SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2016:2154-1)

xerces-c was updated to fix one security issue. This security issue was fixed : - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2002-1)

This update for the Linux Kernel 3.12.51-5234 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:1997-1)

This update for java-170-openjdk fixes the following issues : - Update to 2.6.7 - OpenJDK 7u111 - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 - S8147771: Construction of static protection...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:2012-1)

This update for java-180-openjdk fixes the following issues : - Upgrade to version jdk8u101 icedtea 3.1.0 - New in release 3.1.0 2016-07-25 : - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 -...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:2105-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-9904: The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel did not properly check fo...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2016:2090-1) (httpoxy)

This update for apache2 fixes the following issues : - It used to be possible to set an arbitrary $HTTPPROXY environment variable for request handlers -- like CGI scripts -- by including a specially crafted HTTP header in the request CVE-2016-5387. As a result, these server components would...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2006-1)

This update for the Linux Kernel 3.12.55-5242 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2016:2136-1)

This update for krb5 fixes the following issues : - CVE-2016-3120: KDC NULL pointer Dereference Denial Of Service Vulnerability bsc991088 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED12 / SLES12 Security Update : cracklib (SUSE-SU-2016:2107-1)

This update for cracklib fixes the following issues : - Add patch to fix a buffer overflow in GECOS parser bsc992966 CVE-2016-6318 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

SUSE SLED12 / SLES12 Security Update : dosfstools (SUSE-SU-2016:2145-1)

dosfstools was updated to fix two security issues. These security issues were fixed : - CVE-2015-8872: The setfat function in fat.c in dosfstools might have allowed attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2016:2131-1)

Mozilla Firefox was updated to 45.3.0 ESR to fix the following issues bsc991809 : - MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards rv:48.0 / rv:45.3 - MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed - MFSA 2016-64/CVE-2016-2838...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:1999-1)

This update for the Linux Kernel 3.12.60-5249 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLED12 / SLES12 Security Update : ctags (SUSE-SU-2016:2097-1)

This update for ctags fixes the following issues : - CVE-2014-7204: Potential denial of service infinite loop and CPU and disk consumption via a crafted JavaScript file. bsc899486 - Missing Requirespost on coreutils as it is using rm1. bsc976920 Note that Tenable Network Security has extracted th...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2016:2106-1) (httpoxy)

This update for python fixes the following issues : - CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack bsc984751 - CVE-2016-5636: heap overflow when importing malformed zip files bsc985177 - CVE-2016-5699: incorrect validation of HTTP headers allow header injection bsc985348 -...

SUSE SLES12 Security Update : libtcnative-1-0 (SUSE-SU-2016:2209-1) (Logjam)

This update for libtcnative-1-0 fixes the following issues : - Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 bsc938945 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2076-1)

This update for ImageMagick fixes the following issues : - security update : - CVE-2016-6520: buffer overflow bsc991872 - CVE-2016-5010: Out-of-bounds read in CopyMagickMemory bsc991444 - CVE-2016-6491: Out-of-bounds read when processing crafted tiff files bsc991445 Note that Tenable Network...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2010-1)

This update for the Linux Kernel 3.12.51-5239 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLED12 / SLES12 Security Update : libstorage (SUSE-SU-2016:2189-1)

This update for libstorage fixes the following issues : - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:1784-1)

ImageMagick was updated to fix 66 security issues. These security issues were fixed : - CVE-2014-9810: SEGV in dpx file handler. bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:1710-1)

The SUSE Linux Enterprise 12 GA kernel was updated to receive one critical security fix. Security issue fixed : - CVE-2016-4997: A buffer overflow in 32bit compatsetsockopt iptables handling could lead to a local privilege escalation. bsc986362 Note that Tenable Network Security has extracted the...