SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2018:0947-1)

This update for evince fixes the following issues : - CVE-2017-1000159: Command injection in evince via filename when printing to PDF could lead to command execution bsc1070046 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:0956-1)

This update for ntp fixes the following issues : - Update to 4.2.8p11 bsc1082210 : - CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. - CVE-2018-7182: ctlgetitem: buffer read...

SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2018:0934-1)

This update for python3 fixes the following issues: Security issue fixed : - CVE-2017-18207: Fixed possible denial of service vulnerability by adding a check to Lib/wave.py that verifies that at least one channel is provided bsc1083507. Bug fixes : - Require python-Sphinx-latex for building on Le...

SUSE SLED12 Security Update : zziplib (SUSE-SU-2018:0919-1)

This update for zziplib fixes the following issues: Security issues fixed : - CVE-2018-7726: There is a bus error caused by thezzipparserootdirectory function of zip.c. Attackers could leverage thisvulnerability to cause a denial of service bsc1084517. - CVE-2018-7725: An invalid memory address...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2018:0920-1) (Spectre)

This update for libvirt and virt-manager fixes the following issues: Security issues fixed : - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' var2 bsc1079869. - CVE-2018-6764: Fixed guest executable code injection via libnssdns.so loaded by libvirtlxc before init...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2018:0925-1)

This update for openssl fixes the following issues : - CVE-2018-0739: Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2018:0909-1) (Meltdown) (Spectre)

This update for xen fixes the following issues: Update to Xen 4.7.5 bug fix only release bsc1027519 Security issues fixed : - CVE-2018-7540: Fixed DoS via non-preemptable L3/L4 pagetable freeing XSA-252 bsc1080635 - CVE-2018-7541: A grant table v2 - v1 transition may crash Xen XSA-255 bsc1080662 ...

SUSE SLED12 / SLES12 Security Update : postgresql94 (SUSE-SU-2018:0876-1)

This update for postgresql94 fixes the following issues: Security issues fixed : - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes : - See release notes for details : - https://www.postgresql.org/docs/9.4/static/release-9-4-17.ht...

SUSE SLED12 / SLES12 Security Update : libidn (SUSE-SU-2018:0878-1)

This update for libidn fixes one issues. This security issue was fixed : - CVE-2017-14062: Prevent integer overflow in the decodedigit function that allowed remote attackers to cause a denial of service or possibly have unspecified other impact bsc1056450. Note that Tenable Network Security has...

SUSE SLED12 / SLES12 Security Update : spice-gtk (SUSE-SU-2018:0877-1)

This update for spice-gtk fixes the following issues : - CVE-2017-12194: A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2018:0861-1) (Spectre)

This update for libvirt fixes the following issues: Security issues fixed : - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' var2 bsc1079869. - CVE-2018-6764: Fixed guest executable code injection via libnssdns.so loaded by libvirtlxc before init bsc1080042. -...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0857-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file bsc1086011. -...

SUSE SLED12 / SLES12 Security Update : graphite2 (SUSE-SU-2018:0858-1)

This update for graphite2 fixes the following issues : - CVE-2018-7999: Fixed a NULL pointer dereference vulnerability in Segment.cpp that may cause a denial of serivce bsc1084850. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2018:0846-1)

This update for krb5 provides the following fixes: Security issues fixed : - CVE-2018-5730: DN container check bypass by supplying special crafted data bsc1083927. - CVE-2018-5729: NULL pointer dereference in kadmind or DN container check bypass by supplying special crafted data bsc1083926...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:0850-1)

This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 bsc1085130 : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds wri...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2018:0831-1) (Spectre)

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. CVE-2017-5715 bsc1068032 The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2018:0832-1)

This update for samba fixes the following issues : - CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally bsc1081741 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2018:0812-1)

This update for dhcp fixes the following issues: Security issues fixed : - CVE-2018-5733: reference count overflow in dhcpd bsc1083303. - CVE-2018-5732: buffer overflow in dhclient bsc1083302. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : libvorbis (SUSE-SU-2018:0784-1)

This update for libvorbis fixes the following issues : - CVE-2018-5146: Fixed out of bounds memory write while processing Vorbis audio data bsc1085687. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0811-1)

This update for wireshark fixes the following issues: Security issue fixed bsc1082692 : - CVE-2018-7335: The IEEE 802.11 dissector could crash wnpa-sec-2018-05 - CVE-2018-7321: thrift long dissector loop dissectthriftmap - CVE-2018-7322: DICOM: inifinite loop dissectdcmtag - CVE-2018-7323: WCCP:...