SUSE SLED12 / SLES12 Security Update : rrdtool (SUSE-SU-2017:0103-1)

This update for rrdtool provides the following fixes : - CVE-2013-2131: Enhance imginfo format validation checks to prevent crashes. bsc828003 - Add rrdtool-cached sub-package to SLE 12-SP1. bsc967671 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2017:0084-1)

This update for jasper fixes the following issues : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. bsc1012530 - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. bsc1010977 - CVE-2016-9398: Invalid jasper files could...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2017:0027-1)

This update for gstreamer-010-plugins-bad fixes the following issues : - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows bsc1010829 - CVE-2016-9447: Disable the nsf plugin bsc1010514 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2017:0028-1)

This update for gstreamer-010-plugins-bad fixes the following issues : - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows bsc1010829 - CVE-2016-9447: Disable the nsf plugin bsc1010514 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2016:3288-1)

This update for gstreamer-plugins-good fixes the following issues : - CVE-2016-9807: flic decoder invalid read could lead to crash bsc1013655 - CVE-2016-9634: flic out-of-bounds write could lead to code execution bsc1012102 - CVE-2016-9635: flic out-of-bounds write could lead to code execution...

SUSE SLED12 / SLES12 Security Update : libcares2 (SUSE-SU-2016:3286-1)

This update for libcares2 fixes the following issues : - Add patch to fix single byte out of buffer write CVE-2016-5180, bsc1007728 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically cle...

SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0004-1)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:3301-1)

The tiff library and tools were updated to version 4.0.7 fixing various bug and security issues. - CVE-2014-8127: out-of-bounds read with malformed TIFF image in multiple tools bnc914890 - CVE-2016-9297: tifdirread.c read outside buffer in TIFFPrintField bnc1010161 - CVE-2016-3658: Illegal read i...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2016:3303-1)

This update for gstreamer-plugins-good fixes the following security issues : - CVE-2016-9807: Flic decoder invalid read could lead to crash. bsc1013655 - CVE-2016-9634: Flic out-of-bounds write could lead to code execution. bsc1012102 - CVE-2016-9635: Flic out-of-bounds write could lead to code...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2016:3297-1)

This update for gstreamer-plugins-bad fixes the following issues : - CVE-2016-9809: Malicious mkv/h264 file could cause an off by one out of bounds read and lead to crash bsc1013659 - CVE-2016-9812: Malicious mpeg file could cause invalid a NULL pointer access and lead to crash bsc1013678 -...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2016:3296-1)

This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes : - Check an integer overflow CVE-2016-9445 and initialize a buffer CVE-2016-9446 in vmncdec. bsc1010829 - CVE-2016-980...

SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0003-1)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for external...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:3271-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

SUSE SLED12 / SLES12 Security Update : wget (SUSE-SU-2016:3268-1)

This update for wget fixes the following issues: Security issues fixed : - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. bsc995964 Non security issues fixed : - bsc1005091: Don't call xfree on string returned b...

SUSE SLED12 / SLES12 Security Update : dnsmasq (SUSE-SU-2016:3269-1)

This update for dnsmasq fixes the following issues : - CVE-2015-8899: Denial of service between local and remote dns entries bsc983273 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : libgme (SUSE-SU-2016:3250-1)

This update for libgme fixes the following issues : - CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961: Various issues were fixed in the handling of SPC music files that could have been exploited for gaining privileges of desktop users. bsc1015941 Note that Tenable Networ...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2016:3211-1)

This update for gd fixes the following issues : - CVE-2016-9933 possible stackoverflow on malicious truecolor images bsc1015187 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean a...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3208-1)

This update for xen fixes the following issues : - A Mishandling of SYSCALL singlestep during emulation which could have lead to privilege escalation. XSA-204, bsc1016340, CVE-2016-10013 - CMPXCHG8B emulation failed to ignore operand size override which could have lead to information disclosure...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3207-1)

This update for xen fixes the following issues : - A Mishandling of SYSCALL singlestep during emulation which could have lead to privilege escalation. XSA-204, bsc1016340, CVE-2016-10013 - CMPXCHG8B emulation failed to ignore operand size override which could have lead to information disclosure...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2016:3222-1)

MozillaFirefox 45 ESR was updated to 45.6 to fix the following issues : - MFSA 2016-95/CVE-2016-9897: Memory corruption in libGLES - MFSA 2016-95/CVE-2016-9901: Data from Pocket server improperly sanitized before execution - MFSA 2016-95/CVE-2016-9898: Use-after-free in Editor while manipulating...