openSUSE Security Update : apache2 (openSUSE-2017-417)

This update for apache2 provides the following fixes : Security issues fixed : - CVE-2016-0736: Protect modsessioncrypto data with a MAC to prevent padding oracle attacks bsc1016712. - CVE-2016-2161: Malicious input to modauthdigest could have caused the server to crash, resulting in DoS...

Security update for the Linux Kernel (important)

====================================================================== Still left to do: - Check CVE descriptions. They need to be written in the past tense. They are processed automatically, THERE CAN BE ERRORS IN THERE! - Remove version numbers from the CVE descriptions - Check the capitalizati...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2017:0839-1)

This update for java-180-ibm fixes the following issues: Security issue fixed : - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for...

SUSE SLES12 Security Update : samba (SUSE-SU-2017:0862-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso121...

Fedora 24 : rpm-ostree (2017-788129b61c)

https://github.com/projectatomic/rpm-ostree/releases/tag/v2017.3 This release includes a fix for CVE-2017-2623. There are a few new features, such as systemctl reload rpm-ostreed now being supported. Some bugfixes such as memory leak fixes. Besides that, there's a lot of internal refactoring goin...

Fedora 25 : rpm-ostree (2017-003fa5648c)

https://github.com/projectatomic/rpm-ostree/releases/tag/v2017.3 This release includes a fix for CVE-2017-2623. There are a few new features, such as systemctl reload rpm-ostreed now being supported. Some bugfixes such as memory leak fixes. Besides that, there's a lot of internal refactoring goin...

openSUSE Security Update : potrace (openSUSE-2017-319)

This update for potrace to version 1.14 fixes the following issues : Security issues fixed : - CVE-2016-8685, CVE-2016-8686: Bugs triggered by malformed BMP files have been fixed boo1005026. Bugfixes : - Error reporting has been improved. - The image size is now truncated when the bitmap data end...

Fedora 25 : knot / knot-resolver (2017-038e821698)

Knot Resolver 1.2.3 2017-02-23 ================================ Bugfixes -------- - Disable storing GLUE records into the cache even in the non-default QUERYPERMISSIVE mode - iterate: skip answer RRs that don't match the query - layer/iterate: some additional processing for referrals - lib/resolv...

BlackArch Linux 2017.03.01 - Penetration Testing Distribution

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers. The repository contains 1707 tools. You can install tools individually or in groups. BlackArch Linux is compatible with existing Arch installs. ChangeLog: add more than 50 new tools update...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:0575-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.49 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-7117: Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-287)

The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-6074: The dccprcvstateprocess function in net/dccp/input.c in the Linux kernel mishandled DCCPPKTREQUEST packet data structures in the LISTEN state, which allowe...

openSUSE: Security Advisory for kernel (openSUSE-SU-2017:0541-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.49 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5986: A userlevel triggerable BUGON on sctpwaitforsndbuf was fixed. bsc1025235 - CVE-2017-5970: The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c...

openSUSE: Security Advisory for kernel (openSUSE-SU-2016:3085-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES11 Security Update : kernel (SUSE-SU-2017:0437-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to 3.0.101-94 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-5551: tmpfs: clear SISGID when setting posix ACLs bsc1021258. - CVE-2016-10088: The sg implementation in the Linux kernel did not properl...

Fedora 25 : ansible (2017-cb88734094)

Update to ansible 2.2.1. Fixes several CVEs as well as a number of other bugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md for full changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 24 : ansible (2017-418398ce60)

Update to ansible 2.2.1. Fixes several CVEs as well as a number of other bugfixes. See: https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md for full changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

openSUSE: Security Advisory for kernel (openSUSE-SU-2017:0002-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-1)

The openSUSE 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-9756: KVM: x86: drop error recovery in emjmpfar and emretfar bsc1013038. The following non-security bugs were fixed : - scsi: megaraidsas: fix macro MEGASASISLOGICAL ...

Security update for the Linux Kernel (important)

The openSUSE 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9756: KVM: x86: drop error recovery in emjmpfar and emretfar bsc1013038. The following non-security bugs were fixed: - scsi: megaraidsas: fix macro MEGASASISLOGICAL to...