SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)

This update for wireshark fixes the following issues : - Update to wireshark 2.2.14, fix such issues : - bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissect...

SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2018:0947-1)

This update for evince fixes the following issues : - CVE-2017-1000159: Command injection in evince via filename when printing to PDF could lead to command execution bsc1070046 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

SUSE SLES12 Security Update : memcached (SUSE-SU-2018:0955-1)

This update for memcached fixes the following issues : - CVE-2018-1000115: Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP support of the memcached server could result in denial of service via network flood traffic amplification of 1:50,000 h...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:0956-1)

This update for ntp fixes the following issues : - Update to 4.2.8p11 bsc1082210 : - CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. - CVE-2018-7182: ctlgetitem: buffer read...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2018:0934-1)

This update for python3 fixes the following issues: Security issue fixed : - CVE-2017-18207: Fixed possible denial of service vulnerability by adding a check to Lib/wave.py that verifies that at least one channel is provided bsc1083507. Bug fixes : - Require python-Sphinx-latex for building on Le...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2018:0920-1) (Spectre)

This update for libvirt and virt-manager fixes the following issues: Security issues fixed : - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' var2 bsc1079869. - CVE-2018-6764: Fixed guest executable code injection via libnssdns.so loaded by libvirtlxc before init...

SUSE SLES12 Security Update : policycoreutils (SUSE-SU-2018:0926-1)

This update for policycoreutils fixes the following issues : - CVE-2018-1063: Fixed problem to prevent chcon from following symlinks in /tmp, /var/tmp, /var/run and /var/lib/debug bsc1083624. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:0925-1)

This update for openssl fixes the following issues : - CVE-2018-0739: Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2018:0909-1) (Meltdown) (Spectre)

This update for xen fixes the following issues: Update to Xen 4.7.5 bug fix only release bsc1027519 Security issues fixed : - CVE-2018-7540: Fixed DoS via non-preemptable L3/L4 pagetable freeing XSA-252 bsc1080635 - CVE-2018-7541: A grant table v2 - v1 transition may crash Xen XSA-255 bsc1080662 ...

SUSE SLES12 Security Update : openssl (SUSE-SU-2018:0906-1)

This update for openssl fixes the following issues : - CVE-2018-0739: Constructed ASN.1 types with a recursive definition could exceed the stack. This could result in a Denial Of Service attack. bsc1087102 Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLES12 Security Update : openssl (SUSE-SU-2018:0902-1)

This update for openssl fixes the following issues : - CVE-2018-0739: Constructed ASN.1 types with a recursive definition could exceed the stack. This could result in a Denial Of Service attack. bsc1087102 Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2018:0879-1)

This update for apache2 fixes the following issues : - CVE-2018-1283: when modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a 'Session' header leading to unexpected behavior bsc1086814. -...

SUSE SLED12 / SLES12 Security Update : libidn (SUSE-SU-2018:0878-1)

This update for libidn fixes one issues. This security issue was fixed : - CVE-2017-14062: Prevent integer overflow in the decodedigit function that allowed remote attackers to cause a denial of service or possibly have unspecified other impact bsc1056450. Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : postgresql94 (SUSE-SU-2018:0876-1)

This update for postgresql94 fixes the following issues: Security issues fixed : - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes : - See release notes for details : - https://www.postgresql.org/docs/9.4/static/release-9-4-17.ht...

SUSE SLED12 / SLES12 Security Update : spice-gtk (SUSE-SU-2018:0877-1)

This update for spice-gtk fixes the following issues : - CVE-2017-12194: A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2018:0861-1) (Spectre)

This update for libvirt fixes the following issues: Security issues fixed : - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' var2 bsc1079869. - CVE-2018-6764: Fixed guest executable code injection via libnssdns.so loaded by libvirtlxc before init bsc1080042. -...

SUSE SLED12 / SLES12 Security Update : graphite2 (SUSE-SU-2018:0858-1)

This update for graphite2 fixes the following issues : - CVE-2018-7999: Fixed a NULL pointer dereference vulnerability in Segment.cpp that may cause a denial of serivce bsc1084850. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0857-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file bsc1086011. -...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2018:0846-1)

This update for krb5 provides the following fixes: Security issues fixed : - CVE-2018-5730: DN container check bypass by supplying special crafted data bsc1083927. - CVE-2018-5729: NULL pointer dereference in kadmind or DN container check bypass by supplying special crafted data bsc1083926...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:0850-1)

This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 bsc1085130 : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds wri...