SUSE-SU-2017:1660-1 Security update for tomcat

Tomcat was updated to version 7.0.78, fixing various bugs and security issues. For full details see https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Security issues fixed: - CVE-2016-0762: A realm timing attack in tomcat was fixed which could disclose existence of users bsc1007854 -...

Arbitrary shell execution

Security Advisory - This release contains a fix for a security advisory related to the improper handling of a shell command - A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option - All version 3 users are encouraged to upgrad...

SUSE-SU-2017:0246-1 Security update for Linux Kernel Live Patch 15 for SLE 12

This update for the Linux Kernel 3.12.60-5254 fixes several issues. The following security bugs were fixed: - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...

Description of the cumulative update for Office Communications Server 2007 R2, Microsoft Unified Communications Managed API 2.0 Windows Workflow Activities Redist: March, 2011

Describes the bugs that are resolved in the cumulative update for Office Communications Server 2007 R2, Microsoft Unified Communications Managed API 2.0 Windows Workflow Activities Redist that is dated March 2011.SummaryThis article describes the issue that is fixed in the Office Communications...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:2404-1)

This update for mariadb to 1.0.0.27 fixes the following issues: Security issue fixed : - CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and, under certain circumstances, execute arbitrary code as mysql or even root user. bsc998309 - release not...

openSUSE Security Update : gtk2 (openSUSE-2016-1118)

This gtk2 update to version 2.24.31 fixes the following issues : Security issues fixed : - CVE-2013-7447: Fixed integer overflow in image handling boo966682. Bugs fixed : - Changes from version 2.24.31 : + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are...

SUSE-SU-2016:2174-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP1

This update for the Linux Kernel 3.12.49-11 fixes several issues. The following security bugs were fixed: - CVE-2016-6480: Race condition in the ioctlsendfib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service out-of-bounds access or...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:1690-1)

The SUSE Linux Enterprise 12 kernel was updated to 3.12.60 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-9717: fs/namespace.c in the Linux kernel processes MNTDETACH umount2 system called without verifying that the MNTLOCKED flag is unset, which...

SUSE-SU-2016:1690-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 kernel was updated to 3.12.60 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2014-9717: fs/namespace.c in the Linux kernel processes MNTDETACH umount2 system called without verifying that the MNTLOCKED flag is unset, which...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-124)

The openSUSE 13.1 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075. - CVE-2015-7550: A local user could have...

CentOS 7 : libreswan (CESA-2015:1979)

Updated libreswan packages that fix one security issue, several bugs, and add several enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which give...

SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2015:1264-1)

PostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7. Security issues fixed : - CVE-2015-3165, bsc931972: Avoid possible crash when client disconnects just before the authentication timeout expires. - CVE-2015-3166, bsc931973: Consistently check for failure of the print...

SUSE-SU-2015:1253-2 Security update for php5

This security update of PHP fixes the following issues: Security issues fixed: CVE-2015-4024 bnc931421: Fixed multipart/form-data remote DOS Vulnerability. CVE-2015-4026 bnc931776: pcntlexec did not check path validity. CVE-2015-4022 bnc931772: Fixed and overflow in ftpgenlist that resulted in a...

SUSE-SU-2015:1253-1 Security update for php5

This security update of PHP fixes the following issues: Security issues fixed: CVE-2015-4024 bnc931421: Fixed multipart/form-data remote DOS Vulnerability. CVE-2015-4026 bnc931776: pcntlexec did not check path validity. CVE-2015-4022 bnc931772: Fixed and overflow in ftpgenlist that resulted in a...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2013:1256-1)

IBM Java 1.7.0 has been updated to SR5 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ Also the following bugs have been fixed : - add Europe/Busingen to tzmappings bnc817062 - mark files in jre/bin and bin/ as executable bnc823034 Note that...

SUSE SLES10 Security Update : glibc (SUSE-SU-2013:1287-1)

This collective update for the GNU C library glibc provides the following fixes and enhancements : Security issues fixed : - Fix stack overflow in getaddrinfo with many results. bnc813121, CVE-2013-1914 - Fixed another stack overflow in getaddrinfo with many results bnc828637 - Fix buffer overflo...

SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1606-1)

This update fixes the following security issues in xen : - CVE-2012-5513: XENMEMexchange may overwrite hypervisor memory XSA-29 - CVE-2012-5515: Several memory hypercall operations allow invalid extent order values XSA-31 Also the following bugs have been fixed and upstream patches have been...

SUSE-SU-2015:0896-1 Security update for qemu

qemu / kvm was updated to fix a security issue and some bugs. Security issue fixed: CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. CVE-2015-1779: Fixed insufficient resource...

SUSE-SU-2015:0688-1 Security update for webkitgtk

This update fixes the following security issues: - Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes:...

openSUSE Security Update : xen (openSUSE-SU-2014:1279-1)

XEN was updated to fix various bugs and security issues. Security issues fixed : - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 -...