SUSE SLED11 / SLES11 Security Update : LibVNCServer (SUSE-SU-2015:2110-1)

The libvncserver package was updated to fix the following security issues : - bsc897031: fix several security issues : - CVE-2014-6051: Integer overflow in MallocFrameBuffer on client side. - CVE-2014-6052: Lack of malloc return value checking on client side. - CVE-2014-6053: Server crash on a ve...

SUSE SLED11 / SLES11 Security Update : xscreensaver (SUSE-SU-2015:2054-1)

The xscreensaver package was updated to fix the following security and non security issues : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch. Note th...

SUSE SLED11 / SLES11 Security Update : libpng12-0 (SUSE-SU-2015:2017-1)

The libpng12-0 package was updated to fix the following security issues : - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2015:1981-1)

This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 bsc952810 - MFSA 2015-133/CVE-2015-7183 bmo1205157 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 bsc952810 - MFSA...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1960-1)

The flash-player package was updated to fix the following security issues : - Security update to 11.2.202.548 bsc954512 : - APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-766...

SUSE SLED11 / SLES11 Security Update : libsndfile (SUSE-SU-2015:1979-1)

The libsndfile package was updated to fix the following security issue : - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. Note that Tenable Network Security has extracted the preceding...

SUSE SLED11 Security Update : libvdpau (SUSE-SU-2015:1925-1)

libvdpau was updated to use securegetenv instead of getenv for several variables so it can be more safely used in setuid applications. - CVE-2015-5198: libvdpau: incorrect check for security transition bnc943967 - CVE-2015-5199: libvdpau: directory traversal in dlopen bnc943968 - CVE-2015-5200:...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:1894-1)

xen was updated to version 4.4.3 to fix nine security issues. These security issues were fixed : - CVE-2015-4037: The slirpsmb function in net/slirp.c created temporary files with predictable names, which allowed local users to cause a denial of service instantiation failure by creating...

SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:1898-1)

krb5 was updated to fix one security issue. This security issue was fixed : - CVE-2015-2695: Applications which call gssinquirecontext on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash...

SUSE SLED11 Security Update : java-1_7_0-openjdk (SUSE-SU-2015:1875-1)

java-170-openjdk was updated to version 7u91 to fix 17 security issues. These security issues were fixed : - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:1853-1)

xen was updated to fix nine security issues. These security issues were fixed : - CVE-2015-4037: The slirpsmb function in net/slirp.c created temporary files with predictable names, which allowed local users to cause a denial of service instantiation failure by creating /tmp/qemu-smb.- files befo...

SUSE SLED11 Security Update : java-1_7_0-openjdk (SUSE-SU-2015:1875-2)

java-170-openjdk was updated to version 7u91 to fix 17 security issues. These security issues were fixed : - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability...

SUSE SLED11 / SLES11 Security Update : lxc (SUSE-SU-2015:1829-1)

lxc was update to fix one security issue. The following vulnerability was fixed : - CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container bsc946744 Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE SLED11 / SLES11 Security Update : gtk2 (SUSE-SU-2015:1787-1)

gtk2 was updated to fix two security issues. These security issues were fixed : - CVE-2015-4491: Integer overflow in the makefiltertable function in pixops/pixops.c in gdk-pixbuf before 2.31.5, allowed remote attackers to execute arbitrary code or cause a denial of service heap-based buffer...

SUSE SLED11 / SLES11 Security Update : librsvg (SUSE-SU-2015:1785-1)

librsvg was updated to fix one security issue. This security issue was fixed : - CVE-2013-1881: GNOME libsvg allowed remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XX...

SUSE SLED11 / SLES11 Security Update : icu (SUSE-SU-2015:1790-1)

icu was updated to fix one security issue. This security issue was fixed : - CVE-2014-9654: Insufficient size limit checks in regular expression compiler bsc917129. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE SLED11 / SLES11 Security Update : augeas (SUSE-SU-2015:1792-1)

This update fixes an untrusted argument escaping problem CVE-2014-8119 : - new API - augescapename - which can be used to escape untrusted inputs before using them as part of path expressions - augmatch is changed to return properly escaped output Note that Tenable Network Security has extracted...

SUSE SLED11 / SLES11 Security Update : mysql (SUSE-SU-2015:1788-1) (BACKRONYM)

MySQL was updated to version 5.5.45, fixing bugs and security issues. A list of all changes can be found on : - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-45.html - http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-44.html To fix the 'BACKRONYM' security issue CVE-2015-3152 the...

SUSE SLED11 Security Update : vorbis-tools (SUSE-SU-2015:1775-1)

vorbis-tools was updated to fix several security issues. - A buffer overflow in aiffopen that could be triggered by opening prepared malicious files CVE-2015-6749, bsc943795. - A division by zero and integer overflow by crafted WAV files was fixed CVE-2014-9638, CVE-2014-9639, bnc914439, bnc91444...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1771-1)

flash-player was updated to fix one security issue. This security issue was fixed : - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...