SUSE SLES12 Security Update : xen (SUSE-SU-2016:3156-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host bsc1011652 - CVE-2016-9386: x86 null segments were not always treated as unusable allowing ...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3111-1)

This update for the Linux Kernel 3.12.51-5231 fixes several issues. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3119-1)

This update for the Linux Kernel 3.12.51-5239 fixes several issues. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3113-1)

This update for the Linux Kernel 3.12.60-5249 fixes several issues. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3146-1)

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3083-1)

This update for xen to version 4.5.5 fixes several issues. These security issues were fixed : - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host bsc1011652 - CVE-2016-9386: x86 null segments were not always treated as...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3067-1)

xen was updated to version 4.7.1 to fix 17 security issues. These security issues were fixed : - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host bsc1011652. - CVE-2016-9386: x86 null segments were not always treated as...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:3078-1)

This update for java-180-ibm fixes the following issues : - CVE-2016-5568: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT - CVE-2016-5556: Unspecified vulnerability allowed remote attackers to affect...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:3063-1)

The SUSE Linux Enterprise 12 kernel was updated to receive critical security fixes. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012754. - CVE-2016-8632...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2016:3048-1)

This update for MozillaFirefox fixes security issues. The following vulnerabilities were fixed in Firefox ESR 45.5.1 bbsc1012964 : - CVE-2016-9079: Use-after-free in SVG Animation could be used for code execution MFSA 2016-92 bsc1012964 Note that Tenable Network Security has extracted the precedi...

SUSE SLED12 / SLES12 Security Update : w3m (SUSE-SU-2016:3053-1)

This update for w3m fixes the following issues : - update to debian git version bsc1011293 addressed security issues: CVE-2016-9622: w3m: null deref bsc1012021 CVE-2016-9623: w3m: null deref bsc1012022 CVE-2016-9624: w3m: near-null deref bsc1012023 CVE-2016-9625: w3m: stack overflow bsc1012024...

SUSE SLED12 / SLES12 Security Update : libXi (SUSE-SU-2016:3047-1)

libXi was updated to fix two security issues. These security issues were fixed : - CVE-2016-7945: Integer overflows in libXI can cause out of boundary memory access or endless loops Denial of Service bsc1002998. - CVE-2016-7946: Insufficient validation of data in libXI can cause out of boundary...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2016:3043-1)

This update for java-171-ibm fixes the following issues : - Version update to 7.1-3.60 bsc1009280 Fixing the following CVE's: CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554, CVE-2016-5542 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : gc (SUSE-SU-2016:3057-1)

This update for gc fixes the following issues : - integer overflow in GCMALLOCATOMIC CVE-2016-9427, bsc1011276 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLED12 / SLES12 Security Update : libX11 (SUSE-SU-2016:3001-1)

libX11 was updated to fix a memory leak that was introduced with the security fix for CVE-2016-7942. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2016:3014-1)

This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5 bsc1009026 : - CVE-2016-5297: Incorrect argument length checking in JavaScript bsc1010401 - CVE-2016-9066: Integer overflow leading to a buffer overflow in...

SUSE SLED12 / SLES12 Security Update : php5 (SUSE-SU-2016:2975-1)

This update for php5 fixes the following issues : - CVE-2016-9137: Use After Free in unserialize bsc1008029 - CVE-2016-5773: ZipArchive class Use After Free Vulnerability in PHP's GC bsc986247 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:2971-1)

This update for pcre to version 8.39 bsc972127 fixes several issues. If you use pcre extensively please be aware that this is an update to a new version. Please make sure that your software works with the updated version. This version fixes a number of vulnerabilities that affect pcre and...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2016:2988-1)

This update for qemu fixes the following issues : - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 - Change package post script udevadm trigger calls to be device specific bsc1002116 - Address various security/stability issues - Fix OOB access in...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2952-1)

This update for ImageMagick fixes the following issues : - Memory allocation failure in AcquireMagickMemory CVE-2016-8862 bsc1007245 - update incomplete patch of CVE-2016-6823 bsc1001066 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...