Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 3 articles for you...
202

openSUSE 15.0: 2019:0086-1 Moderate: Soundtouch Denial of Service Fix

An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0086-1 Rating: moderate References: #1108631 #1108632 Cross-References: CVE-2018-17097 CVE-2018-17098 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: Security issues fixed: - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108632) - CVE-2018-17097: Fixed a double free, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108631) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-86=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libSoundTouch0-1.8.0-lp150.2.9.1 libSoundTouch0-debuginfo-1.8.0-lp150.2.9.1 soundtouch-1.8.0-lp150.2.9.1 soundtouch-debuginfo-1.8.0-lp150.2.9.1 soundtouch-debugsource-1.8.0-lp150.2.9.1 soundtouch-devel-1.8.0-lp150.2.9.1 - openSUSE Leap 15.0 (x86_64): libSoundTouch0-32bit-1.8.0-lp150.2.9.1 libSoundTouch0-32bit-debuginfo-1.8.0-lp150.2.9.1 References: https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 -- . openSUSE Security Update: Security update for soundtouch ___________________________________________. update, security, fixes, vulnerabilities, opensuse. . LinuxSecurity.com Team

Calendar%202 Jan 25, 2019 OpenSUSE
100

SUSE: 2019:0112-1 Moderate: Soundtouch Denial Of Service Risks

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:0112-1 Rating: moderate References: #1108631 #1108632 Cross-References: CVE-2018-17097 CVE-2018-17098 Affected Products: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Desktop Applications 15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: Security issues fixed: - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108632) - CVE-2018-17097: Fixed a double free, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108631) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2019-112=1 - SUSE Linux Enterprise Module for Desktop Applications 15: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-2019-112=1 Package List: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64): soundtouch-1.8.0-3.11.1 soundtouch-debuginfo-1.8.0-3.11.1 soundtouch-debugsource-1.8.0-3.11.1 - SUSE Linux Enterprise Module for Desktop Applications 15 (aarch64 ppc64le s390x x86_64): libSoundTouch0-1.8.0-3.11.1 libSoundTouch0-debuginfo-1.8.0-3.11.1 soundtouch-debuginfo-1.8.0-3.11.1 soundtouch-debugsource-1.8.0-3.11.1 soundtouch-devel-1.8.0-3.11.1 References: https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . SUSE Security Update addresses various soundtouch vulnerabilities of moderate severity and provides detailed installation guidelines.. Linux Update, SoundTouch Security, SUSE Security Patch. . LinuxSecurity.com Team

Calendar%202 Jan 17, 2019 SuSE
100

SUSE: 2019:0096-1 Moderate: SoundTouch Denial Of Service Update

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:0096-1 Rating: moderate References: #1108631 #1108632 Cross-References: CVE-2018-17097 CVE-2018-17098 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP4 SUSE Linux Enterprise Workstation Extension 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP4 SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP4 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: Security issues fixed: - CVE-2018-17098: Fixed a heap corruption from size inconsistency, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108632) - CVE-2018-17097: Fixed a double free, which allowed remote attackers to cause a denial of service or possibly have other unspecified impact (bsc#1108631) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP4: zypper in -t patch SUSE-SLE-WE-12-SP4-2019-96=1 - SUSE Linux Enterprise Workstation Extension 12-SP3: zypper in -t patch SUSE-SLE-WE-12-SP3-2019-96=1 - SUSE Linux Enterprise Software Development Kit 12-SP4: zypper in -t patchSUSE-SLE-SDK-12-SP4-2019-96=1 - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2019-96=1 - SUSE Linux Enterprise Server 12-SP4: zypper in -t patch SUSE-SLE-SERVER-12-SP4-2019-96=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-96=1 - SUSE Linux Enterprise Desktop 12-SP4: zypper in -t patch SUSE-SLE-DESKTOP-12-SP4-2019-96=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2019-96=1 Package List: - SUSE Linux Enterprise Workstation Extension 12-SP4 (x86_64): libSoundTouch0-32bit-1.7.1-5.11.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.11.1 soundtouch-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 - SUSE Linux Enterprise Workstation Extension 12-SP3 (x86_64): libSoundTouch0-32bit-1.7.1-5.11.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.11.1 soundtouch-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 - SUSE Linux Enterprise Software Development Kit 12-SP4 (aarch64 ppc64le s390x x86_64): soundtouch-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 soundtouch-devel-1.7.1-5.11.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): soundtouch-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 soundtouch-devel-1.7.1-5.11.1 - SUSE Linux Enterprise Server 12-SP4 (aarch64 ppc64le s390x x86_64): libSoundTouch0-1.7.1-5.11.1 libSoundTouch0-debuginfo-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libSoundTouch0-1.7.1-5.11.1 libSoundTouch0-debuginfo-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 - SUSE Linux Enterprise Desktop 12-SP4 (x86_64): libSoundTouch0-1.7.1-5.11.1 libSoundTouch0-32bit-1.7.1-5.11.1 libSoundTouch0-debuginfo-1.7.1-5.11.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.11.1 soundtouch-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libSoundTouch0-1.7.1-5.11.1 libSoundTouch0-32bit-1.7.1-5.11.1 libSoundTouch0-debuginfo-1.7.1-5.11.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.11.1 soundtouch-1.7.1-5.11.1 soundtouch-debuginfo-1.7.1-5.11.1 soundtouch-debugsource-1.7.1-5.11.1 References: https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . SUSE Security Update: Security update for soundtouch _______________________________________________. update, security, fixes, vulnerabilities. . LinuxSecurity.com Team

