SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2018:0352-1)

This update for libsndfile fixes the following issues : - CVE-2017-16942: Divide-by-zero in the function wavw64readfmtchunk, which may lead to Denial of service bsc1069874. - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiffreadchanmap bsc1043978. - CVE-2017-14634: In libsndfil...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0349-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file bsc1076051 - CVE-2017-18029: Prevent memory leak in...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2018:0339-1)

This update for jasper fixes the following issues: Security issues fixed : - CVE-2016-9262: Multiple integer overflows in the jasrealloc function in base/jasmalloc.c and memresize function in base/jasstream.c allow remote attackers to cause a denial of service via a crafted image, which triggers...

SUSE SLED12 / SLES12 Security Update : libXdmcp (SUSE-SU-2018:0338-1)

This update for libXdmcp fixes the following issues : - CVE-2017-2625: The generation of session key in XDM using libXdmcp might have used weak entropy, making the session keys predictable bsc1025046 Note that Tenable Network Security has extracted the preceding description block directly from th...

SUSE SLED12 / SLES12 Security Update : libICE (SUSE-SU-2018:0337-1)

This update for libICE fixes the following issues : - CVE-2017-2626: Creation of the ICE auth session cookies used insufficient randomness, making these cookies predictable. A more random generation method has been implemented. boo1025068 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : ecryptfs-utils (SUSE-SU-2018:0336-1)

This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...

SUSE SLED12 / SLES12 Security Update : libXfont (SUSE-SU-2018:0334-1)

This update for libXfont fixes several issues. These security issues were fixed : - CVE-2017-13720: Improper check for end of string in PatterMatch caused invalid reads bsc1054285 - CVE-2017-13722: Malformed PCF file could have caused DoS or leak information bsc1049692 - Prevent the X server from...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2018:0299-1)

This update for systemd fixes several issues. This security issue was fixed : - CVE-2018-1049: Prevent race that can lead to DoS when using automounts bsc1076308. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2018:0303-1)

This update for bind fixes several issues. This security issue was fixed : - CVE-2017-3145: Improper sequencing during cleanup could have lead to a use-after-free error that triggered an assertion failure and crash in named bsc1076118. The update package also includes non-security fixes. See...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2018:0284-1)

This update for ncurses fixes several issues. These security issues were fixed : - CVE-2017-13734: Prevent illegal address access in the ncsafestrcat function in strings.c that might have lead to a remote denial of service attack bsc1056126. - CVE-2017-13733: Prevent illegal address access in the...

SUSE SLED12 / SLES12 Security Update : libtasn1 (SUSE-SU-2018:0295-1)

This update for libtasn1 fixes one issue. This security issue was fixed : - CVE-2018-6003: Prevent a stack exhaustion in asn1decodesimpleber lib/decoding.c when decoding BER encoded structure allowed for DoS bsc1076832. Note that Tenable Network Security has extracted the preceding description...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2018:0260-1)

This update for gd fixes one issues. This security issue was fixed : - CVE-2018-5711: Prevent integer signedness error that could have lead to an infinite loop via a crafted GIF file allowing for DoS bsc1076391 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : transfig (SUSE-SU-2018:0231-1)

This update for transfig fixes the following issues: Security issue fixed : - CVE-2017-16899: Fix array index error in the fig2dev program bsc1069257. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted t...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2018:0219-1) (Meltdown) (Spectre)

This update for webkit2gtk3 fixes the following issues: Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-5753...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2018:0217-1)

This update for curl fixes one issues. This security issue was fixed : - CVE-2018-1000007: Prevent leaking authentication data to third parties when following redirects bsc1077001 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : libexif (SUSE-SU-2018:0193-1)

This update for libexif fixes several issues. These security issues were fixed : - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

SUSE SLED12 / SLES12 Security Update : libevent (SUSE-SU-2018:0200-1)

This update for libevent fixes the following security issues : - CVE-2016-10195: DNS remote stack overread vulnerability bsc1022917 - CVE-2016-10196: stack/buffer overflow in evutilparsesockaddrport bsc1022918 - CVE-2016-10197: out-of-bounds read in searchmakenew bsc1022919 Note that Tenable...

SUSE SLED12 / SLES12 Security Update : libvpx (SUSE-SU-2018:0181-1)

This update for libvpx fixes one issues. This security issue was fixed : - CVE-2017-13194: Fixed incorrect memory allocation related to odd frame width bsc1075992. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLED12 / SLES12 Security Update : procmail (SUSE-SU-2018:0173-1)

This update for procmail fixes the following issues : - CVE-2017-16844: Heap-based buffer overflow in loadbuf function could lead to remote denial of service bsc1068648 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2018:0174-1)

This update for rsync fixes one issues. This security issue was fixed : - CVE-2018-5764: The parsearguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism bsc1076503. Note that Tenable...