SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2015:0743-1)

mariadb was updated to version 10.0.16 to fix 40 security issues. These security issues were fixed : - CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via...

SUSE SLED12 / SLES12 Security Update : unzip (SUSE-SU-2015:0355-1)

unzip was updated to fix one security issue. This security issue was fixed : - Out-of-bounds read/write in testcompreb in extract.c CVE-2014-9636. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2015:0288-1)

jasper was updated to fix two security issues. These security issues were fixed : - CVE-2014-8157: Off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allowed remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000...

SUSE SLES12 Security Update : squid (SUSE-SU-2015:0028-1)

This squid updated fixes the following security update. - bnc895773: fix off-by-one in snmp subsystem CVE-2014-6270 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it...

SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2015:0478-1)

postgresql93 was updated to version 9.3.6 to fix four security issues. These security issues were fixed : - CVE-2015-0241: Fix buffer overruns in tochar bnc916953. - CVE-2015-0243: Fix buffer overruns in contrib/pgcrypto bnc916953. - CVE-2015-0244: Fix possible loss of frontend/backend protocol...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2015:0526-1)

glibc has been updated to fix four security issues. These security issues were fixed : - CVE-2014-7817: The wordexp function in GNU C Library aka glibc 2.21 did not enforce the WRDENOCMD flag, which allowed context-dependent attackers to execute arbitrary commands, as demonstrated by input...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2015:0457-1)

dbus-1 was updated to version 1.8.16 to fix one security issue. This update fixes the following security issue : - CVE-2015-0245: Do not allow non-uid-0 processes to send forged ActivationFailure messages. On Linux systems with systemd activation, this would allow a local denial of service...

SUSE SLED12 / SLES12 Security Update : xorg-x11-server (SUSE-SU-2015:0398-1)

xorg-x11-server was updated to fix one security issue. This security issue was fixed : - CVE-2015-0255: Check string lengths in XkbSetGeometry request bnc915810 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES12 Security Update : git (SUSE-SU-2015:0100-1)

This update fixes the following security issue : - CVE-2014-9390: arbitrary command execution vulnerability on case- insensitive file system bnc910756 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2015:0083-1)

This update fixes the following security issues - CVE-2014-8150: URL request injection vulnerability bnc911363 - CVE-2014-3707: duphandle read out of bounds bnc901924 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2014:1592-1)

This update for tigervnc provides the following fixes : - Fixed integer overflow flaw, leading to a heap-based buffer overflow in screen size handling. CVE-2014-8240 - Send correctly keys that don't type any characters, such as CTRL+Space. bnc906922 Note that Tenable Network Security has extracte...

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2014:1724-1)

dbus-1 was updated to version 1.8.12 to fix one security issue. This security issue was fixed : - Increase dbus-daemons RLIMITNOFILE rlimit to 65536 to stop an attacker from exhausting the file descriptors of the system bus CVE-2014-7824. Note: This already includes the fix for the regression tha...

SuSE 11.3 Security Update : Xen (SAT Patch Number 9828)

The SUSE Linux Enterprise 11 Service Pack 3 Xen package was updated to fix various bugs and security issues. The following security issues have been fixed : - XSA-108: CVE-2014-7188: Improper MSR range used for x2APIC emulation. bnc897657 - XSA-106: CVE-2014-7156: Missing privilege level checks i...