SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2017:0798-1)

This update for virglrenderer fixes the following issues: Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2017:0800-1)

This update for wget fixes the following issues: Security issue fixed : - CVE-2017-6508: urlparse: Reject control characters in host part of URL bsc1028301. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0772-1)

This update for the Linux Kernel 3.12.60-5260 fixes one issue. The following security bug was fixed : - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel allowed attackers to cause a denial of service system crash via 1 an application that made crafted...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0770-1)

This update for the Linux Kernel 3.12.60-5257 fixes one issue. The following security bug was fixed : - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel allowed attackers to cause a denial of service system crash via 1 an application that made crafted...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0780-1)

This update for the Linux Kernel 3.12.61-5266 fixes one issue. The following security bug was fixed : - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel allowed attackers to cause a denial of service system crash via 1 an application that made crafted...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0769-1)

This update for the Linux Kernel 3.12.60-5249 fixes one issue. The following security bug was fixed : - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel allowed attackers to cause a denial of service system crash via 1 an application that made crafted...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0771-1)

This update for the Linux Kernel 3.12.55-5242 fixes one issue. The following security bug was fixed : - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel allowed attackers to cause a denial of service system crash via 1 an application that made crafted...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...

SUSE SLED12 / SLES12 Security Update : sane-backends (SUSE-SU-2017:0713-1)

This update for sane-backends fixes the following issues : - saned could have leaked uninitialized memory back to its requesters for some opcodes, allowing for information disclosure of saned memory CVE-2017-6318, bsc1027197. Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2017:0720-1)

This update for java-171-ibm fixes the following issues: Security issue fixed : - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for...

SUSE SLED12 / SLES12 Security Update : Recommended update for dbus-1 (SUSE-SU-2017:0695-1)

This update for dbus-1 fixes the following issues: Security issues fixed : - Symlink attack in nonce-tcp transport. bsc1025950 - Symlink attack in unit tests. bsc1025951 Bugfixes : - Remove sysvinit script, not used under systemd. bsc974092 Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : qemu (SUSE-SU-2017:0661-1)

This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-2620: In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation bsc1024972 -...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2017:0641-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...

SUSE SLES12 Security Update : openssh (SUSE-SU-2017:0607-3)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2017:0622-1)

This update for tigervnc provides the following fixes : - Prevent malicious server from crashing a server via a buffer overflow, a similar flaw as the LibVNCServer issues CVE-2016-9941 and CVE-2016-9942. bsc1019274 - CVE-2016-10207: Prevent potential crash due to insufficient clean-up after failu...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:0610-1)

This update for libquicktime fixes the following issues : - A crafted MP4 file could have caused libquicktime to crash or lead to undefined behaviour bsc1022805, CVE-2016-2399 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLES12 Security Update : openssh (SUSE-SU-2017:0607-1)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2017:0605-1)

This update for compat-openssl098 fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed : - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed bsc1019334 - CVE-2016-8610: A remote denial of...

SUSE SLES12 Security Update : bind (SUSE-SU-2017:0594-1)

This update for bind fixes the following issues : - Fixed a possible denial of service vulnerability affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc1024130 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2017:0596-1)

This update for bind fixes the following issues : - Fixed a possible denial of service vulnerability affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc1024130 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...