SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:2726-1)

IBM Java 8 was updated to version 8.0-3.10 to fix the following security issues : - CVE-2016-3485: Unspecified vulnerability allowed local users to affect integrity via vectors related to Networking - CVE-2016-3511: Unspecified vulnerability allowed local users to affect confidentiality, integrit...

SUSE SLES12 Security Update : bind (SUSE-SU-2016:2696-1)

This update for bind fixes the following security issue : - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829. Note that Tenable Networ...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2016:2699-1)

This update for curl fixes the following security issues : - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8622: URL unescape heap overflow via integer truncation bsc1005643 - CVE-2016-8621: curlgetdate read out of...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:2697-1)

This update for bind fixes the following issues : - A defect in BIND's handling of responses containing a DNAME answer had the potential to trigger assertion errors in the server remotely, thereby facilitating a denial-of-service attack. CVE-2016-8864, bsc1007829. - Fix BIND to return a valid...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:2668-1)

This update for gd fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2659-1) (Dirty COW)

This update for the Linux Kernel 3.12.55-5245 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004419. - CVE-2016-4997: The compat IPTSOSETREPLACE and...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2016:2653-1) (httpoxy)

This update provides Python 3.4.5, which brings many fixes and enhancements. The following security issues have been fixed : - CVE-2016-1000110: CGIHandler could have allowed setting of HTTPPROXY environment variable based on user-supplied Proxy request header. bsc989523 - CVE-2016-0772: A...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2016:2654-1)

This update for ghostscript fixes the following issues : - CVE-2016-8602: Insufficient parameter check in .sethalftone5 bsc1004237. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2657-1) (Dirty COW)

This update for the Linux Kernel 3.12.60-5254 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004419. Note that Tenable Network Security has extracted the precedi...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2016:2650-1)

This update for libxml2 fixes the following issues : - CVE-2016-4658: Use after free via namespace node in XPointer ranges bsc1005544. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2658-1) (Dirty COW)

This update for the Linux Kernel 3.12.60-5249 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004419. - CVE-2016-4997: The compat IPTSOSETREPLACE and...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2655-1) (Dirty COW)

This update for the Linux Kernel 3.12.55-5242 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004419. - CVE-2016-4997: The compat IPTSOSETREPLACE and...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2593-1) (Dirty COW)

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to fix two issues. This security bug was fixed : - CVE-2016-5195: Local privilege escalation using MAPPRIVATE. It is reportedly exploited in the wild bsc1004418. The update package also includes non-security fixes. See advisory for details...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2632-1) (Dirty COW)

This update for the Linux Kernel 3.12.51-5234 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004418. - CVE-2016-4997: The compat IPTSOSETREPLACE and...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:2592-1) (Dirty COW)

The SUSE Linux Enterprise 12 SP1 kernel was updated to fix two issues. This security bug was fixed : - CVE-2016-5195: Local privilege escalation using MAPPRIVATE. It is reportedly exploited in the wild bsc1004418. The update package also includes non-security fixes. See advisory for details. Note...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2636-1) (Dirty COW)

This update for the Linux Kernel 3.12.51-5231 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004419. - CVE-2016-4997: The compat IPTSOSETREPLACE and...

SUSE SLES12 Security Update : samba (SUSE-SU-2016:2570-1)

This update for samba provides the following fix: Following security issue was fixed : - CVE-2016-2119: Prevent client-side SMB2 signing downgrade. bsc986869 Also the following bugs were fixed : - Fix possible ctdb crash when opening sockets with htonsIPPROTORAW. bsc969522 - Honor smb.conf socket...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2016:2565-1)

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed : - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included : - Change the default...

SUSE SLES12 Security Update : quagga (SUSE-SU-2016:2618-1)

This update for quagga fixes the following issue : - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code bsc1005258. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2633-1) (Dirty COW)

This update for the Linux Kernel 3.12.51-5239 fixes several issues. The following security bugs were fixed : - CVE-2016-5195: A local privilege escalation using MAPPRIVATE was fixed, which is reportedly exploited in the wild bsc1004419. - CVE-2016-4997: The compat IPTSOSETREPLACE and...