Security update for wireshark SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2212-1 Final 1 1 2016-09-02T07:00:12Z current 2016-09-02T07:00:12Z 2016-09-02T07:00:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wireshark This update to wireshark 1.12.13 fixes the following issues: - CVE-2016-6504: wireshark: NDS dissector crash (bsc#991012) - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero (bsc#991013) - CVE-2016-6506: wireshark: WSP infinite loop (bsc#991015) - CVE-2016-6507: wireshark: MMSE infinite loop (bsc#991016) - CVE-2016-6508: wireshark: RLC long loop (bsc#991017) - CVE-2016-6509: wireshark: LDSS dissector crash (bsc#991018) - CVE-2016-6510: wireshark: RLC dissector crash (bsc#991019) - CVE-2016-6511: wireshark: OpenFlow long loop (bnc991020) - CVE-2016-5350: SPOOLS infinite loop (bsc#983671) - CVE-2016-5351: IEEE 802.11 dissector crash (bsc#983671) - CVE-2016-5352: IEEE 802.11 dissector crash, different from wpna-sec-2016-30 (bsc#983671) - CVE-2016-5353: UMTS FP crash (bsc#983671) - CVE-2016-5354: USB dissector crash (bsc#983671) - CVE-2016-5355: Toshiba file parser crash (bsc#983671) - CVE-2016-5356: CoSine file parser crash (bsc#983671) - CVE-2016-5357: NetScreen file parser crash (bsc#983671) - CVE-2016-5358: Ethernet dissector crash (bsc#983671) - CVE-2016-5359: WBXML infinite loop (bsc#983671) For more details please see: https://www.wireshark.org/docs/relnotes/wireshark-1.12.12.html https://www.wireshark.org/docs/relnotes/wireshark-1.12.13.html The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-wireshark-12725,slessp4-wireshark-12725 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ Link for SUSE-SU-2016:2212-1 https://lists.suse.com/pipermail/sle-security-updates/2016-September/002249.html E-Mail link for SUSE-SU-2016:2212-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/983671 SUSE Bug 983671 https://bugzilla.suse.com/991012 SUSE Bug 991012 https://bugzilla.suse.com/991013 SUSE Bug 991013 https://bugzilla.suse.com/991015 SUSE Bug 991015 https://bugzilla.suse.com/991016 SUSE Bug 991016 https://bugzilla.suse.com/991017 SUSE Bug 991017 https://bugzilla.suse.com/991018 SUSE Bug 991018 https://bugzilla.suse.com/991019 SUSE Bug 991019 https://bugzilla.suse.com/991020 SUSE Bug 991020 https://www.suse.com/security/cve/CVE-2016-5350/ SUSE CVE CVE-2016-5350 page https://www.suse.com/security/cve/CVE-2016-5351/ SUSE CVE CVE-2016-5351 page https://www.suse.com/security/cve/CVE-2016-5352/ SUSE CVE CVE-2016-5352 page https://www.suse.com/security/cve/CVE-2016-5353/ SUSE CVE CVE-2016-5353 page https://www.suse.com/security/cve/CVE-2016-5354/ SUSE CVE CVE-2016-5354 page https://www.suse.com/security/cve/CVE-2016-5355/ SUSE CVE CVE-2016-5355 page https://www.suse.com/security/cve/CVE-2016-5356/ SUSE CVE CVE-2016-5356 page https://www.suse.com/security/cve/CVE-2016-5357/ SUSE CVE CVE-2016-5357 page https://www.suse.com/security/cve/CVE-2016-5358/ SUSE CVE CVE-2016-5358 page https://www.suse.com/security/cve/CVE-2016-5359/ SUSE CVE CVE-2016-5359 page https://www.suse.com/security/cve/CVE-2016-6504/ SUSE CVE CVE-2016-6504 page https://www.suse.com/security/cve/CVE-2016-6505/ SUSE CVE CVE-2016-6505 page https://www.suse.com/security/cve/CVE-2016-6506/ SUSE CVE CVE-2016-6506 page https://www.suse.com/security/cve/CVE-2016-6507/ SUSE CVE CVE-2016-6507 page https://www.suse.com/security/cve/CVE-2016-6508/ SUSE CVE CVE-2016-6508 page https://www.suse.com/security/cve/CVE-2016-6509/ SUSE CVE CVE-2016-6509 page https://www.suse.com/security/cve/CVE-2016-6510/ SUSE CVE CVE-2016-6510 page https://www.suse.com/security/cve/CVE-2016-6511/ SUSE CVE CVE-2016-6511 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 wireshark-1.12.13-0.23.1 wireshark-devel-1.12.13-0.23.1 wireshark-1.12.13-0.23.1 as a component of SUSE Linux Enterprise Server 11 SP4 wireshark-1.12.13-0.23.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 wireshark-1.12.13-0.23.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 wireshark-devel-1.12.13-0.23.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. CVE-2016-5350 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5350.html CVE-2016-5350 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_RSN_KEY, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5351 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5351.html CVE-2016-5351 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5352 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5352.html CVE-2016-5352 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the reserved C/T value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5353 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5353.html CVE-2016-5353 https://bugzilla.suse.com/983671 SUSE Bug 983671 The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5354 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5354.html CVE-2016-5354 https://bugzilla.suse.com/983671 SUSE Bug 983671 wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2016-5355 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5355.html CVE-2016-5355 https://bugzilla.suse.com/983671 SUSE Bug 983671 wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2016-5356 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5356.html CVE-2016-5356 https://bugzilla.suse.com/983671 SUSE Bug 983671 wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file. CVE-2016-5357 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5357.html CVE-2016-5357 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-5358 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5358.html CVE-2016-5358 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted packet. CVE-2016-5359 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-5359.html CVE-2016-5359 https://bugzilla.suse.com/983671 SUSE Bug 983671 epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. CVE-2016-6504 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6504.html CVE-2016-6504 https://bugzilla.suse.com/991012 SUSE Bug 991012 epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet. CVE-2016-6505 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6505.html CVE-2016-6505 https://bugzilla.suse.com/991013 SUSE Bug 991013 epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. CVE-2016-6506 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6506.html CVE-2016-6506 https://bugzilla.suse.com/991015 SUSE Bug 991015 epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. CVE-2016-6507 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6507.html CVE-2016-6507 https://bugzilla.suse.com/991016 SUSE Bug 991016 epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet. CVE-2016-6508 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6508.html CVE-2016-6508 https://bugzilla.suse.com/991017 SUSE Bug 991017 epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. CVE-2016-6509 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6509.html CVE-2016-6509 https://bugzilla.suse.com/991018 SUSE Bug 991018 Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. CVE-2016-6510 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6510.html CVE-2016-6510 https://bugzilla.suse.com/991019 SUSE Bug 991019 epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet. CVE-2016-6511 SUSE Linux Enterprise Server 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-1.12.13-0.23.1 SUSE Linux Enterprise Software Development Kit 11 SP4:wireshark-devel-1.12.13-0.23.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162212-1/ https://www.suse.com/security/cve/CVE-2016-6511.html CVE-2016-6511 https://bugzilla.suse.com/991020 SUSE Bug 991020