Calendar%202 Jan 15, 2019 SuSE
100

SUSE: 2018:3606-2 Moderate: SoundTouch Denial of Service Issues

An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:3606-2 Rating: moderate References: #1108630 #1108631 #1108632 Cross-References: CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP4 SUSE Linux Enterprise Software Development Kit 12-SP4 SUSE Linux Enterprise Server 12-SP4 SUSE Linux Enterprise Desktop 12-SP4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) - CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) - CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP4: zypper in -t patch SUSE-SLE-WE-12-SP4-2018-2564=1 - SUSE Linux Enterprise Software Development Kit 12-SP4: zypper in -t patch SUSE-SLE-SDK-12-SP4-2018-2564=1 - SUSE Linux EnterpriseServer 12-SP4: zypper in -t patch SUSE-SLE-SERVER-12-SP4-2018-2564=1 - SUSE Linux Enterprise Desktop 12-SP4: zypper in -t patch SUSE-SLE-DESKTOP-12-SP4-2018-2564=1 Package List: - SUSE Linux Enterprise Workstation Extension 12-SP4 (x86_64): libSoundTouch0-32bit-1.7.1-5.6.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.6.1 soundtouch-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 - SUSE Linux Enterprise Software Development Kit 12-SP4 (aarch64 ppc64le s390x x86_64): soundtouch-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 soundtouch-devel-1.7.1-5.6.1 - SUSE Linux Enterprise Server 12-SP4 (aarch64 ppc64le s390x x86_64): libSoundTouch0-1.7.1-5.6.1 libSoundTouch0-debuginfo-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 - SUSE Linux Enterprise Desktop 12-SP4 (x86_64): libSoundTouch0-1.7.1-5.6.1 libSoundTouch0-32bit-1.7.1-5.6.1 libSoundTouch0-debuginfo-1.7.1-5.6.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.6.1 soundtouch-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 References: https://www.suse.com/security/cve/CVE-2018-17096.html https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108630 https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . An important patch has been released for SUSE addressing several moderate vulnerabilities in soundtouch across different distributions. Ensure you upgrade immediately!. SUSE SoundTouch Update, Security Fix, Moderate Risk, Denial of Service, Update Instructions. . LinuxSecurity.com Team

Calendar%202 Dec 10, 2018 SuSE
203

Mageia 6: MGASA-2018-0462 Moderate: Soundtouch Heap Corruption Fix

Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096). Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097). Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098). References: . MGASA-2018-0462 - Updated soundtouch packages fix security vulnerabilities Publication date: 20 Nov 2018 URL: https://advisories.mageia.org/MGASA-2018-0462.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-17096, CVE-2018-17097, CVE-2018-17098 Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096). Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097). Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098). References: - https://bugs.mageia.org/show_bug.cgi?id=23823 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-17096 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-17097 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-17098 - https://www.cve.org/CVERecord?id=CVE-2018-17096 - https://www.cve.org/CVERecord?id=CVE-2018-17097 - https://www.cve.org/CVERecord?id=CVE-2018-17098 SRPMS: - 6/core/soundtouch-2.1.1-1.mga6 . Recent updates to the soundtouch packages in Mageia address multiple security vulnerabilities, such as assertion failures and heap memory corruptions.. soundtouch update, Mageia security, heap corruption, software update. . LinuxSecurity.com Team

