SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2018:1424-1)

This update for jasper fixes the following issues : - CVE-2018-9055: denial of service via a reachable assertion in the function jpcfirstone in libjasper/jpc/jpcmath.c could lead to denial of service. bsc1087020 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : libmodplug (SUSE-SU-2018:1441-1)

This update for libmodplug fixes the following issues : - Update to version 0.8.9.0+git20170610.f6dd59a bsc1022032 : - PSM: add missing line to commit - ABC: prevent possible increment of p past end - ABC: ensure read pointer is valid before incrementing - ABC: terminate early when things don't...

SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2018:1417-1)

This update for ceph fixes the following issues: Security issues fixed : - CVE-2018-7262: rgw: malformed http headers can crash rgw bsc1081379. - CVE-2017-16818: User reachable asserts allow for DoS bsc1063014. Bug fixes : - bsc1061461: OSDs keep generating coredumps after adding new OSD node to...

SUSE SLED12 / SLES12 Security Update : icu (SUSE-SU-2018:1401-1)

icu was updated to fix two security issues. These security issues were fixed : - CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

SUSE SLED12 / SLES12 Security Update : bash (SUSE-SU-2018:1398-1)

This update for bash fixes the following issues: Security issues fixed : - CVE-2016-7543: A code execution possibility via SHELLOPTS+PS4 variable was fixed bsc1001299 - CVE-2016-0634: Arbitrary code execution via malicious hostname was fixed bsc1000396 Non-security issues fixed : - Fix repeating...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2018:1378-1) (Spectre)

This update for qemu fixes several issues. This security issue was fixed : - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all pri...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2018:1373-1)

This update for wget fixes the following issues : - CVE-2018-0494: Fixed a cookie injection vulnerability by checking for and joining continuation lines. bsc1092061 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2018:1372-1)

This update for python fixes the following issues: Security issues fixed : - CVE-2017-1000158: Fixed integer overflows in PyStringDecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution bsc1068664. - CVE-2018-1000030: Fixed crash inside th...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2018:1332-1)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2018:1327-1)

This update for curl fixes several issues: Security issues fixed : - CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client bsc1092098 Non security issues fixed : - If the DEFAULTSUSE cipher list is not available use the HIGH cipher alias before failing. bsc108682...

SUSE SLED12 / SLES12 Security Update : libvorbis (SUSE-SU-2018:1324-1)

This update for libvorbis fixes the following issues: Security issues fixed : - CVE-2018-10393: Fixed stack-based buffer over-read in barknoisehybridm bsc1091072. - CVE-2017-14160: Fixed out-of-bounds access inside barknoisehybridmp function bsc1059812. Note that Tenable Network Security has...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:1296-1)

This update for libreoffice to 6.0.4.2 fixes lots of bugs and also the following issues: Security issues fixed : - CVE-2018-10120: The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx did not validate a customizations index, which allowed remote attackers to cause a denial of...

SUSE SLED12 / SLES12 Security Update : cairo (SUSE-SU-2018:1195-1)

This update for cairo fixes the following issues : - CVE-2017-9814: out-of-bounds read in cairo-truetype-subset.c could lead to denial of service bsc1049092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1178-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14325: In ImageMagick, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allowed attackers to cause a denial of service memory consumption in ReadMPCImage in coders/mpc.c via a craft...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:1180-1)

This update for tiff fixes the following issues : - CVE-2017-9935: There was a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an...

SUSE SLED12 / SLES12 Security Update : zsh (SUSE-SU-2018:1072-1)

This update for zsh fixes the following issues : - CVE-2014-10070: environment variable injection could lead to local privilege escalation bnc1082885 - CVE-2014-10071: buffer overflow in exec.c could lead to denial of service. bnc1082977 - CVE-2014-10072: buffer overflow In utils.c when scanning...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1074-1)

This update for perl fixes the following issues: Security issues fixed : - CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216. - CVE-2018-6798: Fixed heap buffer overflow in regexec.c bsc1082233. - CVE-2018-6797: Fixed sharp-s regexp overflow bsc1082234. Note that Tenable Networ...

SUSE SLED12 / SLES12 Security Update : rzsz (SUSE-SU-2018:1066-1)

This update for rzsz fixes the following issues : - Update to 0.12.21rc to fix bsc1086416 and bsc1090051 - CVE-2018-10195: segmentation fault in zsdata function could lead to denial of service bsc1090051 Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE SLED12 / SLES12 Security Update : PackageKit (SUSE-SU-2018:1047-1)

CVE-2018-1106: Drop the polkit rule which could allow users in wheel group to install packages without root password bsc1086936. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)

This update for wireshark fixes the following issues : - Update to wireshark 2.2.14, fix such issues : - bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissect...