SUSE SLED12 / SLES12 Security Update : perl-YAML-LibYAML (SUSE-SU-2015:0953-2)

perl-YAML-LibYAML was updated to fix three security issues. These security issues were fixed : - CVE-2013-6393: The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service application crash and...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2015:0960-1)

This update to Firefox 31.7.0 ESR bsc930622 fixes the following issues : - MFSA 2015-46/CVE-2015-2708/CVE-2015-2709 bmo1120655, bmo1143299, bmo1151139, bmo1152177, bmo1111251, bmo1117977, bmo1128064, bmo1135066, bmo1143194, bmo1146101, bmo1149526, bmo1153688, bmo1155474 Miscellaneous memory safet...

SUSE SLES12 Security Update : perl-YAML-LibYAML (SUSE-SU-2015:0953-1)

perl-YAML-LibYAML was updated to fix three security issues. These security issues were fixed : - CVE-2013-6393: The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service application crash and...

SUSE SLED12 / SLES12 Security Update : tigervnc, fltk (SUSE-SU-2015:0939-1)

tigervnc and fltk were updated to fix security issues and non-security bugs. This security issue was fixed : - CVE-2015-0255: Information leak in the XkbSetGeometry request of X servers bnc915810. The update package also includes non-security fixes. See advisory for details. Note that Tenable...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2015:0003-1)

This libxml2 update fixes the following security and non-security issues : - Fix a denial of service via recursive entity expansion. CVE-2014-3660, bnc901546, bgo738805 - Fix a regression in xzlib compression support. bnc908376 Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : file (SUSE-SU-2014:1555-1)

file was updated to fix one security issue. This security issue was fixed : - Out-of-bounds read in elf note headers CVE-2014-3710. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:0923-1) (Venom)

XEN was updated to fix two security issues and bugs. Security issues fixed : - CVE-2015-3340: Xen did not initialize certain fields, which allowed certain remote service domains to obtain sensitive information from memory via a 1 XENDOMCTLgettscinfo or 2 XENSYSCTLgetdomaininfolist request. -...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2015:0349-1)

QEMU was updated to fix various bugs and security issues. Following security issues were fixed: CVE-2014-8106: Heap-based buffer overflow in the Cirrus VGA emulator hw/display/cirrusvga.c in QEMU allowed local guest users to execute arbitrary code via vectors related to blit regions. -...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2014:1464-1)

wget was updated to fix one security issue. This security issue was fixed : - FTP symlink arbitrary filesystem access CVE-2014-4877. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLES12 Security Update : krb5 (SUSE-SU-2015:0290-1)

MIT kerberos krb5 was updated to fix several security issues and bugs. Security issues fixed: CVE-2014-5351: The kadm5randkeyprincipal3 function in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 sent old keys in a response to a -randkey -keepold request, which allowed remote...

SUSE SLED12 / SLES12 Security Update : libzip (SUSE-SU-2015:0668-1)

Libzip was updated to fix one security issue. A zip file with an unusually large number of entries could have caused an integer overflow leading to a write past the heap boundary, crashing the application. CVE-2015-2331 bnc923240 Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2015:0412-1)

Mozilla Firefox was updated to version 31.5.0 ESR to fix five security issues. These security issues were fixed : - CVE-2015-0836: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.5 allowed remote attackers to cause a denial of service memory corruption and...

SUSE SLED12 / SLES12 Security Update : libjpeg-turbo, libjpeg62-turbo (SUSE-SU-2015:0029-1)

libjpeg-turbo, libjpeg62-turbo were updated to fix one security issue. This security issue was fixed : - Passing special crafted jpeg file smashes stack CVE-2014-9092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SUSE SLED12 / SLES12 Security Update : xorg-x11-server (SUSE-SU-2015:0047-1)

This X.Org update fixes the following security issues : - denial of service due to unchecked malloc in client authentication CVE-2014-8091 - integer overflows calculating memory needs for requests: CVE-2014-8092: X11 core protocol requests CVE-2014-8093: GLX extension CVE-2014-8094: DRI2 extensio...

SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2015:0270-1)

util-linux was updated to fix one security issue. This security issue was fixed : - CVE-2014-9114: Using crafted block devices e.g. USB sticks it was possibly to inject code via libblkid. libblkid was fixed to care about unsafe chars and possible buffer overflow in cache bnc907434 The update...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2015:0865-1)

ntp was updated to fix two security related flaws as well as 'slew' mode handling for leap seconds. The following vulnerabilities were fixe : - ntpd could accept unauthenticated packets with symmetric key crypto. CVE-2015-1798 - ntpd authentication did not protect symmetric associations against D...

SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2015:0667-1)

libarchive was updated to fix a directory traversal in the bsdcpio tool, which allowed attackers supplying crafted archives to overwrite files. CVE-2015-2304 Also, a integer overflow was fixed that could also overflow buffers. CVE-2013-0211 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : gdm (SUSE-SU-2015:0803-1)

The GNOME Display Manager was updated to fix several bugs : Security issue fixed : - Removed gdm-fingerprint and gdm-smartcard pamfiles that allowed unlocking the screen without password or fingerprint if fingerprint reader support was enabled. boo900836. Bugs fixed : - Fix support for...

SUSE SLED12 / SLES12 Security Update : spice (SUSE-SU-2015:0884-1)

The remote desktop software SPICE was updated to address one security issue. The following vulnerabilitiy was fixed : - A stack-based buffer overflow in the password handling code allowed remote attackers to cause a denial of service crash via a long password in a SPICE ticket. bsc848279,...

SUSE SLED12 / SLES12 Security Update : update for rsyslog (SUSE-SU-2014:1438-1)

This update for rsyslog provides the following fixes : - Fixed remote PRI DoS vulnerability patch CVE-2014-3683, bnc899756 - Removed broken, unsupported and dropped by upstream zpipe utility from rsyslog-diag-tools package bnc890228 Note that Tenable Network Security has extracted the preceding...