SUSE SLED15 / SLES15 Security Update : libsndfile (SUSE-SU-2018:2074-1)

This update for libsndfile fixes the following issues: Security issues fixed : - CVE-2018-13139: Fix a stack-based buffer overflow in psfmemset in common.c that allows remote attackers to cause a denial of service bsc1100167. - CVE-2017-17456: Prevent segmentation fault in the function d2alawarra...

SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2018:4187-1)

This update for perl fixes the following issues : Secuirty issues fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2977-1)

This update for ImageMagick fixes the following security issues : CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS bsc1106989 CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858...

SUSE SLED15 / SLES15 Security Update : libzypp, zypper (SUSE-SU-2018:2690-1)

This update for libzypp, zypper, libsolv provides the following fixes : Security fixes in libzypp : CVE-2018-7685: PackageProvider: Validate RPMs before caching bsc1091624, bsc1088705 CVE-2017-9269: Be sure bad packages do not stay in the cache bsc1045735 Changes in libzypp: Update to version...

SUSE SLES15 Security Update : php7 (SUSE-SU-2018:2337-1)

This update for php7 fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-14851: Fixed an out-of-bound read in exifprocessIFDinMAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. bsc1103659 -...

SUSE SLED15 / SLES15 Security Update : texlive (SUSE-SU-2018:3122-1)

This update for texlive fixes the following issue : CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed arbitrary code execution when a malicious font was loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex bsc1109673. Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : gpg2 (SUSE-SU-2018:1814-1)

This update for gpg2 fixes the following security issue : - CVE-2018-12020: GnuPG mishandled the original filename during decryption and verification actions, which allowed remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the '--status-fd 2'...

SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2018:2036-1)

This update for openssl-11 fixes the following issues : - CVE-2018-0732: During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating ...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2018:2409-1) (Foreshadow)

This update for xen fixes the following security issues : - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest O...

SUSE SLED15 / SLES15 Security Update : mercurial (SUSE-SU-2018:3430-1)

This update for mercurial fixes the following issues : CVE-2018-17983: Fix an out-of-bounds read during parsing of a malformed manifest entry bsc1110899. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2018:3082-1)

This update for java-180-ibm to 8.0.5.20 fixes the following issues : CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2018:4066-1)

This update for samba fixes the following issues : Update to samba version 4.7.11. Security issues fixed : CVE-2018-14629: Fixed CNAME loops in Samba AD DC DNS server bsc1116319. CVE-2018-16841: Fixed segfault on PKINIT when mis-matching principal bsc1116320. CVE-2018-16851: Fixed NULL pointer...

SUSE SLES15 Security Update : apache2 (SUSE-SU-2018:2424-1)

This update for apache2 fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-1333: Fixed a worker exhaustion that could have lead to a denial of service via specially crafted HTTP/2 requests bsc1101689. - CVE-2018-8011: Fixed a NULL pointer dereference in...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2018:3609-1)

This update for ffmpeg fixes the following issues : CVE-2018-13300: An improper argument passed to the avprivrequestsample function may have triggered an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure bsc110034...

SUSE SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2018:2965-1)

This update for openssl-100 to 1.0.2p fixes the following issues : These security issues were fixed : Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information bsc1104789 CVE-2018-0737: The RSA Key generation algorithm has been...

SUSE SLED15 / SLES15 Security Update : libwpd (SUSE-SU-2018:3870-1)

This update for libwpd fixes the following issues : Security issue fixed : CVE-2018-19208: Fixed illegal address access inside libwpd at function WP6ContentListener:defineTable bsc1115713. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED15 / SLES15 Security Update : libopenmpt (SUSE-SU-2018:1951-1)

This update for libopenmpt to version 0.3.9 fixes the following issues: These security issues were fixed : - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files bsc1095644 - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files containi...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2018:1981-1)

This update for xen fixes the following issues: Security issues fixed : - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-12891: Fix possible Denial of Service DoS via certain PV MMU operations that affect the entire host XSA-264 bsc1097521. - CVE-2018-12892: Fix libx...

SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2018:3150-1)

This update for git fixes the following issues : CVE-2018-17456: Git allowed remote code execution during processing of a recursive 'git clone' of a superproject if a .gitmodules file has a URL field beginning with a '-' character. boo1110949. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2018:3002-1)

This update for python fixes the following issue : CVE-2018-1000802: Prevent command injection in shutil module makearchive function via passage of unfiltered user input bsc1109663 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...