SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:0296-1)

MariaDB has been updated to version 10.0.22, which brings fixes for many security issues and other improvements. The following CVEs have been fixed : - 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:0265-1) (SLOTH)

java-170-openjdk was updated to version 7u95 to fix 9 security issues. bsc962743 - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:0256-1) (SLOTH)

java-180-openjdk was updated to version 7u95 to fix several security issues. bsc962743 The following vulnerabilities were fixed : - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays - CVE-2015-8472:...

SUSE SLED12 / SLES12 Security Update : ecryptfs-utils (SUSE-SU-2016:0241-1)

This update for ecryptfs-utils fixes the following issues : - CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems bsc962052 - CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks bsc920160 Note that Tenable Network...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2016:0225-1)

This update for gdk-pixbuf fixes the following security issues : - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the precedin...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2016:0224-1) (Logjam)

This update fixes the following security issues : - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

SUSE SLED12 / SLES12 Security Update : giflib (SUSE-SU-2016:0202-1)

This update for giflib fixes the following issues : - CVE-2015-7555: Heap overflow in giffix bsc960319 - bsc949160: Fix a memory leak Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0205-1)

The SUSE Linux Enterprise 12 kernel was updated to receive a security fix. Following security bug was fixed : - A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075, CVE-2016-0728. Note that Tenable Network Security has extract...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:0180-1)

This update for bind fixes the following issues : - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations bsc962189 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2016:0178-1)

This update for libxml2 fixes the following security issue : - CVE-2015-8710: Parsing short unclosed HTML comment could cause uninitialized memory access, which allowed remote attackers to read contents from previous HTTP requests depending on the application bsc960674 Note that Tenable Network...

SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2016:0173-1)

This update for rsync fixes two security issues and two non-security bugs. The following vulnerabilities were fixed : - CVE-2014-8242: Checksum collisions leading to a denial of service bsc900914 - CVE-2014-9512: Malicious servers could send files outside of the transferred directory bsc915410 Th...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:0160-1)

This update to tiff 4.0.6 fixes the following issues : - CVE-2015-7554: Out-of-bounds write in the thumbnail and tiffcmp tools allowed attacker to cause a denial of service or have unspecified further impact bsc960341 - bsc942690: potential out-of-bound write in NeXTDecode 2508 Note that Tenable...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:0174-1)

This update for bind fixes the following issues : - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations bsc962189 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0168-1)

The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-7550: A local user could have triggered a race between read and revoke in keyctl bnc958951. - CVE-2015-8539: A negatively instantiated user key could have been...

SUSE SLED12 / SLES12 Security Update : mozilla-nss (SUSE-SU-2016:0149-1) (SLOTH)

This update contains mozilla-nss 3.19.2.2 and fixes the following security issue : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature bsc959888. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2016:0118-1)

This update for openssh fixes the following issues : - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:0121-1)

MariaDB has been updated to version 10.0.22, which brings fixes for many security issues and other improvements. The following CVEs have been fixed : - 10.0.22: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870,...

SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2016:0092-1)

This update fixes the following security issue : CVE-2015-8327 adds backtick and semicolon to the list of illegal shell escape characters bsc957531. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2016:0109-1)

This update contains Wireshark 1.12.9 and fixes the following issues : - CVE-2015-7830: pcapng file parser could crash while copying an interface filter bsc950437 - CVE-2015-8711: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2016:0021-1)

This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : Also a non-security bug fixed : - Fix cases of wrong...