SUSE-SU-2018:3066-2 Security update for qpdf

This update for qpdf fixes the following issues: qpdf was updated to 7.1.1. Security issues fixed: - CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050577. - CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050579...

CVE-2018-3279 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3200 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3185 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3174 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3171 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3161 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3155 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3145 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3143 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3137 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2018:3066-1 Security update for qpdf

This update for qpdf fixes the following issues: qpdf was updated to 7.1.1. Security issues fixed: - CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050577. - CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050579...

SUSE-SU-2018:3004-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.156 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-16597: Incorrect access checking in overlayfs mounts could have been used by local attackers to modify or truncate files in the underlying...

SUSE-SU-2018:2975-1 Security update for ghostscript

This update for ghostscript to version 9.25 fixes the following issues: These security issues were fixed: - CVE-2018-17183: Remote attackers were be able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code bsc1109105 - CVE-2018-15909: Prevent type...

SUSE-SU-2018:2894-1 Security update for mgetty

This update for mgetty fixes the following issues: - CVE-2018-16741: The function doactivate did not properly sanitize shell metacharacters to prevent command injection bsc1108752. - CVE-2018-16745: The mailto parameter was not sanitized, leading to a buffer overflow if long untrusted input reach...

SUSE-SU-2018:2676-1 Security update for tiff

This update for tiff fixes the following issues: The following security vulnerabilities were addressed: - CVE-2015-8668: Fixed a heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff, which allowed remote attackers to execute arbitrary code or cause a denial of...

SUSE-RU-2018:2639-1 Recommended update for SUSE Manager 3.1 Release Notes

This update for the SUSE Manager 3.0 Release Notes provides the following additions: - SUSE Manager Server bugs fixed by latest updates + bsc1057635, bsc1083295, bsc1087837, bsc1089362, bsc1089526, bsc1089662, bsc1093458, bsc1096264, bsc1096514, bsc1097250, bsc1097697, bsc1098388, bsc1098394,...

SUSE-SU-2018:2539-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-15572: The spectrev2selectmitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context switch, which made it easier for attacker...

SUSE-SU-2018:2450-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5391: A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the worst case scenario during fragment...

SUSE-SU-2018:2424-1 Security update for apache2

This update for apache2 fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1333: Fixed a worker exhaustion that could have lead to a denial of service via specially crafted HTTP/2 requests bsc1101689. - CVE-2018-8011: Fixed a null pointer dereference in modm...