SUSE SLES11 Security Update : ncurses (SUSE-SU-2018:0178-1)

This update for ncurses fixes the following issues: Security issue fixed : - CVE-2017-13733: Fix illegal address access in the fmtentry function bsc1056127. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

openSUSE Security Update : salt (openSUSE-2017-1182)

Salt was updated to 2017.7.2 and also to fix various bugs and security issues. See https://docs.saltstack.com/en/develop/topics/releases/2017.7.2.html for full changelog. Security issues fixed : - CVE-2017-14695: A directory traversal during minion id validation was fixed. boo1062462 -...

SUSE SLES11 Security Update : emacs (SUSE-SU-2017:2532-1)

This update for emacs fixes one issues. This security issue was fixed : - CVE-2017-14482: Remote code execution via mails with 'Content-Type: text/enriched' bsc1058425 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

openSUSE Security Update : libzypp / zypper (openSUSE-2017-1009)

The Software Update Stack was updated to receive fixes and enhancements. libzypp : - Adapt to work with GnuPG 2.1.23. bsc1054088 - Support signing with subkeys. bsc1008325 - Enhance sort order for media.1/products. bsc1054671 zypper : - Also show a gpg key's subkeys. bsc1008325 - Improve signatur...

SUSE SLED12 / SLES12 Security Update : libzypp, zypper (SUSE-SU-2017:2344-1)

The Software Update Stack was updated to receive fixes and enhancements. libzypp : - Adapt to work with GnuPG 2.1.23. bsc1054088 - Support signing with subkeys. bsc1008325 - Enhance sort order for media.1/products. bsc1054671 zypper : - Also show a gpg key's subkeys. bsc1008325 - Improve signatur...

SUSE-SU-2017:2344-1 Security update for libzypp, zypper

The Software Update Stack was updated to receive fixes and enhancements. libzypp: - Adapt to work with GnuPG 2.1.23. bsc1054088 - Support signing with subkeys. bsc1008325 - Enhance sort order for media.1/products. bsc1054671 zypper: - Also show a gpg key's subkeys. bsc1008325 - Improve signature...

openSUSE: Security Advisory for libzypp (openSUSE-SU-2017:2111-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libzypp, zypper (important)

The Software Update Stack was updated to receive fixes and enhancements. libzypp: Security issues fixed: - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. bsc1045735, bsc1038984 Bug fixes: - Re-probe on refresh if the repository...

SUSE SLED12 / SLES12 Security Update : libzypp, zypper (SUSE-SU-2017:2040-1)

The Software Update Stack was updated to receive fixes and enhancements. libzypp: Security issues fixed : - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. bsc1045735, bsc1038984 Bug fixes : - Re-probe on refresh if the reposito...

SUSE-SU-2017:2040-1 Security update for libzypp, zypper

The Software Update Stack was updated to receive fixes and enhancements. libzypp: Security issues fixed: - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. bsc1045735, bsc1038984 Bug fixes: - Re-probe on refresh if the repository...

SUSE SLES11 Security Update : apport (SUSE-SU-2017:1938-1)

This update for apport fixes the following issues: Security issue fixed : - CVE-2015-1338: Insecurely created crash dumps could lead to a DoS or privilege escalation through malicious symlinks. bsc947731 Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE SLED12 Security Update : evince (SUSE-SU-2017:1893-1)

This update for evince fixes the following issues : - CVE-2017-1000083: Remote attackers could have used the comicbook mode of evince to inject shell code. bsc1046856, bgo784630 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE SLED12 / SLES12 Security Update : ppp (SUSE-SU-2017:0474-1)

The ppp package was updated to fix the following security issue : - CVE-2015-3310: Fixed a buffer overflow in radius plug-in's rcmksid bsc927841. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2016:3048-1)

This update for MozillaFirefox fixes security issues. The following vulnerabilities were fixed in Firefox ESR 45.5.1 bbsc1012964 : - CVE-2016-9079: Use-after-free in SVG Animation could be used for code execution MFSA 2016-92 bsc1012964 Note that Tenable Network Security has extracted the precedi...

SUSE SLES11 Security Update : vim (SUSE-SU-2016:2938-1)

This update for vim fixes the following security issues : - Fixed CVE-2016-1248, an arbitrary command execution vulnerability bsc1010685 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:2399-1)

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

SUSE SLES11 Security Update : squid (SUSE-SU-2016:2147-1)

This update for squid fixes the following issues : - CVE-2016-4051: backport fix buffer overflow in cachemgr.cgi bsc976553 - CVE-2016-4554: backport fix for header smuggling issue in HTTP Request processing bsc979010 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 Security Update : gimp (SUSE-SU-2016:1962-1)

gimp was updated to fix one security issue. This security issue was fixed : - CVE-2016-4994: Use-after-free vulnerabilities in the channel and layer properties parsing process bsc986021. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

SUSE SLES11 Security Update : SUSE Manager Client Tools (SUSE-SU-2016:1366-1)

This update for SUSE Manager Client Tools provides the following fixes and enhancements : rhnlib : - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo : - Fix file permissions bsc970550 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : Recommended update for git (SUSE-SU-2015:2325-1)

The git package was updated to fix the following security issue : - CVE-2015-7545: Fix remote code execution with recursive fetch of submodules bsc948969. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...