SUSE SLES12 Security Update : bind (SUSE-SU-2016:2401-1)

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES12 Security Update : openssl (SUSE-SU-2016:2387-1)

This update for openssl fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High - OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low - Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 - Constant time flag no...

SUSE SLES12 Security Update : libstorage (SUSE-SU-2016:2355-1)

This update for libstorage fixes the following issues : - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2016:2345-1)

This update for libgcrypt fixes the following issues : - RNG prediction vulnerability bsc994157, CVE-2016-6313 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2016:2347-1)

IBM Java 7.1 was updated to version 7.1-3.50 to fix the following security issues: CVE-2016-3485 CVE-2016-3511 CVE-2016-3598 Please see https://www.ibm.com/developerworks/java/jdk/alerts/ for more information. - Add hwkeytool binary for zSeries. Note that Tenable Network Security has extracted th...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2016:2330-1)

This update for curl fixes the following issues: Security issues fixed : - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390 - CVE-2016-5421: use of connection struct after free bsc991391 - CVE-2016-7141: Fixe...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:2303-1)

This update for gd fixes the following issues : - CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file bsc991436 - CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd bsc987577 - CVE-2016-6128: Invalid color index not properly handled bsc991710 -...

SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2016:2305-1)

This update for wpasupplicant fixes the following issues : - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. bnc930077 - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. bnc930078 - CVE-2015-4143: EAP-pwd missing payload length validation...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2016:2263-1)

This update for Perl fixes the following issues : - CVE-2016-6185: Xsloader looking at a 'eval' directory. bsc988311 - CVE-2016-1238: Searching current directory for optional modules. bsc987887 - CVE-2015-8853: Regular expression engine hanging on bad utf8. bsc - CVE-2016-2381: Environment dup...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:2271-1)

This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images bsc964225 - CVE-2016-3186: Buffer overflow in gif2tiff bnc973340. - CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat bsc98735...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2016:2248-1)

This update for mariadb fixes the following issues : - CVE-2016-3477: Unspecified vulnerability in subcomponent parser bsc991616 - CVE-2016-3521: Unspecified vulnerability in subcomponent types bsc991616 - CVE-2016-3615: Unspecified vulnerability in subcomponent dml bsc991616 - CVE-2016-5440:...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2016:2226-1)

This update for wget fixes the following issues : - Fix for HTTP to a FTP redirection file name confusion vulnerability bsc984060, CVE-2016-4971. - Work around a libidn vulnerability bsc937096, CVE-2015-2059. - Fix for wget fails with basicauth: Failed writing HTTP request: Bad file descriptor...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:2218-1)

This update for mariadb fixes the following issues : - CVE-2016-3477: Unspecified vulnerability in subcomponent parser bsc991616 - CVE-2016-3521: Unspecified vulnerability in subcomponent types bsc991616 - CVE-2016-3615: Unspecified vulnerability in subcomponent dml bsc991616 - CVE-2016-5440:...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2016:2053-1)

This update for libvirt fixes one security issue : - CVE-2016-5008: Empty VNC password disables authentication. bsc987527 Additionally, the update includes the following non-security fixes : - Improve waiting for block job readines in virsh. bsc989755 - Parse negative values in augeas lenses...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:1998-1)

This update for the Linux Kernel 3.12.60-5254 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLED12 / SLES12 Security Update : fontconfig (SUSE-SU-2016:2190-1)

This update for fontconfig fixes the following issues : - security update : - CVE-2016-5384: Possible double free due to insufficiently validated cache files bsc992534 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2016:2154-1)

xerces-c was updated to fix one security issue. This security issue was fixed : - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:1995-1)

This update for the Linux Kernel 3.12.51-5231 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLED12 / SLES12 Security Update : libidn (SUSE-SU-2016:2079-1)

This update for libidn fixes the following issues : - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 ...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2001-1)

This update for the Linux Kernel 3.12.55-5245 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...