SUSE SLED12 / SLES12 Security Update : DirectFB (SUSE-SU-2015:0839-1)

DirectFB was updated to fix two security issues. The following vulnerabilities were fixed : - CVE-2014-2977: Multiple integer signedness errors could allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-base...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2015:0012-1)

mutt was updated to fix one security issue. This security issue was fixed : - Heap-based buffer overflow in muttsubstrdup CVE-2014-9116. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : gnome-settings-daemon (SUSE-SU-2015:0515-1)

gnome-settings-daemon was updated to fix a bug and a security issue : Security issue fixed : - CVE-2014-7300: The lockscreen can be bypassed with the Print Screen button. Bug fixed : - Do not hide the cursor while there was no mutter running bsc905158. Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : file (SUSE-SU-2014:1730-1)

This file update fixes the following security issues : - bsc910252: multiple denial of service issues resource consumption CVE-2014-8116 - bsc910253: denial of service issue resource consumption CVE-2014-8117 Note that Tenable Network Security has extracted the preceding description block directl...

SUSE SLED12 / SLES12 Security Update : Security Update for Linux Kernel (SUSE-SU-2015:0658-1)

The SUSE Linux Enterprise Server 12 kernel was updated to 3.12.39 to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-0777: The XEN usb backend could leak information to the guest system due to copying uninitialized memory. - CVE-2015-2150: Xen and the Linux...

SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2015:0478-1)

postgresql93 was updated to version 9.3.6 to fix four security issues. These security issues were fixed : - CVE-2015-0241: Fix buffer overruns in tochar bnc916953. - CVE-2015-0243: Fix buffer overruns in contrib/pgcrypto bnc916953. - CVE-2015-0244: Fix possible loss of frontend/backend protocol...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2015:0526-1)

glibc has been updated to fix four security issues. These security issues were fixed : - CVE-2014-7817: The wordexp function in GNU C Library aka glibc 2.21 did not enforce the WRDENOCMD flag, which allowed context-dependent attackers to execute arbitrary commands, as demonstrated by input...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2015:0457-1)

dbus-1 was updated to version 1.8.16 to fix one security issue. This update fixes the following security issue : - CVE-2015-0245: Do not allow non-uid-0 processes to send forged ActivationFailure messages. On Linux systems with systemd activation, this would allow a local denial of service...

SUSE SLED12 / SLES12 Security Update : unzip (SUSE-SU-2015:0355-1)

unzip was updated to fix one security issue. This security issue was fixed : - Out-of-bounds read/write in testcompreb in extract.c CVE-2014-9636. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : xorg-x11-server (SUSE-SU-2015:0398-1)

xorg-x11-server was updated to fix one security issue. This security issue was fixed : - CVE-2015-0255: Check string lengths in XkbSetGeometry request bnc915810 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : git (SUSE-SU-2015:0100-1)

This update fixes the following security issue : - CVE-2014-9390: arbitrary command execution vulnerability on case- insensitive file system bnc910756 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLES12 Security Update : squid (SUSE-SU-2015:0028-1)

This squid updated fixes the following security update. - bnc895773: fix off-by-one in snmp subsystem CVE-2014-6270 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2014:1724-1)

dbus-1 was updated to version 1.8.12 to fix one security issue. This security issue was fixed : - Increase dbus-daemons RLIMITNOFILE rlimit to 65536 to stop an attacker from exhausting the file descriptors of the system bus CVE-2014-7824. Note: This already includes the fix for the regression tha...

SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2014:1592-1)

This update for tigervnc provides the following fixes : - Fixed integer overflow flaw, leading to a heap-based buffer overflow in screen size handling. CVE-2014-8240 - Send correctly keys that don't type any characters, such as CTRL+Space. bnc906922 Note that Tenable Network Security has extracte...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2015:0288-1)

jasper was updated to fix two security issues. These security issues were fixed : - CVE-2014-8157: Off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allowed remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2015:0083-1)

This update fixes the following security issues - CVE-2014-8150: URL request injection vulnerability bnc911363 - CVE-2014-3707: duphandle read out of bounds bnc901924 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SuSE 11.3 Security Update : Xen (SAT Patch Number 9828)

The SUSE Linux Enterprise 11 Service Pack 3 Xen package was updated to fix various bugs and security issues. The following security issues have been fixed : - XSA-108: CVE-2014-7188: Improper MSR range used for x2APIC emulation. bnc897657 - XSA-106: CVE-2014-7156: Missing privilege level checks i...