SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2018:3436-1)

This update for clamav fixes the following issues : clamav was updated to version 0.100.2 : CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. bsc1110723...

SUSE SLED12 / SLES12 Security Update : net-snmp (SUSE-SU-2018:3447-1)

This update for net-snmp fixes the following issues : Security issues fixed : CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

SUSE SLES12 Security Update : smt (SUSE-SU-2018:3467-1)

SMT was updated to version 3.0.38. Following security issue was fixed : CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: Add migration path check when registration sharing is enabled Fix sibling sync...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3470-1)

This update for the Linux Kernel 4.4.121-9295 fixes several issues. The following security issues were fixed : CVE-2018-14633: A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3465-1)

This update for ImageMagick fixes the following issues : CVE-2017-14997: GraphicsMagick allowed remote attackers to cause a denial of service excessive memory allocation because of an integer underflow in ReadPICTImage in coders/pict.c. bsc1112399 CVE-2018-16644: An regression in the security fix...

SUSE SLED12 / SLES12 Security Update : postgresql96 (SUSE-SU-2018:3377-1)

This update for postgresql96 to 9.6.10 fixes the following issues : These security issues were fixed : CVE-2018-10915: libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with 'host' or 'hostaddr' connection parameters from untrusted...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2018:3387-1)

This update for webkit2gtk3 to version 2.20.3 fixes the issues : The following security vulnerabilities were addressed : CVE-2018-12911: Fixed an off-by-one error in xdgmimegetsimpleglobs boo1101999 CVE-2017-13884: An unspecified issue allowed remote attackers to execute arbitrary code or cause a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3328-1)

This update for the Linux Kernel 3.12.74-6064107 fixes several issues. The following security issues were fixed : CVE-2018-14633: A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An...

SUSE SLES12 Security Update : xen (SUSE-SU-2018:3332-1)

This update for xen fixes the following issues : CVE-2018-17963: qemudeliverpacketiov accepted packet sizes greater than INTMAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. bsc1111014 CVE-2018-15468: The DEBUGCTL MSR contains several debugging...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:3342-1)

NTP was updated to 4.2.8p12 bsc1111853 : CVE-2018-12327: Fixed stack-based buffer overflow in the openhost command-line call of NTPQ/NTPDC. bsc1098531 CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection bsc1083424 Please also see...

SUSE SLES12 Security Update : ntp (SUSE-SU-2018:3351-1)

NTP was updated to 4.2.8p12 bsc1111853 : CVE-2018-12327: Fixed stack-based buffer overflow in the openhost command-line call of NTPQ/NTPDC. bsc1098531 CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection bsc1083424 Please also see...

SUSE SLED12 / SLES12 Security Update : pam_pkcs11 (SUSE-SU-2018:3311-1)

This update for pampkcs11 provides the following fixes : Security issues fixed bsc1105012 : Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability Fixed a stack-based buffer overflow in opensshmapper.c Make sure memory is properly cleaned before invoking free Other...

SUSE SLES12 Security Update : net-snmp (SUSE-SU-2018:3319-1)

This update for net-snmp fixes the following issues : CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. bsc111112...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3265-1)

This update for the Linux Kernel 3.12.61-52146 fixes several issues. The following security issues were fixed : CVE-2018-14633: A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is...

SUSE SLED12 / SLES12 Security Update : rpm (SUSE-SU-2018:3286-1)

This update for rpm fixes the following issues : These security issues were fixed : CVE-2017-7500: rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:3289-1)

This update for tiff fixes the following issues : CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file. bsc1108637 CVE-2018-17101: There are two out-of-bounds write...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:1362-2) (Spectre)

This update for qemu fixes several issues. This security issue was fixed : CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior...

SUSE SLES12 Security Update : ntp (SUSE-SU-2018:1765-2)

This update for ntp fixes the following issues : Update to 4.2.8p11 bsc1082210 : - CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. - CVE-2018-7182: ctlgetitem: buffer read overru...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2018:1738-2)

IBM Java was updated to version 8.0.5.15 bsc1093311, bsc1085449 Security fixes : CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790 CVE-2018-1417 Removed translations in the...

SUSE SLES12 Security Update : xen (SUSE-SU-2018:1699-2) (Meltdown) (Spectre)

This update for xen fixes several issues. This feature was added : Added support for qemu monitor command These security issues were fixed: CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass SSB, Variant 4...