SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2017:3428-1)

This update for evince fixes the following issues: Security issue fixed : - CVE-2017-1000083: Remove support for tar and tar-like commands in comics backend bsc1046856. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

SUSE SLED12 Security Update : libraw (SUSE-SU-2017:3392-1)

This update for libraw fixes the following issues: Security issues fixed : - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...

SUSE SLED12 / SLES12 Security Update : postgresql96 (SUSE-SU-2017:3391-1)

This update for postgresql96 fixes the following issues: Security issues fixed : - CVE-2017-15098: Fix crash due to rowtype mismatch in jsonbpopulaterecordset bsc1067844. - CVE-2017-15099: Ensure that INSERT ... ON CONFLICT DO UPDATE checks table permissions and RLS policies in all cases...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 - CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 -...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:3343-1)

This update for openssl fixes the following issues : - OpenSSL Security Advisory 07 Dec 2017 - CVE-2017-3737: OpenSSL 1.0.2 starting from version 1.0.2b introduced an 'error state' mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error...

SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2017:3230-1)

This update for openssh fixes the following issues: Security issue fixed : - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server bsc1065000. Bug fixes : - FIPS: Startup selfchecks bsc1068310. - FIPS: Silent complaints about unsupported key exchange methods bsc1006166....

SUSE SLED12 / SLES12 Security Update : libXcursor (SUSE-SU-2017:3214-1)

This update for libXcursor fixes the following issues: Security issue fixed : - CVE-2017-16612: Fix integeroverflow while parsing images and a signedness issue while parsing comments bsc1065386. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:3178-1)

This update for xen to version 4.7.4 bsc1027519 fixes several issues. This new feature was added : - Support migration of HVM domains larger than 1 TB These security issues were fixed : - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 -...

SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2017:3170-1)

GNU binutil was updated to the 2.29.1 release, bringing various new features, fixing a lot of bugs and security issues. Following security issues are being addressed by this release : - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898...

SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:3169-1)

This update for openssl fixes the following issues: Security issues fixed : - CVE-2017-3735: openssl1,openssl: Malformed X.509 IPAdressFamily could cause OOB read bsc1056058 - CVE-2017-3736: openssl: bnsqrx8xinternal carry bug on x8664 bsc1066242 - Out of bounds read+crash in DESfcrypt bsc1065363...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:3155-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2017-14746: Use-after-free vulnerability bsc1060427. - CVE-2017-15275: Server heap memory information leak bsc1063008. - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file bsc1058624. -...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:3115-1)

This update for xen to version 4.9.1 bsc1027519 fixes several issues. This new feature was added : - Support migration of HVM domains larger than 1 TB These security issues were fixed : - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 -...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:3104-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2017-14746: Use-after-free vulnerability bsc1060427. - CVE-2017-15275: Server heap memory information leak bsc1063008. Bug fixes : - Update 'winbind expand groups' doc in smb.conf man page bsc1027593. Note that Tenabl...

SUSE SLED12 / SLES12 Security Update : xorg-x11-server (SUSE-SU-2017:3047-1)

This update for xorg-x11-server fixes several issues. These security issues were fixed : - CVE-2017-13721: Missing validation of shmseg resource id in Xext/XShm could lead to shared memory segments of other users beeing freed bnc1052984 - CVE-2017-13723: A local denial of service via unusual...

SUSE SLED12 / SLES12 Security Update : file (SUSE-SU-2017:3048-1)

The GNU file utility was updated to version 5.22. Security issues fixed : - CVE-2014-9621: The ELF parser in file allowed remote attackers to cause a denial of service via a long string. bsc913650 - CVE-2014-9620: The ELF parser in file allowed remote attackers to cause a denial of service via a...

SUSE SLED12 Security Update : gimp (SUSE-SU-2017:3062-1)

This update for gimp fixes the following issues : - Don't build gimp with webkit1 support, as it is no longer maintained and has plenty of security bugs. This disables the GIMP's built-in help browser; it will use an external browser when configured this way. This works around a number of securit...

SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2017:3092-1)

This update for perl fixes the following issues: Security issues fixed : - CVE-2017-12837: Heap-based buffer overflow in the Sregatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service out-of-bounds write via a regul...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:3086-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2017-14746: Fixed a use-after-free vulnerability that could be used to crash smbd or potentially execute code bsc1060427. - CVE-2017-15275: Fixed a server heap memory information leak bsc1063008. Non-security issues...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2017:2871-2)

This update for wget fixes the following security issues : - CVE-2017-13089,CVE-2017-13090: Missing checks for negative remainingchunksize in skipshortbody and fdreadbody could cause stack-based buffer overflows, which could have been exploited by malicious servers. bsc1064715,bsc1064716 Note tha...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2017:2989-1)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u151 icedtea 3.6.0 Security issues fixed : - CVE-2017-10274: Handle smartcard clean up better bsc1064071 - CVE-2017-10281: Better queuing priorities bsc1064072 - CVE-2017-10285: Unreferenced references bsc106407...