SUSE SLES12 Security Update : libvirt (SUSE-SU-2018:2141-1) (Spectre)

This update for libvirt fixes the following issues: Security issues fixed : - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' bsc1092885. - CVE-2018-1064: Fix denial of service problem during reading from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2106-1)

This update for the Linux Kernel 3.12.74-606488 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data fr...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2018:2084-1)

This update for mutt fixes the following issues: Security issues fixed : - bsc1101428: Mutt 1.10.1 security release update. - CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size bsc1101583. - CVE-2018-14353: Fix imapquotestring in imap/util.c that has an...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2112-1)

This update for the Linux Kernel 4.4.74-9238 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

openSUSE Security Update : the Linux Kernel (openSUSE-2018-764)

The openSUSE 42.3 was updated to 4.4.140 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-13053: The alarmtimernsleep function had an integer overflow via a large relative timeout because ktimeaddsafe was not used bnc1099924. - CVE-2018-9385: Prevent...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:2105-1)

This update for the Linux Kernel 3.12.61-5283 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2018:2089-1)

This update for libgcrypt fixes the following issues: The following security vulnerability was addressed : - CVE-2018-0495: Mitigate a novel side-channel attack by enabling blinding for ECDSA signatures bsc1097410. The following other issues were fixed : - Extended the fipsdrv dsa-sign and...

openSUSE Security Update : xen (openSUSE-2018-766)

This update for xen fixes the following issues : Security issues fixed : - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-12891: Fix possible Denial of Service DoS via certain PV MMU operations that affect the entire host XSA-264 bsc1097521. - CVE-2018-12892: Fix lib...

SUSE SLES12 Security Update : xen (SUSE-SU-2018:2069-1)

This update for xen fixes the following issues: Security issues fixed : - CVE-2018-12617: Fix integer overflow that causes segmentation fault in qmpguestfileread with gmalloc bsc1098744. - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-11806: Fix heap buffer overflow...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2018:2059-1)

This update for xen fixes the following issues: Security issues fixed : - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-12891: Fix possible Denial of Service DoS via certain PV MMU operations that affect the entire host XSA-264 bsc1097521. - CVE-2018-12892: Fix libx...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2018:2040-1)

This update for python fixes the following issues: The following security vulnerabilities were addressed : - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1940-1)

This update for the Linux Kernel 4.4.103-9253 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2018:1902-1)

This update for libqt4 fixes the following issues: LibQt4 was updated to 4.8.7 bsc1039291, CVE-2016-10040: See http://download.qt.io/officialreleases/qt/4.8/4.8.7/changes-4.8.7 for more details. Also libQtWebkit4 was updated to 2.3.4 to match libqt4. Also following bugs were fixed : - Enable...

SUSE SLES11 Security Update : kernel modules packages (SUSE-SU-2018:1784-1) (Spectre)

The following kernel modules were rebuild with 'retpoline' enablement to allow full mitigation of the Spectre Variant 2 CVE-2017-5715, bsc1068032 OFED was adjusted to add an entry to control the loading/unloading of cxgb4 to /etc/sysconf/infiniband bsc926856. Note that Tenable Network Security ha...

SUSE SLED12 / SLES12 Security Update : libvorbis (SUSE-SU-2018:1565-1)

This update for libvorbis fixes the following issues: The following security issue was fixed : - Fixed the validation of channels in mapping0forward, which previously allowed remote attackers to cause a denial of service via specially crafted files CVE-2018-10392, bsc1091070 Note that Tenable...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2018:1562-1)

This update for glibc fixes the following issues : - CVE-2017-18269: Fix SSE2 memmove issue when crossing 2GB boundary bsc1094150 - CVE-2018-11236: Fix overflow in path length computation bsc1094161 - CVE-2018-11237: Don't write beyond buffer destination in mempcpyavx512novzeroupper bsc1094154 No...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1505-1)

This update for the Linux Kernel 4.4.74-9229 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Intel ...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1541-1)

This update for the Linux Kernel 3.12.74-606457 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Int...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1519-1)

This update for the Linux Kernel 3.12.74-606463 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Int...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1521-1)

This update for the Linux Kernel 3.12.74-606440 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Int...