detection (CVE-2019-11135 bsc#1139073) - feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207 bsc#1117665) - feat: taa: add TSX_CTRL MSR dete…
first Dec 19, 2019 -
Medium max 6.5SUSE-SU-2019:2956-1 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Remove a backslash '\' escape character from 80-qemu-ga.rules (bsc#1153358) Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character…
first Nov 12, 2019 -
Medium max 5.9SUSE-SU-2019:1909-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first Jul 19, 2019 -
Medium max 5.9SUSE-SU-2019:14133-1 4 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Micr…
first Jul 23, 2019 -
Medium max 5.9SUSE-SU-2019:1356-1 4 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…
first May 27, 2019 -
Medium max 5.9SUSE-SU-2019:1268-1 6 CVEs
Security update for qemu
This update for qemu fixes the following issues: Following security issues were fixed: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2018-20815: Fix DOS possibility in device tree processing (bsc#1130675) - CVE-2018-12126 CVE-2018-12…
first May 16, 2019 -
Medium max 5.9SUSE-RU-2019:2715-1 6 CVEs
Recommended update for xen
This update for xen to version 4.12.1 fixes the following issues: - Fixed an issue which made Xen crash on AMD ROME based machines (bsc#1135799). - Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563). - Added code to change LIBXL_HOTPLUG_TIMEOUT at…
first Oct 18, 2019 -
Medium max 6.5SUSE-SU-2020:1605-1 23 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to…
first Jun 10, 2020 -
Medium max 6.1SUSE-SU-2017:1793-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening a against local side-channel attack in RSA key handling has been added (bsc#1046607)
first Jul 6, 2017 -
Medium max 6.5SUSE-SU-2017:1347-1 1 CVE
Security update for SUSE Manager Client Tools
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470) Additionally, the following non-security issues have been fixed: rhnli…
first May 18, 2017 -
Medium max 5.6SUSE-SU-2018:3230-1 4 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820) - Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy HVM guests from cau…
first Oct 18, 2018 -
Medium max 5.6SUSE-SU-2018:0708-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: The Intel CPU microcode version was updated to version 20180312. This update enables the IBPB+IBRS based mitigations of the Spectre v2 flaws (boo#1085207 CVE-2017-5715) - New Platforms - BDX-DE EGW A0 6-…
first Mar 16, 2018 -
Medium max 5.3SUSE-SU-2018:0444-1 1 CVE
Security update for dhcp
This update for dhcp fixes several issues. This security issue was fixed: - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119) This non-security issue was fixed: - Enhance dhclient-script to hand…
first Feb 14, 2018 -
Medium max 5.2SUSE-SU-2018:0337-1 1 CVE
Security update for libICE
This update for libICE fixes the following issues: - CVE-2017-2626: Creation of the ICE auth session cookies used insufficient randomness, making these cookies predictable. A more random generation method has been implemented. (boo#1025068)
first Feb 1, 2018 -
Medium max 5.6SUSE-SU-2018:0039-1 2 CVEs
Security update for kvm
This update for kvm fixes the following issues: A security flaw mitigation has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features…
first Jan 8, 2018 -
Medium max 4.5SUSE-SU-2019:1525-1 2 CVEs
Security update for netpbm
This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). -…
first Jun 17, 2019 -
Medium max 4.5SUSE-SU-2017:1575-1 1 CVE
Security update for netpbm
This update for netpbm fixes the following security issues: - CVE-2017-2581: An out-of-bounds write in writeRasterPbm() could lead to memory corruption and potential code execution. (bsc#1024287)
first Jun 15, 2017 -
Medium max 5.6SUSE-SU-2018:0438-1 10 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks (bsc#1074562, bsc#1068032) - C…
first Feb 14, 2018 -
Medium max 5.0SUSE-SU-2019:0582-1 8 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6778: Fixed an out-of-bounds access in slirp (bsc#1123156) - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp (bsc#11194…
first Mar 11, 2019 -
Medium max 5.5SUSE-SU-2018:1816-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.138 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12233: A memory corruption bug in JFS could have been triggered by calling setxattr twice with two d…
first Jun 26, 2018 -
Medium max 5.5SUSE-SU-2018:1761-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3665: Prevent disclosure of FPU registers (including XMM and AVX registers) between processes. These register…
first Jun 20, 2018 -
Medium max 5.9SUSE-SU-2018:2930-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following security issues: - Improved mitigations against Lucky 13 class of attacks - CVE-2018-10846: 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (bsc#1105460) - CVE-2018-10845: …
first Sep 28, 2018 -
Medium max 5.5SUSE-SU-2017:1147-1 6 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - A malicious 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks by placing a IRET hypercall in …
first May 2, 2017 -
Medium max 6.5SUSE-SU-2017:1479-1 1 CVE
Security update for ceph
This update provides Ceph 10.2.6, which brings fixes and enhancements: This security issue was fixed: - CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. (bsc#1014986) These non-security issues were fixed: - common: Add r…
first Jun 2, 2017 -
Medium max 5.5SUSE-SU-2017:1146-1 4 CVEs
Security update for xen
This update for xen fixes several security issues: - A malicious 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks by placing a IRET hypercall in the middle of a multicall…
first May 2, 2017 -
Medium max 5.5SUSE-SU-2017:1143-1 2 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - A malicious 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks by placing a IRET hypercall in …
first May 2, 2017 -
Medium max 5.9SUSE-SU-2017:1042-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2016-9586: libcurl printf floating point buffer overflow (bsc#1015332) - CVE-2017-7407: The ourWriteOut function in tool_writeout.c in curl might have allowed physically proximate at…
first Apr 18, 2017 -
Medium max 6.5SUSE-SU-2019:13985-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: Security issue fixed: - CVE-2018-14404: Prevent NULL pointer dereference in the xmlXPathCompOpEval() function when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case leading to a den…
first Mar 21, 2019 -
Medium max 5.6SUSE-SU-2018:2637-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-8405: An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB dri…
first Sep 6, 2018