SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2017:2035-1)

This MariaDB update to version 10.0.31 GA fixes the following issues: Security issues fixed : - CVE-2017-3308: Subcomponent: Server: DML: Easily 'exploitable' vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks o...

SUSE SLED12 / SLES12 Security Update : libzypp, zypper (SUSE-SU-2017:2040-1)

The Software Update Stack was updated to receive fixes and enhancements. libzypp: Security issues fixed : - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. bsc1045735, bsc1038984 Bug fixes : - Re-probe on refresh if the reposito...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2017:2034-1)

This MariaDB update to version 10.0.31 GA fixes the following issues: Security issues fixed : - CVE-2017-3308: Subcomponent: Server: DML: Easily 'exploitable' vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks o...

SUSE SLED12 / SLES12 Security Update : poppler (SUSE-SU-2017:1999-1)

This update for poppler fixes the following issues: Security issues fixed : - CVE-2017-9775: DoS stack-based buffer overflow in GfxState.cc in pdftocairo via a crafted PDF document bsc1045719 - CVE-2017-9776: DoS integer overflow leading to heap buffer overflow in JBIG2Stream.cc via a crafted PDF...

SUSE SLED12 / SLES12 Security Update : poppler (SUSE-SU-2017:1998-1)

This update for poppler fixes the following issues: Security issues fixed : - CVE-2017-9775: Fix a stack overflow bug in pdftocairo that could have been exploited in a denial of service attack through a specially crafted PDF document. bsc1045719 - CVE-2017-9776: Fix an integer overflow bug that...

SUSE SLED12 / SLES12 Security Update : libical (SUSE-SU-2017:1989-1)

This update for libical fixes the following issues: Security issues fixed : - CVE-2016-5824: libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. bsc986639 - CVE-2016-5827: The icaltimefromstring function in libical 0.47 and 1.0 allows remote...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:1986-1)

This update for libquicktime fixes the following issues: Security issue fixed : - CVE-2016-2399: Adjust patch to prevent endless loop when there are less than 256 bytes to read. bsc1022805 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:1961-1)

This update for apache2 fixes the following issues: Security issue fixed : - CVE-2017-9788: Uninitialized memory reflection in modauthdigest. bsc1048576 Bug fixes : - Include individual sysconfig.d files instead of the whole sysconfig.d directory. - Include sysconfig.d/include.conf after httpd.co...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1944-1) (Stack Clash)

This update for the Linux Kernel 3.12.69-606435 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1943-1) (Stack Clash)

This update for the Linux Kernel 3.12.74-606440 fixes one issue. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack guard...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1946-1) (Stack Clash)

This update for the Linux Kernel 3.12.67-606421 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1945-1) (Stack Clash)

This update for the Linux Kernel 3.12.61-5269 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1937-1) (Stack Clash)

This update for the Linux Kernel 3.12.69-606429 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1939-1) (Stack Clash)

This update for the Linux Kernel 3.12.61-5272 fixes one issue. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack guard...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1942-1) (Stack Clash)

This update for the Linux Kernel 3.12.67-606424 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1941-1) (Stack Clash)

This update for the Linux Kernel 3.12.69-606432 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1924-1) (Stack Clash)

This update for the Linux Kernel 3.12.61-5266 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1922-1) (Stack Clash)

This update for the Linux Kernel 3.12.60-5263 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1915-1) (Stack Clash)

This update for the Linux Kernel 3.12.74-606445 fixes several issues. The following bugs were fixed : - CVE-2017-1000364: The previous fix for the stack gap increase tracked by CVE-2017-1000364 had a regression, which is fixed by this follow up patch. bsc1039496 Note that Tenable Network Security...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:1910-1) (Stack Clash)

This update for the Linux Kernel 3.12.62-60648 fixes several issues. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over the stack...