SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2018:1989-1)

This update for openssh fixes the following issues: Security issue fixed : - CVE-2016-10708: Prevent DoS due to crashes caused by out-of-sequence NEWKEYS message bsc1076957. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 / SLES12 Security Update : shadow (SUSE-SU-2018:1997-1)

This update for shadow fixes the following issues : - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLES12 Security Update : shadow (SUSE-SU-2018:1995-1)

This update for shadow fixes the following issues : - CVE-2016-6252: Fixed incorrect integer handling that could results in a local privilege escalation bsc1099310 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1972-1)

This update for perl fixes the following issues: These security issue were fixed : - CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216. - CVE-2018-6798: Fixed heap buffer overflow in regexec.c bsc1082233. - CVE-2018-6797: Fixed sharp-s regexp overflow bsc1082234. -...

SUSE SLES12 Security Update : openssl (SUSE-SU-2018:1968-1)

This update for openssl fixes the following issues : - CVE-2018-0732: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a k...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1949-1)

This update for the Linux Kernel 4.4.121-9273 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2018:1950-1)

This update for gdk-pixbuf fixes the following security issue : - CVE-2017-1000422: Prevent several integer overflow in the gifgetlzw function resulting in memory corruption and potential code execution bsc1074462. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1946-1)

This update for the Linux Kernel 4.4.121-9280 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1947-1)

This update for the Linux Kernel 4.4.90-9250 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1942-1)

This update for the Linux Kernel 4.4.90-9245 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1943-1)

This update for the Linux Kernel 4.4.114-9267 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1940-1)

This update for the Linux Kernel 4.4.103-9253 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1945-1)

This update for the Linux Kernel 4.4.114-9264 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLED12 / SLES12 Security Update : Recommended update for ucode-intel (SUSE-SU-2018:1935-1) (Spectre)

The Intel CPU microcode bundle was updated to the 20180703 release. For the listed CPU chipsets this fixes CVE-2018-3640 Spectre v3a and helps mitigating CVE-2018-3639 Spectre v4 bsc1100147 bsc1087082 bsc1087083. More information on:...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1944-1)

This update for the Linux Kernel 4.4.103-9256 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1948-1)

This update for the Linux Kernel 4.4.120-9270 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2018:1902-1)

This update for libqt4 fixes the following issues: LibQt4 was updated to 4.8.7 bsc1039291, CVE-2016-10040: See http://download.qt.io/officialreleases/qt/4.8/4.8.7/changes-4.8.7 for more details. Also libQtWebkit4 was updated to 2.3.4 to match libqt4. Also following bugs were fixed : - Enable...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:1887-1)

This update for openssl fixes the following issues : - CVE-2018-0732: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a k...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-1)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-5848: In the function wmisetie, the length validation code did not handle unsigned integer overflow properly. As a result, a large value of the 'iele...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1851-1)

This update for ImageMagick fixes the following issues: These security issues were fixed : - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers t...