SUSE SLES12 Security Update : openssl (SUSE-SU-2018:2928-2)

This update for openssl fixes the following issues : These security issues were fixed : Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information bsc1104789 CVE-2018-0737: The RSA Key generation algorithm has been shown to be...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2320-2)

This update for samba fixes the following issues : The following security vulnerability was fixed : CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 The following other bugs were fixed: Fix libnsswins.so.2 link libreplace with rpath bsc1054849 Note that...

SUSE SLES12 Security Update : samba (SUSE-SU-2018:2339-2)

This update for samba fixes the following issues : The following security issues were fixed : CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 Note that Tenable...

SUSE SLES12 Security Update : openslp (SUSE-SU-2018:2991-2)

This update for openslp fixes the following issues : CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability bsc1090638 Prevent out of bounds reads in message parsing Note that Tenable Network...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:2815-2)

This update for apache2 fixes the following issues : Security issues fixed : CVE-2016-8743: Fixed liberal whitespace interpretation accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chai...

SUSE SLED12 / SLES12 Security Update : fuse (SUSE-SU-2018:3219-1)

This update for fuse fixes the following security issue : CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3238-1)

This update for the Linux Kernel 3.12.61-52136 fixes several issues. The following security issues were fixed : CVE-2018-17182: The vmacacheflushall function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free and possibly gain privileges via certain...

SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2018:3207-1)

This update for binutils to 2.31 fixes the following issues : These security issues were fixed : CVE-2017-15996: readelf allowed remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggered a buffer...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3191-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3173-1)

This update for the Linux Kernel 4.4.121-9280 fixes several issues. The following security issues were fixed : CVE-2018-17182: The vmacacheflushall function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free and possibly gain privileges via certain...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3172-1)

This update for the Linux Kernel 3.12.74-6064104 fixes several issues. The following security issues were fixed : CVE-2018-17182: The vmacacheflushall function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free and possibly gain privileges via certain...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3171-1)

This update for the Linux Kernel 3.12.74-606482 fixes several issues. The following security issues were fixed : CVE-2018-17182: The vmacacheflushall function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free and possibly gain privileges via certain...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2018:3161-1)

"Samba was updated to 4.6.15, bringing bug and security fixes. bsc1110943 Following security issues were fixed : CVE-2018-10919: Fix unauthorized attribute access via searches. bsc1095057 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3095-1)

This update for ImageMagick fixes the following security issues : CVE-2017-11532: Prevent a memory leak vulnerability in the WriteMPCImage function in coders/mpc.c via a crafted file allowing for DoS bsc1050129 CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function bsc1108283...

SUSE SLED12 / SLES12 Security Update : libX11 / libxcb (SUSE-SU-2018:3102-1)

This update for libX11 and libxcb fixes the following issue : libX11 : These security issues were fixed : CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact bsc1102062...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2018:3081-1)

This update for libxml2 fixes the following security issues : CVE-2018-9251: The xzdecomp function allowed remote attackers to cause a denial of service infinite loop via a crafted XML file that triggers LZMAMEMLIMITERROR, as demonstrated by xmllint bsc1088279. CVE-2018-14567: Prevent denial of...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:3084-1)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. CVE-2018-10853: A flaw was found in the way the KVM hypervisor emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilegeCPL level while emulating unprivileged...

SUSE SLED12 / SLES12 Security Update : soundtouch (SUSE-SU-2018:3070-1)

This update for soundtouch fixes the following security issue : CVE-2018-1000223: Prevent buffer overflow in WavInFile::readHeaderBlock that could have resulted in arbitrary code execution when opening maliocius file in soundstretch utility bsc1103676 Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2018:3064-1) (Spectre)

This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues : These security issues were fixed : CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

SUSE SLED12 / SLES12 Security Update : postgresql10 (SUSE-SU-2018:3074-1)

This update for brings postgresql10 version 10.5 to SUSE Linux Enterprise 12 SP3. FATE325659 bnc1108308 This release marks the change of the versioning scheme for PostgreSQL to a 'x.y' format. This means the next minor releases of PostgreSQL will be 10.1, 10.2, ... and the next major release will...