SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0248-1)

This update for the Linux Kernel 3.12.60-5249 fixes several issues. The following security bugs were fixed : - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0244-1)

This update for the Linux Kernel 3.12.55-5242 fixes several issues. The following security bugs were fixed : - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0249-1)

This update for the Linux Kernel 3.12.55-5245 fixes several issues. The following security bugs were fixed : - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0245-1)

This update for the Linux Kernel 3.12.60-5257 fixes several issues. The following security bugs were fixed : - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:0211-1)

This update for gstreamer-plugins-base fixes the following issues : - CVE-2016-9811: Malicious file could could cause an invalid read leading to crash bsc1013669 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2017:0203-1)

This update for apache2 fixes the following issues : - CVE-2016-8740 Server memory can be exhausted and service denied when HTTP/2 is used bsc1013648 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-base (SUSE-SU-2017:0189-1)

CVE-2016-9811: out of bound memory read could lead to crash bsc1013669. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:0127-1)

qemu was updated to fix several issues. These security issues were fixed : - CVE-2016-9102: Memory leak in the v9fsxattrcreate function in hw/9pfs/9p.c in allowed local guest OS administrators to cause a denial of service memory consumption and QEMU process crash via a large number of Txattrcreat...

SUSE SLES12 Security Update : perl-DBD-mysql (SUSE-SU-2017:0123-1)

This update for perl-DBD-mysql fixes the following issues : - CVE-2016-1251: A use-after-free when used with mysqlserverprepare=1 bsc1012546. - CVE-2016-1246: Buffer overflow allowed context-dependent attackers to cause a denial of service crash via vectors related to an error message bsc1002626....

SUSE SLES12 Security Update : squid (SUSE-SU-2017:0128-1)

This update for squid fixes the following issues : - CVE-2016-10003: Prevent incorrect forwarding of cached private responses when Collapsed Forwarding feature is enabled. This allowed remote attacker proxy user to discover private and sensitive information about another user bsc1016169. -...

SUSE SLES12 Security Update : squid (SUSE-SU-2017:0116-1)

This update for squid fixes the following issues : - CVE-2016-10002: Fixed incorrect processing of responses to If-None-Modified HTTP conditional requests. This allowed responses containing private data to clients it should not have reached bsc1016168 - CVE-2014-9749: Prevent nonce replay in Dige...

SUSE SLES12 Security Update : bind (SUSE-SU-2017:0113-1)

This update for bind fixes the following issues : - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2017:0111-1)

This update for bind fixes the following issues : - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2017:0102-1)

This update of freeradius-server fixes several issues. Security issue fixed : - CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates bsc935573 Non security issues fixed : - Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems by relaxing a too...

SUSE SLED12 / SLES12 Security Update : rrdtool (SUSE-SU-2017:0103-1)

This update for rrdtool provides the following fixes : - CVE-2013-2131: Enhance imginfo format validation checks to prevent crashes. bsc828003 - Add rrdtool-cached sub-package to SLE 12-SP1. bsc967671 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0084-1)

This update for jasper fixes the following issues : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2016:3288-1)

This update for gstreamer-plugins-good fixes the following issues : - CVE-2016-9807: flic decoder invalid read could lead to crash bsc1013655 - CVE-2016-9634: flic out-of-bounds write could lead to code execution bsc1012102 - CVE-2016-9635: flic out-of-bounds write could lead to code execution...

SUSE SLES12 Security Update : samba (SUSE-SU-2016:3299-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

SUSE SLED12 / SLES12 Security Update : libcares2 (SUSE-SU-2016:3286-1)

This update for libcares2 fixes the following issues : - Add patch to fix single byte out of buffer write CVE-2016-5180, bsc1007728 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0004-1)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for...