shield Security update for flex, at, bogofilter, cyrus-imapd, kdelibs4, libqtwebkit4, libbonobo, mdbtools, netpbm, openslp, sgmltool, virtuoso, libqt5-qtwebkit

SUSE-SLE-SDK-12-SP1-2016-1390

Various packages included vulnerable parsers generated by "flex". This update provides a fixed "flex" package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner (bsc#990856, CVE-2016-6354) Packages that were rebuilt with the fixed flex: - at - bogofilter - cyrus-imapd - kdelibs4 - libQtWebKit4 - libbonobo - mdbtools - netpbm - openslp - sgmltool - virtuoso Also libqt5-qtwebkit received an additional security fix: - CVE-2015-8079: QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode (bsc#954210).

• Release Date
  Sep 27 2016
• References
  Bugzilla: 990856, 954210
  CVEs: CVE-2016-6354, CVE-2015-8079
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 ppc64le

• Packages
  flex
  Fast Lexical Analyzer Generator

  2.5.37-8.1

  lock rpm

  lock src

  libQtWebKit-devel
  Development files for qtwebkit

  4.8.6+2.3.3-3.1

  lock rpm

  libQtWebKit4
  Open source Web Browser engine based on Qt4

  4.8.6+2.3.3-3.1

  lock src

  libbonobo
  The Bonobo Component System for the GNOME 2.x Desktop Platform

  2.32.1-16.1

  lock src

  libbonobo-devel
  Include Files and Libraries mandatory for Development.

  2.32.1-16.1

  lock rpm

  libnetpbm-devel
  Libraries for the NetPBM Graphic Formats - files mandatory for development

  10.66.3-4.1

  lock rpm

  mdbtools
  A Suite of Libraries and Programs to Access Microsoft Access Databases

  0.7-5.1

  lock rpm

  lock src

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-4.1

  lock src

  openslp
  An OpenSLP Implementation of Service Location Protocol V2

  2.0.0-11.1

  lock src

  openslp-devel
  OpenSLP Development SDK

  2.0.0-11.1

  lock rpm

  sgmltool
  SGML-Tools - a Text-Formatting Package

  1.0.9-1075.1

  lock rpm

  lock src

SUSE Linux Enterprise Software Development Kit 12.1 s390x

• Packages
  flex
  Fast Lexical Analyzer Generator

  2.5.37-8.1

  lock rpm

  lock src

  libbonobo
  The Bonobo Component System for the GNOME 2.x Desktop Platform

  2.32.1-16.1

  lock src

  libbonobo-devel
  Include Files and Libraries mandatory for Development.

  2.32.1-16.1

  lock rpm

  libnetpbm-devel
  Libraries for the NetPBM Graphic Formats - files mandatory for development

  10.66.3-4.1

  lock rpm

  mdbtools
  A Suite of Libraries and Programs to Access Microsoft Access Databases

  0.7-5.1

  lock rpm

  lock src

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-4.1

  lock src

  openslp
  An OpenSLP Implementation of Service Location Protocol V2

  2.0.0-11.1

  lock src

  openslp-devel
  OpenSLP Development SDK

  2.0.0-11.1

  lock rpm

  sgmltool
  SGML-Tools - a Text-Formatting Package

  1.0.9-1075.1

  lock rpm

  lock src

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  flex
  Fast Lexical Analyzer Generator

  2.5.37-8.1

  lock rpm

  lock src

  libQtWebKit-devel
  Development files for qtwebkit

  4.8.6+2.3.3-3.1

  lock rpm

  libQtWebKit4
  Open source Web Browser engine based on Qt4

  4.8.6+2.3.3-3.1

  lock src

  libbonobo
  The Bonobo Component System for the GNOME 2.x Desktop Platform

  2.32.1-16.1

  lock src

  libbonobo-devel
  Include Files and Libraries mandatory for Development.

  2.32.1-16.1

  lock rpm

  libnetpbm-devel
  Libraries for the NetPBM Graphic Formats - files mandatory for development

  10.66.3-4.1

  lock rpm

  mdbtools
  A Suite of Libraries and Programs to Access Microsoft Access Databases

  0.7-5.1

  lock rpm

  lock src

  netpbm
  A Powerful Graphics Conversion Package

  10.66.3-4.1

  lock src

  openslp
  An OpenSLP Implementation of Service Location Protocol V2

  2.0.0-11.1

  lock src

  openslp-devel
  OpenSLP Development SDK

  2.0.0-11.1

  lock rpm

  sgmltool
  SGML-Tools - a Text-Formatting Package

  1.0.9-1075.1

  lock rpm

  lock src