Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2319-1 Final 1 1 2017-08-31T19:40:38Z current 2017-08-31T19:40:38Z 2017-08-31T19:40:38Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787). - CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788). - CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578). - CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637). - CVE-2017-11334: The address_space_write_continue function in exec.c allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048920). - CVE-2017-10806: Stack-based buffer overflow in hw/usb/redirect.c allowed local guest OS users to cause a denial of service via vectors related to logging debug messages (bsc#1047675). - bsc#1052686: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230). This non-security issue was fixed: - bsc#1002573: Optimized LVM functions in block-dmmd block-dmmd The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2017-1428,SUSE-SLE-SAP-12-SP1-2017-1428,SUSE-SLE-SERVER-12-SP1-2017-1428 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ Link for SUSE-SU-2017:2319-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00000.html E-Mail link for SUSE-SU-2017:2319-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1002573 SUSE Bug 1002573 https://bugzilla.suse.com/1046637 SUSE Bug 1046637 https://bugzilla.suse.com/1047675 SUSE Bug 1047675 https://bugzilla.suse.com/1048920 SUSE Bug 1048920 https://bugzilla.suse.com/1049578 SUSE Bug 1049578 https://bugzilla.suse.com/1051787 SUSE Bug 1051787 https://bugzilla.suse.com/1051788 SUSE Bug 1051788 https://bugzilla.suse.com/1052686 SUSE Bug 1052686 https://www.suse.com/security/cve/CVE-2017-10664/ SUSE CVE CVE-2017-10664 page https://www.suse.com/security/cve/CVE-2017-10806/ SUSE CVE CVE-2017-10806 page https://www.suse.com/security/cve/CVE-2017-11334/ SUSE CVE CVE-2017-11334 page https://www.suse.com/security/cve/CVE-2017-11434/ SUSE CVE CVE-2017-11434 page https://www.suse.com/security/cve/CVE-2017-12135/ SUSE CVE CVE-2017-12135 page https://www.suse.com/security/cve/CVE-2017-12137/ SUSE CVE CVE-2017-12137 page SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE OpenStack Cloud 6 xen-4.5.5_14-22.25.1 xen-doc-html-4.5.5_14-22.25.1 xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 xen-libs-4.5.5_14-22.25.1 xen-libs-32bit-4.5.5_14-22.25.1 xen-tools-4.5.5_14-22.25.1 xen-tools-domU-4.5.5_14-22.25.1 xen-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-doc-html-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-libs-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-libs-32bit-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-tools-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-tools-domU-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS xen-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-doc-html-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-libs-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-libs-32bit-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-tools-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-tools-domU-4.5.5_14-22.25.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 xen-4.5.5_14-22.25.1 as a component of SUSE OpenStack Cloud 6 xen-doc-html-4.5.5_14-22.25.1 as a component of SUSE OpenStack Cloud 6 xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 as a component of SUSE OpenStack Cloud 6 xen-libs-4.5.5_14-22.25.1 as a component of SUSE OpenStack Cloud 6 xen-libs-32bit-4.5.5_14-22.25.1 as a component of SUSE OpenStack Cloud 6 xen-tools-4.5.5_14-22.25.1 as a component of SUSE OpenStack Cloud 6 xen-tools-domU-4.5.5_14-22.25.1 as a component of SUSE OpenStack Cloud 6 qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt. CVE-2017-10664 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-domU-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-doc-html-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE OpenStack Cloud 6:xen-libs-32bit-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-libs-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-domU-4.5.5_14-22.25.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ https://www.suse.com/security/cve/CVE-2017-10664.html CVE-2017-10664 https://bugzilla.suse.com/1046636 SUSE Bug 1046636 https://bugzilla.suse.com/1046637 SUSE Bug 1046637 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messages. CVE-2017-10806 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-domU-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-doc-html-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE OpenStack Cloud 6:xen-libs-32bit-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-libs-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-domU-4.5.5_14-22.25.1 important 4 AV:L/AC:H/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ https://www.suse.com/security/cve/CVE-2017-10806.html CVE-2017-10806 https://bugzilla.suse.com/1047674 SUSE Bug 1047674 https://bugzilla.suse.com/1047675 SUSE Bug 1047675 The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area. CVE-2017-11334 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-domU-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-doc-html-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE OpenStack Cloud 6:xen-libs-32bit-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-libs-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-domU-4.5.5_14-22.25.1 important 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ https://www.suse.com/security/cve/CVE-2017-11334.html CVE-2017-11334 https://bugzilla.suse.com/1048902 SUSE Bug 1048902 https://bugzilla.suse.com/1048920 SUSE Bug 1048920 The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string. CVE-2017-11434 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-domU-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-doc-html-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE OpenStack Cloud 6:xen-libs-32bit-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-libs-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-domU-4.5.5_14-22.25.1 important 4.7 AV:L/AC:M/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ https://www.suse.com/security/cve/CVE-2017-11434.html CVE-2017-11434 https://bugzilla.suse.com/1049381 SUSE Bug 1049381 https://bugzilla.suse.com/1049578 SUSE Bug 1049578 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants. CVE-2017-12135 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-domU-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-doc-html-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE OpenStack Cloud 6:xen-libs-32bit-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-libs-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-domU-4.5.5_14-22.25.1 important 5.2 AV:L/AC:H/Au:N/C:P/I:P/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ https://www.suse.com/security/cve/CVE-2017-12135.html CVE-2017-12135 https://bugzilla.suse.com/1051787 SUSE Bug 1051787 https://bugzilla.suse.com/1169392 SUSE Bug 1169392 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref. CVE-2017-12137 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server 12 SP1-LTSS:xen-tools-domU-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.5_14-22.25.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-doc-html-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-kmp-default-4.5.5_14_k3.12.74_60.64.54-22.25.1 SUSE OpenStack Cloud 6:xen-libs-32bit-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-libs-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-4.5.5_14-22.25.1 SUSE OpenStack Cloud 6:xen-tools-domU-4.5.5_14-22.25.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172319-1/ https://www.suse.com/security/cve/CVE-2017-12137.html CVE-2017-12137 https://bugzilla.suse.com/1051788 SUSE Bug 1051788 https://bugzilla.suse.com/1178658 SUSE Bug 1178658