SUSE SLES11 Security Update : ntp (SUSE-SU-2017:1052-1)

This ntp update to version 4.2.8p10 fixes the following issues: Security issues fixed bsc1030050 : - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock - CVE-2017-6463: Authenticated DoS via Malicious Config Option - CVE-2017-6458: Potential...

Security update for postgresql93 (important)

This update for postgresql93 to version 9.3.14 fixes the several issues. These security issues were fixed: - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference bsc993454. - CVE-2016-5424: Fix client programs' handling of special characters in database and role names...

openSUSE Security Update : gimp (openSUSE-2017-462)

This update for gimp fixes the following issues : This security issue was fixed : - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero bsc1032241. These non-security issues were fixed : - bsc1025717:...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2017:0951-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:0859-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso121...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0771-1)

This update for the Linux Kernel 3.12.55-5242 fixes one issue. The following security bug was fixed : - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel allowed attackers to cause a denial of service system crash via 1 an application that made crafted...

SUSE SLED12 / SLES12 Security Update : open-vm-tools (SUSE-SU-2017:0701-1)

This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues : - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework CAF - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand ...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:0665-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : openssh (SUSE-SU-2017:0607-1)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2017:0453-1)

This update for tiff fixes the following issues : - A crafted TIFF image could cause a crash and potential code execution when processed by the 'tiffcp' utility CVE-2017-5225, bsc1019611. Also a regression from the version update to 4.0.7 was fixed in handling TIFFTAGFAXRECVPARAMS. bsc1022103 Not...

openSUSE Security Update : libxml2 (openSUSE-2017-244)

This update for libxml2 fixes the following issues : - CVE-2016-4658: use-after-free error could lead to crash bsc1005544 - Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 - CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not...

SUSE SLES11 Security Update : libcap-ng (SUSE-SU-2017:0375-1)

libcap-ng was updated to fix one security issue. This security issue was fixed : - CVE-2014-3215: seunshare in policycoreutils which uses libcap-ng is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid...

SUSE SLED12 / SLES12 Security Update : libxml2 (SUSE-SU-2017:0380-1)

This update for libxml2 fixes the following issues : - CVE-2016-4658: use-after-free error could lead to crash bsc1005544 - Fix NULL dereference in xpointer.c when in recovery mode bsc1014873 - CVE-2016-9597: An XML document with many opening tags could have caused a overflow of the stack not...

SUSE SLES11 Security Update : gnutls (SUSE-SU-2017:0304-1)

This update for gnutls fixes the following issues : - Malformed asn1 definitions could cause a segmentation fault in the asn1 definition parser bsc961491. - CVE-2016-8610: Remote denial of service in SSL alert handling bsc1005879. - CVE-2017-5335: Decoding a specially crafted OpenPGP certificate...

SUSE SLES11 Security Update : bash (SUSE-SU-2017:0302-1)

This update for bash fixes the following issues : - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables. bsc1001299 - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command execution when $HOSTNAME was expanded in th...

SUSE SLES12 Security Update : bind (SUSE-SU-2017:0113-1)

This update for bind fixes the following issues : - Fix a potential assertion failure that could have been triggered by a malformed response to an ANY query, thereby facilitating a denial-of-service attack. CVE-2016-9131, bsc1018700, bsc1018699 - Fix a potential assertion failure that could have...

openSUSE Security Update : wget (openSUSE-2017-9)

This update for wget fixes the following issues : Security issues fixed : - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. bsc995964 Non security issues fixed : - bsc1005091: Don't call xfree on string returned ...

SUSE SLES12 Security Update : samba (SUSE-SU-2016:3299-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0004-1)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for...

SUSE SLES11 Security Update : samba (SUSE-SU-2016:3298-1)

This update for samba provides the following fixes: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441 - CVE-2016-2126: Prevent denial of service due to a client triggered crash in the winbindd parent process. bsc1014442 Non security issues fixed ...