Stay Secure with the Latest Linux Advisories

security advisorymoderateupdate

SUSE: 2019:0863-1 Moderate: DoS and Packet Contamination Fix

An update that solves three vulnerabilities and has 17 fixes is now available. . SUSE Security Update: Security update for several packages related to SUSE Manger 3.1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:0863-1 Rating: moderate References: #1109316 #1111191 #1111910 #1114029 #1114059 #1114157 #1114169 #1117759 #1119081 #1119964 #1121038 #1121195 #1121856 #1122836 #1123991 #1124639 #1126862 #1128781 #1129765 #1130658 Cross-References: CVE-2018-10851 CVE-2018-14626 CVE-2018-17197 Affected Products: SUSE Manager Server 3.1 SUSE Manager Proxy 3.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 17 fixes is now available. Description: This consolidated update includes multiple patchinfos for SUSE Manager Server and Proxy and follow security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157). - CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 3.1: zypper in -t patch SUSE-SUSE-Manager-Server-3.1-2019-863=1 - SUSE Manager Proxy 3.1: zypper in -t patch SUSE-SUSE-Manager-Proxy-3.1-2019-863=1 Package List: - SUSE Manager Server 3.1 (ppc64le s390x x86_64): spacewalk-branding-2.7.2.17-2.31.3 susemanager-3.1.19-2.34.2 susemanager-tools-3.1.19-2.34.2 - SUSE Manager Server 3.1 (noarch): cobbler-2.6.6-5.25.1 py26-compat-salt-2016.11.10-1.19.3 spacecmd-2.7.8.15-2.32.1 spacewalk-base-2.7.1.21-2.35.1 spacewalk-base-minimal-2.7.1.21-2.35.1 spacewalk-base-minimal-config-2.7.1.21-2.35.1 spacewalk-html-2.7.1.21-2.35.1 spacewalk-java-2.7.46.19-2.41.3 spacewalk-java-config-2.7.46.19-2.41.3 spacewalk-java-lib-2.7.46.19-2.41.3 spacewalk-java-oracle-2.7.46.19-2.41.3 spacewalk-java-postgresql-2.7.46.19-2.41.3 spacewalk-taskomatic-2.7.46.19-2.41.3 spacewalk-utils-2.7.10.11-2.23.3 subscription-matcher-0.22-4.9.2 susemanager-advanced-topics_en-pdf-3.1-10.29.4 susemanager-best-practices_en-pdf-3.1-10.29.4 susemanager-docs_en-3.1-10.29.4 susemanager-frontend-libs-3.1.2-3.10.1 susemanager-getting-started_en-pdf-3.1-10.29.4 susemanager-jsp_en-3.1-10.29.4 susemanager-reference_en-pdf-3.1-10.29.4 susemanager-schema-3.1.21-2.36.1 tika-core-1.20-1.6.2 - SUSE Manager Proxy 3.1 (noarch): spacewalk-base-minimal-2.7.1.21-2.35.1 spacewalk-base-minimal-config-2.7.1.21-2.35.1 References: https://www.suse.com/security/cve/CVE-2018-10851.html https://www.suse.com/security/cve/CVE-2018-14626.html https://www.suse.com/security/cve/CVE-2018-17197.html https://bugzilla.suse.com/1109316 https://bugzilla.suse.com/1111191 https://bugzilla.suse.com/1111910 https://bugzilla.suse.com/1114029 https://bugzilla.suse.com/1114059 https://bugzilla.suse.com/1114157 https://bugzilla.suse.com/1114169 https://bugzilla.suse.com/1117759 https://bugzilla.suse.com/1119081 https://bugzilla.suse.com/1119964 https://bugzilla.suse.com/1121038 https://bugzilla.suse.com/1121195 https://bugzilla.suse.com/1121856 https://bugzilla.suse.com/1122836 https://bugzilla.suse.com/1123991 https://bugzilla.suse.com/1124639 https://bugzilla.suse.com/1126862 https://bugzilla.suse.com/1128781 https://bugzilla.suse.com/1129765 https://bugzilla.suse.com/1130658 _______________________________________________ sle-security-updates mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . New security patch released for SUSE Manager software resolving several vulnerabilities with 17 critical enhancements applied.. SUSE Manager Updates, Security Patches, System Security Enhancements. . LinuxSecurity.com Team

Apr 03, 2019 SuSE