openSUSE: Security Advisory for kernel (openSUSE-SU-2017:1215-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-532)

The openSUSE Leap 42.2 kernel was updated to 4.4.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion ...

openSUSE: Security Advisory for libosip2 (openSUSE-SU-2017:1127-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : ntp (openSUSE-2017-511)

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050 : - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2017:1099-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for xen (openSUSE-SU-2017:1078-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2017:1048-1)

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050 : - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

SUSE-SU-2017:1047-1 Security update for ntp

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050: - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

SUSE-SU-2017:1048-1 Security update for ntp

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050: - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

The vulnerability of the OpenSUSE Leap operating system allows a hacker to trigger a service failure.

The vulnerability in the coder/tiff.c part of the OpenSUSE Leap operating system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure application termination or other effects using a specially crafted file...

The vulnerability of the OpenSUSE Leap operating system allows a hacker to trigger a service failure.

The vulnerability of the MSL interpreter in the OpenSUSE Leap operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures segmentation errors and application termination by using a...

openSUSE: Security Advisory for pidgin (openSUSE-SU-2017:0973-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-419)

The openSUSE Leap 42.1 kernel was updated to 4.1.39 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-5669: The doshmat function in ipc/shm.c in the Linux kernel did not restrict the address calculated by a certain rounding operation, which allowed loca...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-418)

The openSUSE Leap 42.2 kernel was updated to 4.4.56 fix various security issues and bugs. The following security bugs were fixed : - CVE-2017-7184: The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel did not validate certain size data after an XFRMMSGNEWAE update, which...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2017:0909-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.56 fix various security issues and bugs. The following security bugs were fixed: - CVE-2017-7184: The xfrmreplayverifylen function in net/xfrm/xfrmuser.c in the Linux kernel did not validate certain size data after an XFRMMSGNEWAE update, which...

Security update for the Linux Kernel (important)

====================================================================== Still left to do: - Check CVE descriptions. They need to be written in the past tense. They are processed automatically, THERE CAN BE ERRORS IN THERE! - Remove version numbers from the CVE descriptions - Check the capitalizati...

The vulnerability of the console-based graphic editor ImageMagick and the operating system OpenSUSE Leap allows a hacker to trigger a service failure.

The vulnerability of the ReadPWPImage function in the coder/pwp.c file of the console image editing tool ImageMagick and the OpenSUSE Leap operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a servic...

The vulnerability of the console-based graphic editor ImageMagick and the operating system OpenSUSE Leap allows a hacker to load arbitrary modules.

The vulnerability of the magick/module.c component in the console-based image editing tool ImageMagick and the OpenSUSE Leap operating system is related to deficiencies in path name limitation for the directory. Exploiting this vulnerability allows a malicious actor to load arbitrary modules usin...

The vulnerability of the console-based graphic editor ImageMagick and the operating system OpenSUSE Leap allows a hacker to trigger a service failure.

The vulnerability of the ReadRLEImage function in the console-based image editing tool ImageMagick and the operating system OpenSUSE Leap is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to cause a service failure application termination by...