SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2018:4211-1)

This update for mariadb fixes the following issues : Update to MariaDB 10.0.37 GA bsc1116686. Security issues fixed : CVE-2018-3282: Server Storage Engines unspecified vulnerability CPU Oct 2018 bsc1112432 CVE-2018-3251: InnoDB unspecified vulnerability CPU Oct 2018 bsc1112397 CVE-2018-3174: Clie...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2018:4207-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. CVE-2017-5732: Fixed privilege...

SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2018:4210-1)

This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2018-15518: Fixed double free in QXmlStreamReader bsc1118595 CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler bsc1118596 Note that Tenable Network Security has extracted the precedin...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2018:4188-1)

This update for bluez fixes the following issues : Security issues fixed : CVE-2016-9800: Fixed a buffer overflow in the pincodereplydump function bsc1013721 CVE-2016-9801: Fixed a buffer overflow in the setextctrl function bsc1013732 Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2018:4194-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. CVE-2017-5732: Fixed privilege...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4195-1)

This update for the Linux Kernel 3.12.61-52111 fixes several issues. The following security issues were fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. CVE-2018-5848: Fixed an unsigned intege...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:4191-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. CVE-2016-10094: Fixed heap-bas...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4196-1)

This update for the Linux Kernel 3.12.61-52141 fixes one issue. The following security issue was fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. Note that Tenable Network Security has extract...

SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2018:4183-1)

This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2018-15518: Fixed double free in QXmlStreamReader bsc1118595 CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler bsc1118596 Note that Tenable Network Security has extracted the precedin...

SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2018:4179-1)

This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2018-15518: Fixed double free in QXmlStreamReader bsc1118595 CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler bsc1118596 Note that Tenable Network Security has extracted the precedin...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2018:4185-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2018:4150-1)

This update for openldap2 fixes the following issues : Security issue fixed : CVE-2017-17740: When both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service slapd crash via a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4157-1)

This update for the Linux Kernel 3.12.74-606493 fixes several issues. The following security issues were fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. CVE-2018-5848: Fixed an unsigned integ...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4158-1)

This update for the Linux Kernel 3.12.74-6064107 fixes one issue. The following security issue was fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. Note that Tenable Network Security has...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4153-1)

This update for the Linux Kernel 3.12.74-606488 fixes several issues. The following security issues were fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. CVE-2018-5848: Fixed an unsigned integ...

SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2018:4149-1)

This update for tcpdump fixes the following issues : Security issues fixed : CVE-2018-19519: Fixed a stack-based buffer over-read in the printprefix function bsc1117267 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4154-1)

This update for the Linux Kernel 3.12.74-6064104 fixes one issue. The following security issue was fixed : CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2018:4129-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:4127-1)

This update for the Linux Kernel 4.4.103-9256 fixes one issue. The following security issue was fixed : CVE-2018-5848: Fixed an unsigned integer overflow in wmisetie. This could lead to a buffer overflow bsc1097356. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : exiv2 (SUSE-SU-2018:3882-2)

This update for exiv2 fixes the following issues : CVE-2017-11591: A floating point exception in the Exiv2::ValueType function could lead to a remote denial of service attack via crafted input. bsc1050257 CVE-2017-14864: An invalid memory address dereference was discovered in Exiv2::getULong in...