SUSE SLED12 / SLES12 Security Update : yast2-users (SUSE-SU-2016:1138-1)

yast2-users was updated to fix one security issue. This security issue was fixed : - CVE-2016-1601: Empty passwords fields in /etc/shadow after SLES 12 SP1 autoyast installation bsc974220. This update includes a script that fixes installations that we're affected by this problem. It is run...

SUSE SLED12 / SLES12 Security Update : giflib (SUSE-SU-2016:1140-1)

giflib was updated to fix one security issue. This security issue was fixed : - CVE-2016-3977: Heap buffer overflow in gif2rgb bsc974847. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED12 / SLES12 Security Update : cairo (SUSE-SU-2016:1100-1)

This update for cairo fixes the following issues : - CVE-2016-3190: Fixed an out-of-bound read in the fillxrgb32lerpopaquespans function that might lead to a crash when processing a maliciously crafted image file bsc971964. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2016:1089-1)

libgcrypt was updated to fix one security issue. This security issue was fixed : - CVE-2015-7511: Side-channel attack on ECDH with Weierstrass curves bsc965902. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : Chromium (SUSE-SU-2016:1060-1)

Chromium was updated to 50.0.2661.75 to fix the following vulnerabilities : - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding - CVE-2016-1652: Universal XSS in extension bindings - CVE-2016-1653: Out-of-bounds write in V8 - CVE-2016-1654: Uninitialized memory read in media -...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:1024-1) (Badlock)

samba was updated to fix seven security issues. These security issues were fixed : - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...

SUSE SLED12 / SLES12 Security Update : xerces-c (SUSE-SU-2016:1026-1)

This update for xerces-c fixes the following security issue : - CVE-2016-0729: Fixed mishandling certain kinds of malformed input documents, that resulted in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2016:0994-1)

This update for krb5 fixes the following security issue : - CVE-2016-3119: An authenticated attacker with permission to modify a principal entry could have caused kadmind to dereference a NULL pointer by supplying an empty DB argument to the modifyprincipal command, if kadmind is configured to us...

SUSE SLED12 / SLES12 Security Update : gcc5 (SUSE-SU-2016:0963-1)

The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed : - Fix C++11 std::randomdevice short read issue that could lead to predictable randomness. CVE-2015-5276, bsc945842 The update package also includes...

SUSE SLES12 Security Update : quagga (SUSE-SU-2016:0953-1)

This update for quagga fixes one security issue : - bsc770619: Disallow unprivileged users to enter config directory /etc/quagga group: quagga, mode: 750 and read configuration files installed there group: quagga, mode: 640. Note that Tenable Network Security has extracted the preceding descripti...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:0957-1)

This update for java-180-openjdk to version jdk8u77-b03 fixes the following security issue : - CVE-2016-0636: Improve MethodHandle consistency, which had allowed attackers to execute code. bsc972468 Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:0959-1)

The OpenJDK Java java-170-openjdk was updated to 2.6.5 to fix the following issues : Update to 2.6.5 - OpenJDK 7u99 bsc972468 - Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency - Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX...

SUSE SLES12 Security Update : quagga (SUSE-SU-2016:0936-1)

This update for quagga fixes the following security issue : - CVE-2016-2342: Quagga was extended the prefixlen check to ensure it is within the bound of the NLRI packet data and the on-stack prefix structure and the maximum size for the address family bsc970952. Note that Tenable Network Security...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2016:0923-1)

This update to libvirt 1.2.18.2 fixes the following minor security issue : - CVE-2015-5313: Directory traversal allowed privilege escalation bsc953110 The following bugs were fixed : - bsc952849: Don't add apparmor deny rw rule for 9P readonly mounts. - bsc960305: libxl: support parsing and...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2016:0884-1)

ghostscript was updated to fix one security issue and one bug. The following vulnerability was fixed : - CVE-2015-3228: Specially crafted ps files could have caused an out of bound read/write due to an integer overflow, causing a segfault in the application or having unspecified further impact...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:0873-1)

xen was updated to fix 44 security issues. These security issues were fixed : - CVE-2013-4533: Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-rxlevel value in a savevm image...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:0814-1)

"This update for samba fixes the following issues : - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target. bso11648 bsc968222 Also the following bugs were fixed : - Add quotes around path of update-apparmor-samba-profile; bsc962177. - Prevent access...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:0780-1)

This update for bind fixes the following issues : Fix two assertion failures that can lead to a remote denial of service attack : - CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. bsc970072 - CVE-2016-1286: An error when...

SUSE SLED12 / SLES12 Security Update : graphite2 (SUSE-SU-2016:0779-1)

This update for graphite2 fixes the following issues : - CVE-2016-1521: The directrun function in directmachine.cpp in Libgraphite did not validate a certain skip operation, which allowed remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service...

SUSE SLES12 Security Update : git (SUSE-SU-2016:0796-1)

This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...