openSUSE Security Update : qemu (openSUSE-2016-252)

This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : This update also fixes a non-security bug : - Due to...

openSUSE Security Update : openldap2 (openSUSE-2016-92) (Logjam)

This update fixes the following security issues : - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2015:1519-1)

qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed : - CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape XSA-135 bsc932770 - CVE-2015-4037: Avoid predictable directory name for smb config...

SUSE SLED12 Security Update : zeromq (SUSE-SU-2015:1510-1)

zeromq was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - CVE-2014-9721: zeromq protocol downgrade attack on sockets using the ZMTP v3 protocol boo931978 The following bug was fixed : - boo912460: avoid curve test to hang for ppc ppc64 ppc64l...

SUSE-SU-2015:1519-1 Security update for qemu

qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed: CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape XSA-135 bsc932770 CVE-2015-4037: Avoid predictable directory name for smb config bsc9322...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...

SUSE-SU-2015:1019-1 Security update for patch

The GNU patch utility was updated to 2.7.5 to fix three security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-1196: directory traversal flaw when handling git-style patches. This could allow an attacker to overwrite arbitrary files by tricking the user into...

SUSE-SU-2015:1077-1 Security update for openldap2

openldap2 was updated to fix two security issues and one non-security bug. The following vulnerabilities were fixed: A remote attacker could cause a denial of service through a NULL pointer dereference and crash via an empty attribute list in a deref control in a search request. bnc916897...

SuSE 11.3 Security Update : coreutils (SAT Patch Number 10620)

Coreutils was updated to fix one security issue and one non-security bug. The following vulnerability was fixed : - Commands such as date, touch or using parsedatetime could, when accepting untrusted input, allow an attacker to crash the application or, potentially, execute arbitrary code...

SUSE-SU-2015:0658-1 Security Update for Linux Kernel

The SUSE Linux Enterprise Server 12 kernel was updated to 3.12.39 to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-0777: The XEN usb backend could leak information to the guest system due to copying uninitialized memory. - CVE-2015-2150: Xen and the Linux...

SUSE-SU-2015:0870-1 Security update for kvm

kvm has been updated to fix issues in the embedded qemu: CVE-2014-0223: An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could have used this flaw to corrupt QEMU process memory on the host...

SuSE 10 Security Update : Python (ZYPP Patch Number 5490)

This update of python fixes several security vulnerabilities. CVE-2008-1679 / CVE-2008-1887 / CVE-2008-3143 / CVE-2008-3142 / CVE-2008-3144 / CVE-2008-2315 / CVE-2008-2316 Note: for SLE10 a non-security bug in mmap was fixed too. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...