SUSE-SU-2018:3066-1 Security update for qpdf

This update for qpdf fixes the following issues: qpdf was updated to 7.1.1. Security issues fixed: - CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050577. - CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050579...

SUSE-SU-2018:3004-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.156 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-16597: Incorrect access checking in overlayfs mounts could have been used by local attackers to modify or truncate files in the underlying...

SUSE-SU-2018:2975-1 Security update for ghostscript

This update for ghostscript to version 9.25 fixes the following issues: These security issues were fixed: - CVE-2018-17183: Remote attackers were be able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code bsc1109105 - CVE-2018-15909: Prevent type...

SUSE-SU-2018:2894-1 Security update for mgetty

This update for mgetty fixes the following issues: - CVE-2018-16741: The function doactivate did not properly sanitize shell metacharacters to prevent command injection bsc1108752. - CVE-2018-16745: The mailto parameter was not sanitized, leading to a buffer overflow if long untrusted input reach...

SUSE-SU-2018:2676-1 Security update for tiff

This update for tiff fixes the following issues: The following security vulnerabilities were addressed: - CVE-2015-8668: Fixed a heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff, which allowed remote attackers to execute arbitrary code or cause a denial of...

SUSE-RU-2018:2639-1 Recommended update for SUSE Manager 3.1 Release Notes

This update for the SUSE Manager 3.0 Release Notes provides the following additions: - SUSE Manager Server bugs fixed by latest updates + bsc1057635, bsc1083295, bsc1087837, bsc1089362, bsc1089526, bsc1089662, bsc1093458, bsc1096264, bsc1096514, bsc1097250, bsc1097697, bsc1098388, bsc1098394,...

SUSE-SU-2018:2539-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-15572: The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attacker...

SUSE-SU-2018:2450-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5391: A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during fragment...

SUSE-SU-2018:2424-1 Security update for apache2

This update for apache2 fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1333: Fixed a worker exhaustion that could have lead to a denial of service via specially crafted HTTP/2 requests bsc1101689. - CVE-2018-8011: Fixed a null pointer dereference in modm...

SUSE-SU-2018:2412-1 Security update for wireshark

This update for wireshark fixes the following issues: Security issues fixed: - bsc1094301: Wireshark security update to 2.6.1, 2.4.7, 2.2.15 - CVE-2018-14339: MMSE dissector infinite loop wnpa-sec-2018-38, bsc1101810 - CVE-2018-14341: DICOM dissector crash wnpa-sec-2018-39, bsc1101776 -...

SUSE-SU-2018:2322-1 Security update for MozillaFirefox

This update for MozillaFirefox to version ESR 52.9 fixes the following issues: - CVE-2018-5188: Various memory safety bugs bsc1098998 - CVE-2018-12368: No warning when opening executable SettingContent-ms files - CVE-2018-12366: Invalid data handling during QCMS transformations - CVE-2018-12365:...

SUSE-SU-2018:2318-1 Security update for samba

This update for samba fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; bsc1095048 - CVE-2018-1140: ldbsearch 'distinguishedName=abc' and DNS query with escapes crashes; bsc1095056 - CVE-2018-10919:...

SUSE-SU-2018:2301-1 Security update for wireshark

This update for wireshark fixes the following issues: Security issues fixed: - CVE-2018-14342: BGP dissector large loop wnpa-sec-2018-34, bsc1101777 - CVE-2018-14344: ISMP dissector crash wnpa-sec-2018-35, bsc1101788 - CVE-2018-14340: Multiple dissectors could crash wnpa-sec-2018-36, bsc1101804 -...

SUSE-SU-2018:2150-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.139 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13053: The alarmtimernsleep function had an integer overflow via a large relative timeout because ktimeaddsafe was not used bnc1099924 -...

SUSE-SU-2018:2141-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' bsc1092885. - CVE-2018-1064: Fix denial of service problem during reading from...

SUSE-SU-2018:2092-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new feature was added: - NVDIMM memory error notification ACPI 6.2 The following security bugs were fixed: - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result...

SUSE-SU-2018:2085-1 Security update for mutt

This update for mutt fixes the following issues: Security issues fixed: - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

SUSE-SU-2018:2081-1 Security update for xen

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-12891: Fix preemption checks bypass in x86 PV MM handling XSA-264 bsc1097521. - CVE-2018-12892: Fix libxl failure to honour readonly flag on HVM emulated SCSI disks XSA-266 bsc1097523. - CVE-2018-12893: Fix DB...

SUSE-SU-2018:2068-1 Security update for java-1_8_0-ibm

IBM Java was updated to version 8.0.5.15 bsc1093311, bsc1085449 Security fixes: - CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790 CVE-2018-1417 - Removed translations in the...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 42 security fixes in this release, including: 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 842265 Hig...