SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2017:0962-1)

This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed : - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : gstreamer (SUSE-SU-2017:0967-1)

This update for gstreamer fixes the following security issues : - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : gstreamer (SUSE-SU-2017:0966-1)

This update for gstreamer fixes the following security issues : - A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption bsc1024051, CVE-2017-5838 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2017:0951-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0953-1)

This update for jasper fixes the following issues: Security issues fixed : - CVE-2016-9600: NULL pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder bsc1018088 - CVE-2016-10251: Use of uninitialized value in jpcpinextcprl jpct2cod.c bsc1029497 - CVE-2017-5498: left-shi...

SUSE SLED12 / SLES12 Security Update : libpng15 (SUSE-SU-2017:0950-1)

This update for libpng15 fixes the following issues: Security issues fixed : - CVE-2015-8540: read underflow in libpng bsc958791 - CVE-2016-10087: NULL pointer dereference in pngsettext2 bsc1017646 Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED12 Security Update : gimp (SUSE-SU-2017:0945-1)

This update for gimp fixes the following issues: This security issue was fixed : - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero bsc1032241. The update package also includes non-security fixes. See...

SUSE SLED12 / SLES12 Security Update : audiofile (SUSE-SU-2017:0940-1)

This audiofile update fixes the following issue: Security issues fixed : - CVE-2015-7747: Fixed buffer overflow issue when changing both number of channels and sample format. bsc949399 - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 -...

SUSE SLED12 / SLES12 Security Update : libpng12 (SUSE-SU-2017:0860-1)

This update for libpng12 fixes the following issues: Security issues fixed : - CVE-2015-8540: read underflow in libpng bsc958791 - CVE-2016-10087: NULL pointer dereference in pngsettext2 bsc1017646 Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2017:0853-1)

This update for libpng16 fixes the following issues: Security issues fixed : - CVE-2016-10087: NULL pointer dereference in pngsettext2 bsc1017646 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:0859-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso121...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:0858-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Force usage of ncurses6-config thru NCURSESCONFIG env var bsc1023847. - Add missing ldb module directory bsc1012092. -...

SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2017:0798-1)

This update for virglrenderer fixes the following issues: Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2017:0800-1)

This update for wget fixes the following issues: Security issue fixed : - CVE-2017-6508: urlparse: Reject control characters in host part of URL bsc1028301. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...

SUSE SLED12 / SLES12 Security Update : sane-backends (SUSE-SU-2017:0713-1)

This update for sane-backends fixes the following issues : - saned could have leaked uninitialized memory back to its requesters for some opcodes, allowing for information disclosure of saned memory CVE-2017-6318, bsc1027197. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0694-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0696-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 / SLES12 Security Update : Recommended update for dbus-1 (SUSE-SU-2017:0695-1)

This update for dbus-1 fixes the following issues: Security issues fixed : - Symlink attack in nonce-tcp transport. bsc1025950 - Symlink attack in unit tests. bsc1025951 Bugfixes : - Remove sysvinit script, not used under systemd. bsc974092 Note that Tenable Network Security has extracted the...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:0703-1)

This update for flash-player fixes the following issues: Security update to 25.0.0.127 bsc1029374, fixing the following vulnerabilities advised under APSB17-07 : - CVE-2017-2997: This update resolves a buffer overflow vulnerability that could lead to code execution. - CVE-2017-2998, CVE-2017-2999...