ocaml security update

3.11.2-5 - Enable execshield stack protection on ppc/ppc64 572826 related: rhbz1343082 - Fix strict-aliasing warnings in build 990540. 3.11.2-3 - Fix buffer overflow and information leak CVE-2015-8869 resolves: rhbz1343082...

SUSE-SU-2017:0656-1 Security update for tcpdump

This update for tcpdump fixes the following issues: Security issues fixed bsc1020940: - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ahprint. - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arpprint. - CVE-2016-7925: Corrected buffer overflow in compressed...

SUSE-SU-2017:0622-1 Security update for tigervnc

This update for tigervnc provides the following fixes: - Prevent malicious server from crashing a server via a buffer overflow, a similar flaw as the LibVNCServer issues CVE-2016-9941 and CVE-2016-9942. bsc1019274 - CVE-2016-10207: Prevent potential crash due to insufficient clean-up after failur...

SUSE-SU-2017:0519-1 Security update for tigervnc

This update for tigervnc provides the following fixes: - Prevent malicious server from crashing a server via a buffer overflow, a similar flaw as the LibVNCServer issues CVE-2016-9941 and CVE-2016-9942.. bsc1019274 - CVE-2016-10207: Prevent potential crash due to insufficient clean-up after failu...

SUSE-SU-2017:0474-1 Security update for ppp

The ppp package was updated to fix the following security issue: - CVE-2015-3310: Fixed a buffer overflow in radius plug-in's rcmksid bsc927841...

[BSA-112] Security Update for iucode-tool

Henrique de Moraes Holschuh uploaded new packages for iucode-tool which fixed the following security problems: CVE-2017-0357 iucode-tool v1.4 to v2.1 is vulnerable to a heap buffer overflow in the -tr recovery loader. Using specially-crafted data files and a specially crafted command line, it mig...

Fedora 24 : botan (2016-7de64a450f)

Botan 1.10.14 - NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31 - Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. CVE-2016-9132 - Fix two cases where in error...

SUSE-SU-2016:3105-1 Security update for MozillaFirefox, mozilla-nss

This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 bsc1009026: - CVE-2016-9079: Use-after-free in SVG Animation bsc1012964 MFSA 2016-92 - CVE-2016-5297: Incorrect argument length checking in Javascript...

SUSE SLED12 / SLES12 Security Update : gc (SUSE-SU-2016:3057-1)

This update for gc fixes the following issues : - integer overflow in GCMALLOCATOMIC CVE-2016-9427, bsc1011276 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE-SU-2016:2653-1 Security update for python3

This update provides Python 3.4.5, which brings many fixes and enhancements. The following security issues have been fixed: - CVE-2016-1000110: CGIHandler could have allowed setting of HTTPPROXY environment variable based on user supplied Proxy request header. bsc989523 - CVE-2016-0772: A...

SUSE-SU-2016:2532-1 Security update for gtk2

This update for gtk2 fixes the following security issues: - CVE-2016-6352: Some crashes were fixed, including a out of bounds write in the OneLine32 function that could be used by attackers to crash GTK/GDK programs. - CVE-2013-7447: Avoid overflow when allocating a cairo pixbuf bsc966682...

[SECURITY] [DLA 639-1] mactelnet security update

Package : mactelnet Version : 0.3.4-1+deb7u1 CVE ID : CVE-2016-7115 CVE-2016-7115 Buffer overflow in the handlepacket function in mactelnet.c in the client in MAC-Telnet 0.4.3 and earlier allows remote TELNET servers to execute arbitrary code via a long string in an MTCPTYPEENCRYPTIONKEY control...

[SECURITY] [DLA 615-1] icu security update

Package : icu Version : 4.8.1.1-12+deb7u5 CVE ID : CVE-2016-6293 This update fixes a buffer overflow in the ulocacceptLanguageFromHTTP function in ICU, the International Components for Unicode C and C++ library, in Debian Wheezy For Debian 7 "Wheezy", these problems have been fixed in version...

SUSE-SU-2016:2156-1 Security update for glibc

This update for glibc fixes the following issues: - Drop old fix that could break services that start before IPv6 is up. bsc931399 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Relocate DSOs in dependency order, fixing...

SUSE-SU-2016:2147-1 Security update for squid

This update for squid fixes the following issues: - CVE-2016-4051: backport fix buffer overflow in cachemgr.cgi bsc976553 - CVE-2016-4554: backport fix for header smuggling issue in HTTP Request processing bsc979010...

SUSE-SU-2016:1733-1 Security update for glibc

This update for glibc provides the following fixes: - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

SUSE-SU-2016:1721-1 Security update for glibc

This update for glibc provides the following fixes: - Increase DTVSURPLUS limit. bsc968787 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Fix stack overflow in nssdnsgetnetbynamer. CVE-2016-3075, bsc973164 - Fix malloc...

DLA-534-1 libgd2 - security update

Bulletin has no description...

SUSE-SU-2016:1618-1 Security update for mysql

This update for mysql fixes the following issues: - bsc959724: fix incorrect usage of sprintf/strcpy that caused possible buffer overflow issues at various places On SUSE Linux Enterprise 11 SP4 this fix was not yet shipped: - Increase the key length to 2048 bits used in vio/viosslfactories.c for...

MGASA-2016-0217 Updated libxslt packages fix security vulnerability

The libxslt package has been updated to version 1.1.29, which fixes several bugs and possible security issues, including an out-of-bounds memory access CVE-2016-1683 and integer overflow CVE-2016-1684, and provides other improvements...