SUSE SLES12 Security Update : quagga (SUSE-SU-2018:0455-1)

This update for quagga fixes the following security issues : - The Quagga BGP daemon contained a bug in the ASPATH size calculation that could have been exploited to facilitate a remote denial-of-service attack via specially crafted BGP UPDATE messages. CVE-2017-16227, bsc1065641 - The Quagga BGP...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2018:0384-1)

This update for mariadb to version 10.0.33 fixes several issues. These security issues were fixed : - CVE-2017-10378: Vulnerability in subcomponent: Server: Optimizer. Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL...

SUSE SLES11 Security Update : bind (SUSE-SU-2018:0362-1)

This update for bind fixes several issues. This security issue was fixed : - CVE-2017-3145: Improper sequencing during cleanup could have lead to a use-after-free error that triggered an assertion failure and crash in named bsc1076118. The update package also includes non-security fixes. See...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0350-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-5685: Prevent infinite loop and application hang in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2018:0255-1)

This update for clamav fixes the following issues : - Update to security release 0.99.3 bsc1077732 - CVE-2017-12376 ClamAV Buffer Overflow in handlepdfname Vulnerability - CVE-2017-12377 ClamAV Mew Packet Heap Overflow Vulnerability - CVE-2017-12379 ClamAV Buffer Overflow in messageAddArgument...

SUSE SLED12 / SLES12 Security Update : libvpx (SUSE-SU-2018:0181-1)

This update for libvpx fixes one issues. This security issue was fixed : - CVE-2017-13194: Fixed incorrect memory allocation related to odd frame width bsc1075992. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE SLES11 Security Update : rsync (SUSE-SU-2018:0172-1)

This update for rsync fixes one issues. This security issue was fixed : - CVE-2018-5764: The parsearguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism bsc1076503 Note that Tenable Netwo...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0132-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-12672: Fixed a memory leak vulnerability in the function ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of service bsc1052720. - CVE-2017-13060: Fixed a memory leak vulnerabili...

SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2018:0118-1)

This update for rsync fixes several issues. These security issues were fixed : - CVE-2017-17434: The daemon in rsync did not check for fnamecmp filenames in the daemonfilterlist data structure in the recvfiles function in receiver.c and also did not apply the sanitizepaths protection mechanism to...

SUSE SLES12 Security Update : openssl (SUSE-SU-2018:0112-1)

This update for openssl fixes the following issues: Security issues fixed : - CVE-2016-7056: ECSDA P-256 timing attack key recovery bsc1019334 - CVE-2017-3731: Truncated packet could crash via OOB read bsc1022085 - CVE-2016-8610: remote denial of service in SSL alert handling bsc1005878 -...

SUSE SLES11 Security Update : glibc (SUSE-SU-2018:0075-1)

This update for glibc fixes the following issues : - A privilege escalation bug in the realpath function has been fixed. CVE-2018-1000001, bsc1074293 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2018:0074-1)

This update for glibc fixes the following issues : - A privilege escalation bug in the realpath function has been fixed. CVE-2018-1000001, bsc1074293 - A memory leak and a buffer overflow in the dynamic ELF loader has been fixed. CVE-2017-1000408, CVE-2017-1000409, bsc1071319 - An issue in the co...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2018:0061-1)

This update for java-170-ibm fixes the following issues : - Security update to version 7.0.10.15 bsc1070162 : - CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356 CVE-2017-10293 CVE-2016-9841 CVE-2016-10165 CVE-2017-10355 CVE-2017-10357 CVE-2017-10348 CVE-2017-10349 CVE-2017-10347...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0043-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-14343: Fixed a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file bsc1058422. - CVE-2017-12691: The ReadOneLayer function in coders/xcf.c allowed remote attackers to...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:0056-1) (Spectre)

This update for qemu fixes the following issues: A mitigation for a security flaw has been applied : - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. bsc1068032...

SUSE SLES11 Security Update : libvorbis (SUSE-SU-2018:0016-1)

This update for libvorbis fixes the following issues : - CVE-2017-14633: out-of-bounds array read vulnerability exists in function mapping0forward could lead to remote denial of service bsc1059811 - CVE-2017-14632: Remote Code Execution upon freeing uninitialized memory in function...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2017:3455-1)

This update for java-171-ibm fixes the following issues : - Security update to version 7.1.4.15 bsc1070162 - CVE-2017-10349: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161,...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2017:3440-1)

This update for java-171-ibm fixes the following issues : - CVE-2017-10349: 'Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144;...

SUSE SLES11 Security Update : java-1_6_0-ibm (SUSE-SU-2017:3369-1)

This update for java-160-ibm fixes the following issues: Security issues fixed : - Security update to version 6.0.16.50 bsc1070162 - CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356 CVE-2017-10293 CVE-2016-9841 CVE-2017-10355 CVE-2017-10357 CVE-2017-10348 CVE-2017-10349 CVE-2017-10347...

openSUSE: Security Advisory for kernel (openSUSE-SU-2017:3358-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...