SUSE SLED12 / SLES12 Security Update : gnutls (SUSE-SU-2015:1518-1)

gnutls was updated to fix several security vulnerabilities. - fix double free in certificate DN decoding GNUTLS-SA-2015-3bsc941794,CVE-2015-6251 - fix invalid read in octet string in bundled libtasn1 bsc929414,CVE-2015-3622 - fix ServerKeyExchange signature issue GNUTLS-SA-2015-2bsc929690 Note th...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2015:1519-1)

qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed : - CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape XSA-135 bsc932770 - CVE-2015-4037: Avoid predictable directory name for smb config...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2015:1511-1)

This update fixes the following issues : Security : - Fixed data-dependent timing variations in modular exponentiation related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks are Practical bsc920057 Bugfixes : - don't drop privileges when locking secure memory bsc938343 Note that Tenable...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2015:1481-1)

The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2015:1475-1)

LibTiff was updated to the 4.0.4 stable release fixing various security issues and bugs. These security issues were fixed : - CVE-2014-8127: Out-of-bounds write bnc914890. - CVE-2014-8128: Out-of-bounds write bnc914890. - CVE-2014-8129: Out-of-bounds write bnc914890. - CVE-2014-8130: Out-of-bound...

SUSE SLED12 / SLES12 Security Update : busybox (SUSE-SU-2015:1445-1)

-The following issues are fixed by this update: CVE-2014-9645: do not allow / in module names to avoid loading bad modules bnc914660 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2015:1433-1)

This update fixes the following security issue : - CVE-2015-1038: directory traversal vulnerability bnc912878 This could for the overwriting of arbitrary files through uncompressing a crafted archive, with the privileges of the user running 7z Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : Recommended update for openssl (SUSE-SU-2015:1410-1)

This update of openssl fixes two regressions. - A regression was caused by the security fix for CVE-2015-0287, where DSA keys were not correctly loaded from file anymore. bsc937492 - RSA key generation odd keylengths was entering an endless loop bsc937212 Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2015:1383-1)

This security update fixes the following issues : - Add libqt5-Fix-a-division-by-zero-processing-malformed-BMP.p atch - QTBUG-44547, bsc921999 CVE-2015-0295 - Add libqt5-Fixes-crash-in-bmp-and-ico-image-decoding.patch - bsc927806 CVE-2015-1858, bsc927807 CVE-2015-1859 - Add...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1384-1)

This security update of Xen fixes the following issues : - bsc939712 XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model CVE-2015-5165 - bsc939709 XSA-139: Use after free in QEMU/Xen block unplug protocol CVE-2015-5166 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:1377-1)

cups-filters was updated to fix two security issues. These security issues were fixed : - CVE-2015-3279: Texttopdf integer overflow incomplete fix for CVE-2015-3258 bsc937018. - CVE-2015-3258: Texttopdf heap-based buffer overflow bsc936281. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2015:1359-1)

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed : - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

SUSE SLED12 / SLES12 Security Update : e2fsprogs (SUSE-SU-2015:1341-1)

Two security issues were fixed in e2fsprogs : Security issues fixed : - CVE-2015-0247: Various heap overflows were fixed in e2fsprogs fsck, dumpe2fs, e2image.... - CVE-2015-1572: Fixed a potential buffer overflow in closefs bsc918346 Note that Tenable Network Security has extracted the preceding...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2015:1331-1) (Bar Mitzvah) (Logjam)

IBM Java was updated to 7.1-3.10 to fix several security issues. The following vulnerabilities were fixed : - CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system. -...

SUSE SLED12 / SLES12 Security Update : SUSE Linux Enterprise 12 kernel (SUSE-SU-2015:1324-1)

The SUSE Linux Enterprise 12 kernel was updated to 3.12.44 to receive various security and bugfixes. These features were added : - mpt2sas: Added Reply Descriptor Post Queue RDPQ Array support bsc854824. - mpt3sas: Bump mpt3sas driver version to 04.100.00.00 bsc854817. Following security bugs wer...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2015:1319-1) (Bar Mitzvah) (Logjam)

OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1302-1)

xen was updated to fix two security issues. These security issues were fixed : - CVE-2015-3259: xl command line config handling stack overflow bsc935634, XSA-137. - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344. The update package also includes non-security fixes. See...

SUSE SLES12 Security Update : krb5 (SUSE-SU-2015:1276-1)

krb5 was updated to fix four security issues. These security issues were fixed : - CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name bsc910457. - CVE-2014-5354: NULL pointer dereference when using keyless entries bsc910458. - CVE-2014-5355: Denial of service...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2015:1273-1) (BACKRONYM)

This update fixes the following security issues : - Logjam attack: mysql uses 512 bit dh groups in SSL bnc934789 - CVE-2015-3152: mysql --ssl does not enforce SSL bnc924663 - CVE-2014-8964: heap buffer overflow bnc906574 - CVE-2015-2325: heap buffer overflow in compilebranch bnc924960 -...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2015:1269-1)

MozillaFirefox, mozilla-nspr, and mozilla-nss were updated to fix 17 security issues. For more details please check the changelogs. - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards bsc935979. - CVE-2015-2728: Type confusion in Indexed Database Manager bsc935979. -...