openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:0800-1)

cyrus-imapd recognized commands before switching to an encrypted channel via STARTTLS. Attackers could potentially exploit that to inject plain text commands CVE-2011-1926. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : logrotate (openSUSE-SU-2011:0536-1)

This update for logrotate provides the following fixes : dbg114-logrotate-4580 logrotate-4580 newupdateinfo The shredfile function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is...

openSUSE Security Update : krb5 (openSUSE-SU-2011:1169-1)

The following issues have been fixed : - CVE-2011-1528: In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. - CVE-2011-1529: In releases krb5-1.8 and later, the KDC can crash due to a NULL pointer dereference. Both bugs could be triggered by unauthenticated remote...

openSUSE Security Update : nagios (openSUSE-SU-2011:0833-1)

statusmap.cgi was prone to a cross-site scripting XSS vulnerability CVE-2011-1523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-4838. The text description of this plugin is C SUSE LL...

openSUSE Security Update : finch (openSUSE-SU-2011:1291-1)

This update fixes the following security issues : - 722199: libpurple vulnerability in SILC protocol handling CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-5485. The text...

openSUSE Security Update : pure-ftpd (openSUSE-SU-2011:0483-1)

Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : perl-libwww-perl (openSUSE-SU-2011:0552-1)

perl-libwww-perl did not verify enable host name checking of SSL certificates by default CVE-2011-0633. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-libwww-perl-4589. The text...

openSUSE Security Update : nss-201112 (openSUSE-SU-2012:0030-1) (BEAST)

The Mozilla NSS libraries were updated to version 3.13.1 to fix various bugs and security problems. Following security issues were fixed : - SSL 2.0 is disabled by default - A defense against the SSL 3.0 and TLS 1.0 CBC chosen plaintext attack demonstrated by Rizzo and Duong CVE-2011-3389 is...

openSUSE Security Update : gypsy (openSUSE-SU-2012:0884-1)

The following changes have been made : - Add gypsy-CVE-2011-0523.patch: add config file to restrict the files that can be read. Fix CVE-2011-0523 and bnc666839. - Add gypsy-CVE-2011-0524.patch: use snprintf to avoid buffer overflows. Fix CVE-2011-0524 and bnc666839. - Add gnome-common BuildRequir...

openSUSE Security Update : seamonkey (seamonkey-5210)

Mozilla SeaMonkey was updated to version 2.4, fixing various bugs and security issues. MFSA 2011-36: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption...

openSUSE Security Update : firefox / thunderbird (openSUSE-2011-9)

Mozilla Firefox and Thunderbird were updated to version 8.0 which fixes several security vulnerabilities : - MFSA 2011-52 - Code execution via NoWaiverWrapper CVE-2011-3655 - MFSA 2011-51 - Cross-origin image theft on Mac with integrated Intel GPU CVE-2011-3653 - MFSA 2011-50 - Cross-origin data...

openSUSE Security Update : dhcp (openSUSE-2011-68)

Applied security fix for a DoS due to processing certain regular expressions, extracted from 4.2.3-P1 bnc735610, CVE-2011-4539 : - Add a check for a NULL pointer before calling the regexec function. Without out this check we could, under some circumstances, pass a NULL pointer to the regexec...

openSUSE Security Update : dhcp (openSUSE-SU-2011:1318-1)

Specially crafted requests could crash dhcpd if the server used regular expressions for matching CVE-2011-4539. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dhcp-5532. The text description ...

openSUSE Security Update : freetype2 (openSUSE-SU-2011:0852-1)

This freetype2 update fixes sign extension problems and missing length checks. This issue was used in one of the last jailbreakme exploits for Apple iPhone/iPad products. CVE-2011-0226 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : freetype2 (openSUSE-SU-2011:0852-1)

This freetype2 update fixes sign extension problems and missing length checks. This issue was used in one of the last jailbreakme exploits for Apple iPhone/iPad products. CVE-2011-0226 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : clamav (openSUSE-SU-2011:1177-1)

This version update of clamav fixes a recursion level crash. CVE-2011-3627 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-5308. The text description of this...

openSUSE Security Update : exim (openSUSE-SU-2011:0535-1)

This update fixes a security issues : - exim remote code exection CVE-2011-1407 also some safety improvements regarding STARTTLS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update exim-4604. The...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0374-1)

Changes in chromium : - Update to 19.0.1066 - Fixed Chrome install/update resets Google search preferences Issue: 105390 - Don't trigger accelerated compositing on 3D CSS when using swiftshader Issue: 116401 - Fixed a GPU crash Issue: 116096 - More fixes for Back button frequently hangs Issue:...

openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)

flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 %NASLMINLEVEL 70300 C Tenab...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-4149)

MozillaThunderbird was updated to version 3.1.8, fixing various security issues. Following security issues were fixed: MFSA 2011-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...