SUSE-SU-2018:0112-1 Security update for openssl

This update for openssl fixes the following issues: Security issues fixed: - CVE-2016-7056: ECSDA P-256 timing attack key recovery bsc1019334 - CVE-2017-3731: Truncated packet could crash via OOB read bsc1022085 - CVE-2016-8610: remote denial of service in SSL alert handling bsc1005878 -...

Updated shadow-utils packages fix security vulnerability

It was found that shadow-utils had a buffer overflow where if a buffer was left NULL for a cycle the next cycle would happily write past the entries buffer CVE-2017-12424...

liblouis security update

CentOS Errata and Security Advisory CESA-2017:3384 An update for liblouis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SUSE-SU-2017:3183-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-13728: Fix infinite loop in the nextchar function in compscan.c bsc1056136. - CVE-2017-13729: Fix illegal address access in the ncsavestr bsc1056132. - CVE-2017-13730: Fix illegal address access in the function...

Oracle Linux 7 : kernel (ELSA-2017-2930-1) (BlueBorne)

Description of changes: - 3.10.0-693.5.2.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update...

SUSE-SU-2017:2688-1 Security update for MozillaFirefox, mozilla-nss

This update for MozillaFirefox to ESR 52.4, mozilla-nss fixes the following issues: This security issue was fixed for mozilla-nss: - CVE-2017-7805: Prevent use-after-free in TLS 1.2 when generating handshake hashes bsc1061005 These security issues were fixed for Firefox - CVE-2017-7825: Fixed som...

Unbreakable Enterprise kernel security update

4.1.12-103.7.3 - brcmfmac: fix possible buffer overflow in brcmfcfg80211mgmttx Tim Tianyang Chen Orabug: 26943541 CVE-2017-7541 4.1.12-103.7.2 - rebuild bumping release...

SUSE-SU-2017:2299-1 Security update for expat

This update for expat fixes the following issues: - CVE-2016-9063: Possible integer overflow to fix inside XMLParse leading to unexpected behaviour bsc1047240 - CVE-2017-9233: External Entity Vulnerability could lead to denial of service bsc1047236...

[ASA-201708-5] libsoup: arbitrary code execution

Arch Linux Security Advisory ASA-201708-5 ========================================= Severity: Critical Date : 2017-08-10 CVE-ID : CVE-2017-2885 Package : libsoup Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-376 Summary ======= The package libsoup before...

SUSE-SU-2017:1998-1 Security update for poppler

This update for poppler fixes the following issues: Security issues fixed: - CVE-2017-9775: Fix a stack overflow bug in pdftocairo that could have been exploited in a denial of service attack through a specially crafted PDF document. bsc1045719 - CVE-2017-9776: Fix an integer overflow bug that...

SUSE-SU-2017:1769-1 Security update for libquicktime

This update for libquicktime fixes the following issues: CVE-2017-9122: A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed. bsc1044077 CVE-2017-9123: An invalid memory read in lqtframeduration via a crafted mp4 file was fixed. bsc1044009 CVE-2017-9124: A NULL pointer...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-94.3.8 - macsec: dynamically allocate space for sglist Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - macsec: avoid heap overflow in skbtosgvec Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366988...

SUSE-SU-2017:1557-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2017-9050: heap-based buffer overflow xmlDictAddString func bsc1039069, bsc1039661 - CVE-2017-9049: heap-based buffer overflow xmlDictComputeFastKey func bsc1039066 - CVE-2017-9048: stack overflow vulnerability...

kernel security, bug fix, and enhancement update

3.10.0-514.21.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-514.21.1 - kernel sched/core: Fix an SMP ordering race in trytowakeup vs...

SUSE-SU-2017:1117-1 Security update for curl

This update for curl fixes the following issues: These security issues were fixed: - CVE-2016-9586: libcurl printf floating point buffer overflow bsc1015332 - CVE-2017-7407: The ourWriteOut function in toolwriteout.c in curl might have allowed physically proximate attackers to obtain sensitive...

SUSE-SU-2017:1094-1 Security update for tigervnc

This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server bsc1031886 - CVE-2017-7395: Authenticated VNC client can crash VNC server bsc1031877 - CVE-2017-7394: Client can crash or block VNC server...

SUSE-SU-2017:1065-1 Security update for libsamplerate

This update for libsamplerate fixes the following issues: - CVE-2017-7697: Fixed a buffer overflow in calcoutputsingle. bsc1033564...

ocaml security update

3.11.2-5 - Enable execshield stack protection on ppc/ppc64 572826 related: rhbz1343082 - Fix strict-aliasing warnings in build 990540. 3.11.2-3 - Fix buffer overflow and information leak CVE-2015-8869 resolves: rhbz1343082...

SUSE-SU-2017:0656-1 Security update for tcpdump

This update for tcpdump fixes the following issues: Security issues fixed bsc1020940: - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ahprint. - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arpprint. - CVE-2016-7925: Corrected buffer overflow in compressed...

SUSE-SU-2017:0622-1 Security update for tigervnc

This update for tigervnc provides the following fixes: - Prevent malicious server from crashing a server via a buffer overflow, a similar flaw as the LibVNCServer issues CVE-2016-9941 and CVE-2016-9942. bsc1019274 - CVE-2016-10207: Prevent potential crash due to insufficient clean-up after failur...