SUSE SLED15 / SLES15 Security Update : soundtouch (SUSE-SU-2018:3610-1)

This update for soundtouch fixes the following issues : CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service heap corruption from size inconsistency or possibly have unspecified other impact, as demonstrated by SoundStretch. bsc1108632 CVE-2018-17097: The...

SUSE SLED15 / SLES15 Security Update : soundtouch (SUSE-SU-2018:3068-1)

This update for soundtouch fixes the following security issue : CVE-2018-1000223: Prevent buffer overflow in WavInFile::readHeaderBlock that could have resulted in arbitrary code execution when opening maliocius file in soundstretch utility bsc1103676 Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : rpm (SUSE-SU-2018:2073-1)

This update for rpm fixes the following issues: This security vulnerability was fixed : - CVE-2017-7500: Fixed symlink attacks during RPM installation bsc943457 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2018:3045-1)

This update for java-180-openjdk to the jdk8u181 icedtea 3.9.0 release fixes the following issues : These security issues were fixed : CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2018:4190-1)

This update for git fixes the following issues : Security issue fixed : CVE-2018-19486: Fixed git that executed commands from the current working directory as if '.' were at the end of $PATH in certain cases involving the runcommand API and run-command.c, because there was bsc1117257. Note that...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2018:1926-1) (Spectre)

This update for ucode-intel fixes the following issues: The microcode bundles was updated to the 20180703 release For the listed CPU chipsets this fixes CVE-2018-3640 Spectre v3a and helps mitigating CVE-2018-3639 Spectre v4 bsc1100147 bsc1087082 bsc1087083. More information on:...

SUSE SLED15 / SLES15 Security Update : fuse (SUSE-SU-2018:3260-1)

This update for fuse fixes the following issues : CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse...

SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2018:4189-1)

This update for bluez fixes the following issues : Security issues fixed : CVE-2016-9800: Fixed a buffer overflow in pincodereplydump function bsc1013721 CVE-2016-9801: Fixed a buffer overflow in setextctrl function bsc1013732 Note that Tenable Network Security has extracted the preceding...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2018:1918-1)

This update for nodejs8 to version 8.11.3 fixes the following issues: These security issues were fixed : - CVE-2018-7167: Calling Buffer.fill or Buffer.alloc with some parameters could have lead to a hang which could have resulted in a DoS bsc1097375. - CVE-2018-7161: By interacting with the http...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2018:2298-1)

This update for MozillaFirefox to the 52.9 ESR release fixes the following issues: These security issues were fixed : - Firefox ESR 52.9 : - CVE-2018-5188 Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 bsc1098998. - CVE-2018-12368 No warning when opening executable...

SUSE SLED15 / SLES15 Security Update : libvorbis (SUSE-SU-2018:1885-1)

This update for libvorbis fixes the following issues: The following security issue was fixed : - Fixed the validation of channels in mapping0forward, which previously allowed remote attackers to cause a denial of service via specially crafted files CVE-2018-10392, bsc1091070 Note that Tenable...

SUSE SLED15 / SLES15 Security Update : pango (SUSE-SU-2018:2763-1)

This update for pango fixes the following issues : Security issue fixed : CVE-2018-15120: Fixed a denial of service when parsing emoji bsc1103877 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2018:3927-1)

This update for qemu fixes the following issues : Security issues fixed : CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2018:3942-1)

This update for postgresql10 fixes the following issues : Security issue fixed : CVE-2018-16850: Fixed improper quoting of transition table names when pgdump emits CREATE TRIGGER could have caused privilege escalation bsc1114837. Non-security issues fixed: Update to release 10.6 : -...

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2018:4086-1)

This update for qemu fixes the following issues : Security issue fixed : CVE-2018-16847: Fixed an out of bounds r/w buffer access in cmb operations bsc1114529. Non-security issue fixed: Fixed serial console issue in SLES 12 SP2 that triggered a qemu-kvm bug bsc1108474. Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2018:1889-1)

This update for tiff fixes the following security issues: These security issues were fixed : - CVE-2017-18013: Fixed a NULL pointer dereference in the tifprint.cTIFFPrintDirectory function that could have lead to denial of service bsc1074317. - CVE-2018-10963: Fixed an assertion failure in the...

SUSE SLED15 / SLES15 Security Update : accountsservice (SUSE-SU-2018:3625-1)

This update for accountsservice fixes the following issues : This security issue was fixed : CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed: Don't abort loading users when an...

SUSE SLES15 Security Update : php7 (SUSE-SU-2018:1936-1)

This update for php7 fixes the following issues : - CVE-2018-12882: exifreadfromimpl allowed attackers to trigger a use-after-free in exifreadfromfile because it closed a stream that it is not responsible for closing bsc1099098. Note that Tenable Network Security has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2018:2889-1)

This update for wireshark to version 2.4.9 fixes the following issues : Security issues fixed bsc1106514 : CVE-2018-16058: Bluetooth AVDTP dissector crash wnpa-sec-2018-44 CVE-2018-16056: Bluetooth Attribute Protocol dissector crash wnpa-sec-2018-45 CVE-2018-16057: Radiotap dissector crash...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2018:2301-1)

This update for wireshark fixes the following issues: Security issues fixed : - CVE-2018-14342: BGP dissector large loop wnpa-sec-2018-34, bsc1101777 - CVE-2018-14344: ISMP dissector crash wnpa-sec-2018-35, bsc1101788 - CVE-2018-14340: Multiple dissectors could crash wnpa-sec-2018-36, bsc1101804 ...