Calendar%202 Nov 20, 2018 Mageia
202

openSUSE: 2018:3691-1 Moderate: Soundtouch Denial of Service

An update that fixes three vulnerabilities is now available.. openSUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:3691-1 Rating: moderate References: #1108630 #1108631 #1108632 Cross-References: CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) - CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) - CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1362=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libSoundTouch0-1.8.0-lp150.2.6.1 libSoundTouch0-debuginfo-1.8.0-lp150.2.6.1 soundtouch-1.8.0-lp150.2.6.1 soundtouch-debuginfo-1.8.0-lp150.2.6.1 soundtouch-debugsource-1.8.0-lp150.2.6.1 soundtouch-devel-1.8.0-lp150.2.6.1 -openSUSE Leap 15.0 (x86_64): libSoundTouch0-32bit-1.8.0-lp150.2.6.1 libSoundTouch0-32bit-debuginfo-1.8.0-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-17096.html https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108630 https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 -- . Addressing a trio of application concerns in Soundtouch for enhanced security and reliability on openSUSE.. soundtouch Security Update, openSUSE Denial of Service Fix, moderate Vulnerability Patch. . LinuxSecurity.com Team

Calendar%202 Nov 10, 2018 OpenSUSE
100

SUSE: 2018:3610-1 Moderate: soundtouch Denial Of Service Issues

An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:3610-1 Rating: moderate References: #1108630 #1108631 #1108632 Cross-References: CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Affected Products: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Desktop Applications 15 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) - CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) - CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2018-2565=1 - SUSE Linux Enterprise Module for Desktop Applications 15: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-2018-2565=1 Package List: - SUSE Linux Enterprise Modulefor Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64): soundtouch-1.8.0-3.6.1 soundtouch-debuginfo-1.8.0-3.6.1 soundtouch-debugsource-1.8.0-3.6.1 - SUSE Linux Enterprise Module for Desktop Applications 15 (aarch64 ppc64le s390x x86_64): libSoundTouch0-1.8.0-3.6.1 libSoundTouch0-debuginfo-1.8.0-3.6.1 soundtouch-debuginfo-1.8.0-3.6.1 soundtouch-debugsource-1.8.0-3.6.1 soundtouch-devel-1.8.0-3.6.1 References: https://www.suse.com/security/cve/CVE-2018-17096.html https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108630 https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . SUSE releases urgent soundtouch fix addressing a trio of vulnerabilities. Implement updates to boost security and performance.. SUSE Security Update,soundtouch fixes,Denial of Service,moderate vulnerabilities,security updates. . LinuxSecurity.com Team

Calendar%202 Nov 02, 2018 SuSE
100

SUSE: 2018:3606-1 Moderate: Soundtouch DoS Threat Update

An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for soundtouch ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:3606-1 Rating: moderate References: #1108630 #1108631 #1108632 Cross-References: CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) - CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) - CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP3: zypper in -t patch SUSE-SLE-WE-12-SP3-2018-2564=1 - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-2564=1 - SUSE Linux EnterpriseServer 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-2564=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-2564=1 Package List: - SUSE Linux Enterprise Workstation Extension 12-SP3 (x86_64): libSoundTouch0-32bit-1.7.1-5.6.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.6.1 soundtouch-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): soundtouch-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 soundtouch-devel-1.7.1-5.6.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libSoundTouch0-1.7.1-5.6.1 libSoundTouch0-debuginfo-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libSoundTouch0-1.7.1-5.6.1 libSoundTouch0-32bit-1.7.1-5.6.1 libSoundTouch0-debuginfo-1.7.1-5.6.1 libSoundTouch0-debuginfo-32bit-1.7.1-5.6.1 soundtouch-1.7.1-5.6.1 soundtouch-debuginfo-1.7.1-5.6.1 soundtouch-debugsource-1.7.1-5.6.1 References: https://www.suse.com/security/cve/CVE-2018-17096.html https://www.suse.com/security/cve/CVE-2018-17097.html https://www.suse.com/security/cve/CVE-2018-17098.html https://bugzilla.suse.com/1108630 https://bugzilla.suse.com/1108631 https://bugzilla.suse.com/1108632 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . SUSE Security Patch resolves soundtouch vulnerabilities, enhancing both efficiency and protection for your platform.. SUSE Linux, Soundtouch Security Fix, DoS Patching. . LinuxSecurity.com Team

Calendar%202 Nov 02, 2018 SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200