SUSE SLED12 / SLES12 Security Update : libmspack (SUSE-SU-2016:0011-1)

libmspack was updated to fix security issues. These security issues were fixed : - CVE-2014-9732: The cabdextract function in cabd.c in libmspack did not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allowed remote attackers to cause ...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2016:0049-1)

security update: This update fixes the following security issues : - CVE-2015-1819 Enforce the reader to run in constant memory bnc928193 - CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors bnc951734 - CVE-2015-7942 Fix another variation...

SUSE SLED12 / SLES12 Security Update : libpng15 (SUSE-SU-2016:0041-1)

This update fixes the following security issue : - CVE-2015-8126 Possible buffer overflow vulnerabilities in pnggetPLTE and pngsetPLTE functions could cause a denial of service application crash or possibly have an unspecified impact bsc954980 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : libpng12 (SUSE-SU-2016:0050-1)

This update fixes the following security issue - CVE-2015-8126 Multiple buffer overflows in the pngsetPLTE and pnggetPLTE functions allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact bsc954980 Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2016:0027-1)

This update fixes the following security issue : - CVE-2015-8126 Multiple buffer overflows in the pngsetPLTE and pnggetPLTE functions allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact bsc954980 Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : xscreensaver (SUSE-SU-2015:2053-2)

The xscreensaver package was updated to fix the following security issue : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : grub2 (SUSE-SU-2015:2399-1)

This update for grub2 provides the following fixes and enhancements : Security issue fixed : - Fix buffer overflows when reading username and password. bsc956631, CVE-2015-8370 Non security issues fixed : - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2015:2088-2)

The LibVNCServer package was updated to fix the following security issues : - bsc897031: fix several security issues : - CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. - CVE-2014-6052: Lack of malloc return value checking on client side. - CVE-2014-6053: Server crash on a ve...

SUSE SLED12 / SLES12 Security Update : grub2 (SUSE-SU-2015:2387-1)

Fix buffer overflows when reading username and password. bsc956631, CVE-2015-8370 - Check MS-DOS header to find PE file header. bsc954126 - Use dirname for copying Xen kernel and initrd to esp. bsc955493 - Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty. bsc954519 - Add luks,...

SUSE SLED12 / SLES12 Security Update : xfsprogs (SUSE-SU-2015:2384-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2015:2335-1)

Mozilla Firefox was updated to version 38.5.0 ESR to fix the following issues : - MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards rv:43.0 / rv:38.5 - MFSA 2015-138/CVE-2015-7210 A use-after-free in WebRTC when datachannel is used after being destroyed - MFSA...

SUSE SLED12 / SLES12 Security Update : gpg2 (SUSE-SU-2015:2171-2)

The gpg2 package was updated to fix the following security and non security issues : - CVE-2015-1606: Fixed invalid memory read using a garbled keyring bsc918089. - CVE-2015-1607: Fixed memcpy with overlapping ranges bsc918090. - bsc955753: Fixed a regression of 'gpg --recv' due to keyserver impo...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2015:2341-1)

This update fixes the following security issue : - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2015:2342-1)

This update for compat-openssl098 fixes the following issues : Security issue fixed:; - CVE-2015-3195: When presented with a malformed X509ATTRIBUTE structure OpenSSL would leak memory. This structure is used by the PKCS7 and CMS routines so any application which reads PKCS7 or CMS data from...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2015:2359-1)

This update for bind fixes the following security issue : - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-2)

The libsndfile package was updated to fix the following security issue : - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519. Note that Tenabl...

SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:2183-2)

The strongswan package was updated to fix the following security issue : - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 / SLES12 Security Update : Recommended update for libksba (SUSE-SU-2015:2056-2)

The libksba package was updated to fix the following security issues : - Fixed an integer overflow, an out of bounds read and a stack overflow issues bsc926826. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2015:2195-2)

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed : - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

SUSE SLES12 Security Update : Recommended update for git (SUSE-SU-2015:2325-1)

The git package was updated to fix the following security issue : - CVE-2015-7545: Fix remote code execution with recursive fetch of submodules bsc948969. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...