SUSE-SU-2016:0303-1 Security update for kdebase4-workspace

This update for kdebase4-workspace fixes the following issues: - CVE-2014-8651: Privilege escalation via KDE Clock KCM helper when non-default polkit settings are used bsc904625 The following non-security bugs were fixed: - bsc929718: Make kdm recognize an IPv6 localhost address as localhost...

Security update for openldap2 (important)

This update fixes the following security issues: - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...

SUSE-SU-2016:0173-1 Security update for rsync

This update for rsync fixes two security issues and two non-security bugs. The following vulnerabilities were fixed: - CVE-2014-8242: Checksum collisions leading to a denial of service bsc900914 - CVE-2014-9512: Malicious servers could send files outside of the transferred directory bsc915410 The...

SUSE-SU-2016:0168-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7550: A local user could have triggered a race between read and revoke in keyctl bnc958951. - CVE-2015-8539: A negatively instantiated user key could have been...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2015:2339-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-7509: Mounting ext4 filesystems in no-journal mode could hav lead to a system crash bsc956709. - CVE-2015-7799: The slhcinit function in...

SUSE-SU-2015:2350-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7509: Mounting a prepared ext2 filesystem as ext4 could lead to a local denial of service crash bsc956709. - CVE-2015-7799: The slhcinit function i...

SUSE-SU-2015:2292-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.51 to receive various security and bugfixes. Following features were added: - hwrng: Add a driver for the hwrng found in power7+ systems fate315784. Following security bugs were fixed: - CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 sta...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2015:2194-1)

The SUSE Linux Enterprise 12 kernel was updated to 3.12.51 to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-7799: The slhcinit function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers were valid, which allowed local...

These Top 10 Programming Languages Have Most Vulnerable Apps on the Internet

A new research showed that Scripting languages, in general, give birth to more security vulnerabilities in web applications, which raised concerns over potential security bugs in millions of websites. The app security firm Veracode has released its State of Software Security: Focus on Application...

SUSE-SU-2015:2167-1 Security update for kernel-source-rt

The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to version 3.0.101.rt130-45.1 to receive various security and bugfixes. Following security bugs were fixed: CVE-2015-6252: Possible file descriptor leak for each VHOSTSETLOGFDcommand issued, this could eventually wasting available syste...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2015:2108-1)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-8104: Prevent guest to host DoS caused by infinite loop in microcode via DB exception bsc954404. - CVE-2015-5307: Prevent guest to host DoS caus...

sssd security, bug fix, and enhancement update

1.13.0-40 - Resolves: rhbz1270827 - local overrides: don't contact server with overridden name/id 1.13.0-39 - Resolves: rhbz1267837 - sssdbe crashed in ipasrvadacctlookupstep 1.13.0-38 - Resolves: rhbz1267176 - Memory leak / possible DoS with krb auth. 1.13.0-37 - Resolves: rhbz1267836 - PAM...

openSUSE: Security Advisory for kernel (openSUSE-SU-2015:1842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for the Linux Kernel (important)

The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: CVE-2015-3290: arch/x86/entry/entry64.S in the Linux kernel on the x8664 platform improperly relied on espfix64 during nested NMI processing, which allowed local users to gain...

SUSE: Security Advisory for kernel-source (SUSE-SU-2015:1727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for Linux (SUSE-SU-2015:0481-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for kernel (SUSE-SU-2015:0178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for kernel (SUSE-SU-2015:0581-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED11 / SLES11 Security Update : kernel-source (SUSE-SU-2015:1678-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-6252: Possible file descriptor leak for each VHOSTSETLOGFDcommand issued, this could eventually wasting available system resources and creating a denial of...

openSUSE: Security Advisory for kernel (openSUSE-SU-2015:1382-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...