Security update for hawk2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1946-1 Final 1 1 2016-08-03T13:26:11Z current 2016-08-03T13:26:11Z 2016-08-03T13:26:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for hawk2 This update for hawk2 fixes one security issue and one bug. The following security change is included: - To prevent Clickjacking attacks, set Content-Security-Policy to frame-ancestors 'self' (bsc#984619) The following non-security issue was fixed: - In the Wizards UI, prevent text display issues due to internationalization with certain strings (bsc#987696) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-HA-12-SP1-2016-1142 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161946-1/ Link for SUSE-SU-2016:1946-1 https://lists.opensuse.org/opensuse-security-announce/2016-08/msg00002.html E-Mail link for SUSE-SU-2016:1946-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/984619 SUSE Bug 984619 https://bugzilla.suse.com/987696 SUSE Bug 987696 SUSE Linux Enterprise High Availability Extension 12 SP1 hawk2-1.0.1+git.1456406635.49e230d-12.1 hawk2-1.0.1+git.1456406635.49e230d-12.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP1