SUSE-SU-2018:2092-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new feature was added: - NVDIMM memory error notification ACPI 6.2 The following security bugs were fixed: - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result...

SUSE SLES11 Security Update : kernel (SUSE-SU-2018:2062-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2014-3688: The SCTP implementation allowed remote attackers to cause a denial of service memory consumption by triggering a large number of chunks in an...

SUSE-SU-2018:2062-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2014-3688: The SCTP implementation allowed remote attackers to cause a denial of service memory consumption by triggering a large number of chunks in an...

SUSE-SU-2018:2051-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.140 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13053: The alarmtimernsleep function had an integer overflow via a large relative timeout because ktimeaddsafe was not used bnc1099924 -...

SUSE-SU-2018:1952-1 Initial update for kernel-azure

This update is the initial delivery of the Azure flavor of the Linux Kernel, which contains enhancements and optimizations for running the SUSE Linux Enterprise kernel in the Azure cloud...

SUSE-SU-2018:1846-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This new feature was added: - Btrfs: Remove empty block groups in the background The following security bugs were fixed: - : Prevent disclosure of FPU registers including XMM and AVX registers between...

SUSE-SU-2018:1821-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This new feature was added: - Btrfs: Remove empty block groups in the background The following security bugs were fixed: - CVE-2018-3665: Prevent disclosure of FPU registers including XMM and AVX registe...

SUSE-SU-2018:1816-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.138 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12233: A memory corruption bug in JFS could have been triggered by calling setxattr twice with two different extended attribute names on t...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2018:1772-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.136 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-5848: In the function wmisetie, the length validation code did not handle unsigned integer overflow properly. As a result, a large value of...

SUSE-SU-2018:1762-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3665: Prevent disclosure of FPU registers including XMM and AVX registers between processes. These registers might contain encryption keys when doin...

SUSE-SU-2018:1761-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3665: Prevent disclosure of FPU registers including XMM and AVX registers between processes. These registers might contain encryption keys when doi...

Code injection

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1...

CVE-2011-4182

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1...

CVE-2011-4182

CVE-2011-4182 describes a code execution vulnerability in SUSE Linux Enterprise sysconfig caused by missing escaping of ESSID values. The issue allows an attacker who controls an access point to execute arbitrary code on the affected system. Affected releases are sysconfig prior to 0.83.7-2.1. Th...

CVE-2011-4182 shell code injection via ESSID because of missing escaping of a variable

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1...

Micro Focus SUSE Linux Enterprise Information Disclosure Vulnerability

Micro Focus SUSE Linux Enterprise is a suite of enterprise Linux operating systems from Micro Focus in the UK. A security vulnerability exists in pammodules in versions of Micro Focus SUSE Linux Enterprise prior to 12. An attacker could exploit the vulnerability to log in to an account that shoul...

CVE-2011-3172

A vulnerability in pammodules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12...

CVE-2011-3172

The CVE-2011-3172 issue affects SUSE pam-modules in SUSE Linux Enterprise (prior to version 12). Root cause: unix2_chkpwd could log into disabled accounts due to inadequate checks; a fix was implemented to ensure unix2_chkpwd calls pam_acct_mgmt to block access for locked accounts. Impact: attack...

SUSE-SU-2018:1503-1 Security update for oracleasm kmp

This update provides rebuilt kernel modules for SUSE Linux Enterprise 12 SP3 products with retpoline enablement to address Spectre Variant 2 CVE-2017-5715 bsc1068032. Following modules have been rebuilt: - drbd - oracleasm - crash - lttng-modules...

SUSE SLES11 Security Update : libvirt (SUSE-SU-2018:1475-1) (Spectre)

This update for libvirt fixes the following issues : - CVE-2018-3639: cpu: Added support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...