SUSE-SU-2016:3041-1 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: - Version update to 7.1-3.60 bsc1009280 fixing the following CVE's: CVE-2016-5568, CVE-2016-5556, CVE-2016-5573, CVE-2016-5597, CVE-2016-5554, CVE-2016-5542...

Security fix for the ALT Linux 7 package wireshark version 2.2.2-alt1

Nov. 21, 2016 Anton Farygin 2.2.2-alt1 - new version, in which following vulnerabilities have been fixed: CVE-2016-9372 Profinet I/O long loop. CVE-2016-9373 DCERPC crash. CVE-2016-9374 AllJoyn crash. CVE-2016-9375 DTN infinite loop. CVE-2016-9376 OpenFlow crash...

SUSE-SU-2016:2700-1 Security update for curl

This update for curl fixes the following issues: - CVE-2016-8624: invalid URL parsing with '' bsc1005646 - CVE-2016-8623: Use-after-free via shared cookies bsc1005645 - CVE-2016-8621: curlgetdate read out of bounds bsc1005642 - CVE-2016-8619: double-free in krb5 code bsc1005638 - CVE-2016-8618:...

SUSE-SU-2016:2668-1 Security update for gd

This update for gd fixes the following security issues: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

OPENSUSE-SU-2016:2597-1 Security update for Chromium

Chromium was updated to 54.0.2840.59 to fix security issues and bugs. The following security issues are fixed bnc1004465: - CVE-2016-5181: Universal XSS in Blink - CVE-2016-5182: Heap overflow in Blink - CVE-2016-5183: Use after free in PDFium - CVE-2016-5184: Use after free in PDFium -...

SUSE-SU-2016:2460-2 Security update for php7

This update for php7 fixes the following security issues: CVE-2016-6128: Invalid color index not properly handled bsc987580 CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif bsc988032 CVE-2016-6292: Null pointer dereference in exifprocessusercomment...

OPENSUSE-SU-2016:2250-1 Security update for Chromium

Chromium was updated to 53.0.2785.89 to fix a number of security issues. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free in Blink....

SUSE-SU-2016:2251-1 Security update for Chromium

Chromium was updated to 53.0.2785.89 to fix a number of security issues. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free in Blink....

SUSE-SU-2016:1620-1 Security update for mariadb

mariadb was updated to version 10.0.25 to fix 25 security issues. These security issues were fixed: - CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options bsc980904. - CVE-2016-0546: Unspecified vulnerability...

SUSE-SU-2016:1613-1 Security update for flash-player

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 boo984695: APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

SUSE-SU-2016:1602-1 Security update for ntp

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed: - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. -...

MGASA-2016-0182 Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities: The mariadb package has been updated to version 10.0.25. It fixes several security issues CVE-2016-0643, CVE-2016-0647, CVE-2016-0648, CVE-2016-0655, CVE-2016-0666 and other bugs. See the upstream release notes for details...

SUSE-SU-2016:1291-1 Security update for ntp

This update for ntp to 4.2.8p7 fixes the following issues: CVE-2016-1547, bsc977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS. CVE-2016-1548, bsc977461: Interleave-pivot CVE-2016-1549, bsc977451: Sybil vulnerability: ephemeral association attack. CVE-2016-1550, bsc977464: Improve NTP security...

Security update update for MozillaFirefox, mozilla-nss (important)

This update to Mozilla Firefox 46.0 fixes several security issues and bugs boo977333. The following vulnerabilities were fixed: - CVE-2016-2804: Miscellaneous memory safety hazards - MFSA 2016-39 boo977373 - CVE-2016-2806: Miscellaneous memory safety hazards - MFSA 2016-39 boo977375 -...

SUSE-SU-2016:1145-1 Security update for php53

This update for php53 fixes the following issues: - CVE-2015-8838: mysqlnd was vulnerable to BACKRONYM bnc973792. - CVE-2015-8835: SoapClient scall method suffered from a type confusion issue that could have lead to crashes bsc973351 - CVE-2016-2554: A NULL pointer dereference in phargetfpoffset...

SUSE-SU-2016:0398-1 Security update for flash-player

This update for flash-player fixes the following issues: - Security update to 11.2.202.569 bsc965901: APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-2016-0973, CVE-2016-0974, CVE-2016-0975,...

SUSE-SU-2016:0119-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a...

Internet Bug Bounty: Perl 5.22 VDir::MapPathA/W Out-of-bounds Reads and Buffer Over-reads

I have reported multiple vulnerabilities in Perl that have now been fixed. https://rt.perl.org/Public/Bug/Display.html?id=126755 --- Perl 5.22 suffers from two out-of-bounds read and multiple small buffer over-read vulnerabilities in the VDir::MapPathA and VDir::MapPathW functions that could...

SUSE-SU-2016:0011-1 Security update for libmspack

libmspack was updated to fix security issues. These security issues were fixed: CVE-2014-9732: The cabdextract function in cabd.c in libmspack did not properly maintain decompression callbacks in certain cases where an invalid file follows a valid file, which allowed remote attackers to cause a...

v8: multiple vulnerabilities fixed in 4.7.80.23

Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have other impact via unknown vectors, a different issue than CVE-2015-8478...