openSUSE: Security Advisory for kernel (openSUSE-SU-2015:1382-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for java-1_7_0-openjdk (openSUSE-SU-2015:0774-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2015:0077-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for the Linux Kernel (important)

The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-3290: A flaw was found in the way the Linux kernels nested NMI handler and espfix64 functionalities interacted during NMI processing. A local, unprivileged user could use...

Juniper Networks Junos OS QFX5100/EX4600 Denial of Service Vulnerability

Junos OS on EX4600 and QFX series switches is prone to a DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS mbuf Denial of Service Vulnerability

Junos OS is prone to a DoS vulnerability by mbuf exhaustion. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Security update for MariaDB (important)

MariaDB was updated to its current minor version, fixing bugs and security issues. These updates include a fix for Logjam CVE-2015-4000, making MariaDB work with client software that no longer allows short DH groups over SSL, as e.g. our current openssl packages. On openSUSE 13.1, MariaDB was...

openSUSE Security Update : XWayland (openSUSE-2015-438)

The XWayland portion of the x.org X11 server was updated to fix one security issue. The following vulnerability was fixed : - CVE-2015-3164: Unauthorised local client access in XWayland boo934102 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : fuse (openSUSE-2015-394)

Update to version 2.9.4 - fix exec environment for mount and umount bsc931452, CVE-2015-3202 - properly restore the default signal handler - fix directory file handle passed toioctl method. - fix for uids/gids larger than 2147483647 - initialize stat buffer passed to getattr and fgetattr...

openSUSE Security Update : GNU parallel (openSUSE-2015-388)

GNU parallel was updated to 20150522 to complete a fix one security issue and augment a fix for another. The following vulnerabilities were fixed : - The security issue for --sshlogin + --fifo/--cat has been fixed. - After further security analysis the issue fixed in 20150422 also fixed the probl...

Security update for php5 (important)

PHP was updated to fix three security issues. The following vulnerabilities were fixed: CVE-2015-3330: Specially crafted PHAR files could, when executed under Apache httpd 2.4 apache2handler, allow arbitrary code execution bnc928506 CVE-2015-3329: Specially crafted PHAR data could lead to...

openSUSE Security Update : Mozille Firefox (openSUSE-2015-326)

Mozilla Firefox was updated to 37.0.2 to fix one security issue. The following vulnerability was fixed : - CVE-2015-2706: Memory corruption during failed plugin initialization bmo1141081 MFSA 2015-45 bnc928116 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2015-0494

CVE-2015-0494 concerns the Oracle Retail Central Office component of Oracle Retail Applications (versions 13.1–14.1). The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors; CVSS notes a network attack vector with partial integrity impact...

CVE-2015-3003

Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before 14.1R3, and 14.2 before 14.2R1 allows local users to gain privileges via crafted combinations of CL...

openSUSE Security Update : libgit2 (openSUSE-2015-288)

libgit2 was updated to fix an arbitrary command execution vulnerability on case-insentitive file systems. The following vulnerability was fixed : - When using programs using libgit2 on case-insensitive filesystems, .git/config could be overwritten, which allowed execution of arbitrary commands...

openSUSE Security Update : gdm (openSUSE-2015-240)

The GNOME Display Manager was updated to fix one security issue : - Removed gdm-fingerprint and gdm-smartcard pamfiles that allowed unlocking the screen without password or fingerprint if fingerprint reader support was enabled. boo900836. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : vsftpd (openSUSE-2015-197)

vsftpd was updated to fix one security issue. This security issue was fixed : - CVE-2015-1419: vsftpd config option denyfile was not handled correctly bnc915522. Note: denyfile shouldn't be used to restrict access, as stated in the documentation. Please use more reliable methods. %NASLMINLEVEL...

openSUSE Security Update : libpng16 (openSUSE-SU-2015:0161-1)

libpng was updated to fix some security issues : - CVE-2014-9495 bnc912076: Heap-buffer overflow pngcombinerow with very wide interlaced images - CVE-2015-0973 bnc912929: overflow in pngreadIDATdata libpng is now also build with -DPNGSAFELIMITSSUPPORTED. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libsndfile (openSUSE-SU-2015:0041-1)

Changes in libsndfile: two buffer read overflows in sd2parsersrcfork CVE-2014-9496, bnc911796: backported upstream fix patches %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-18...

openSUSE Security Update : Linux Kernel (openSUSE-SU-2014:1678-1)

The openSUSE 13.2 kernel was updated to version 3.16.7. These security issues were fixed : - CVE-2014-9322: A local privilege escalation in the x8664 32bit compatibility signal handling was fixed, which could be used by local attackers to crash the machine or execute code. bnc910251 -...