SUSE SLED11 Security Update : Recommended update for LibreOffice (SUSE-SU-2016:0324-1)

This update brings LibreOffice to version 5.0.4, a major version update. It brings lots of new features, bug fixes and also security fixes. Features as seen on http://www.libreoffice.org/discover/new-features/ - LibreOffice 5.0 ships an impressive number of new features for its spreadsheet module...

SUSE SLED11 / SLES11 Security Update : kdebase4-workspace (SUSE-SU-2016:0303-1)

This update for kdebase4-workspace fixes the following issues : - CVE-2014-8651: Privilege escalation via KDE Clock KCM helper when non-default polkit settings are used bsc904625 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has...

SUSE SLED11 / SLES11 Security Update : ecryptfs-utils (SUSE-SU-2016:0290-1)

This update for ecryptfs-utils fixes the following issues : - CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems bsc962052 - CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks bsc920160 Note that Tenable Network...

SUSE SLED11 / SLES11 Security Update : gtk2 (SUSE-SU-2016:0282-1)

This update for gtk2 fixes the following security issues : - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:0269-1) (SLOTH)

java-170-openjdk was updated to version 7u95 to fix 9 security issues. bsc962743 - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT...

SUSE SLED11 / SLES11 Security Update : mono-core (SUSE-SU-2016:0257-1)

mono-core was updated to fix the following vulnerabilities : - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service throu...

SUSE SLED11 / SLES11 Security Update : giflib (SUSE-SU-2016:0192-1)

This update for giflib fixes the following issues : - CVE-2015-7555: Heap overflow in giffix bsc960319 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

SUSE SLED11 / SLES11 Security Update : mozilla-nss (SUSE-SU-2016:0189-1) (SLOTH)

This update contains mozilla-nss 3.19.2.2 and fixes the following security issue : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature bsc959888 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

SUSE SLED11 / SLES11 Security Update : libxml2 (SUSE-SU-2016:0187-1)

This update for libxml2 fixes the following security issue : - CVE-2015-8710: Parsing short unclosed HTML comment could cause uninitialized memory access, which allowed remote attackers to read contents from previous HTTP requests depending on the application bsc960674 Note that Tenable Network...

SUSE SLED11 / SLES11 Security Update : rsync (SUSE-SU-2016:0176-1)

This update for rsync fixes two security issues : - CVE-2014-8242: Checksum collisions leading to a denial of service bsc900914 - CVE-2014-9512: Malicious servers could send files outside of the transferred directory bsc915410 Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 / SLES11 Security Update : samba (SUSE-SU-2016:0164-1)

This update for Samba fixes the following security issues : - CVE-2015-5330: Remote read memory exploit in LDB bnc958586 - CVE-2015-5252: Insufficient symlink verification file access outside the share bnc958582 - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the...

SUSE SLED11 / SLES11 Security Update : openssh (SUSE-SU-2016:0120-1)

This update for openssh fixes the following issues : - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a...

SUSE SLED11 / SLES11 Security Update : openssh (SUSE-SU-2016:0119-1)

This update for openssh fixes the following issues : - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a...

SUSE SLED11 / SLES11 Security Update : openldap2 (SUSE-SU-2016:0090-1)

This update fixes the following security issue : - CVE-2015-6908. Passing a crafted packet to the function bergetnext, an attacker may cause a remote denial of service, crashing the OpenLDAP server bsc945582. Note that Tenable Network Security has extracted the preceding description block directl...

SUSE SLED11 / SLES11 Security Update : wireshark (SUSE-SU-2016:0110-1)

This update contains Wireshark 1.12.9 and fixes the following issues : - CVE-2015-7830: pcapng file parser could crash while copying an interface filter bsc950437 - CVE-2015-8711: epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not...

SUSE SLED11 / SLES11 Security Update : foomatic-filters (SUSE-SU-2016:0112-1)

This update fixes the following security issues : - CVE-2015-8327: adds backtick and semicolon to the list of illegal shell escape characters bsc957531. CVE-2015-8560: fixed code execution via improper escaping of ; bsc957531. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 / SLES11 Security Update : gnutls (SUSE-SU-2016:0077-1)

This update for gnutls fixes the following security issues : - CVE-2015-8313: First byte of the padding in CBC mode is not checked bsc957568 - CVE-2015-2806: Two-byte stack overflow in asn1derdecoding bsc924828 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED11 / SLES11 Security Update : libpng12-0 (SUSE-SU-2016:0061-1)

security update: This update fixes the following securit issue : - CVE-2015-8126 Multiple buffer overflows in the pngsetPLTE and pnggetPLTE functions allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact bsc954980 Note that Tenable Network...

SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2016:0020-1)

This update for kvm fixes the following issues : Security issues fixed : - CVE-2015-7512: The receive packet size is now checked in the emulated pcnet driver, eliminating buffer overflow and potential security issue by malicious guest systems. bsc957162 - CVE-2015-8345: A infinite loop in...

SUSE SLED11 / SLES11 Security Update : libksba (SUSE-SU-2016:0008-1)

The libksba package was updated to fix the following security issues : - Fixed an integer overflow, an out of bounds read and a stack overflow issues bsc926826. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...