openSUSE Security Update : jasper (openSUSE-2011-87)

jasper-1.900.1-bnc725758.patch: Two security bugs allowing buffer overflow to be caused by incorrect image data bnc725758, CVE-2011-4516 and CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0993-1)

Version upgrade of chromium to address multiple security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-516. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)

libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0311-1)

several API calls did not honor the read-only flag connections. Attackers could exploit that to modify the state of the system or potentially execute code CVE-2011-1146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : wireshark (openSUSE-SU-2011:1263-1)

Wireshark version upgrade to 1.4.10 to fix various security flaws and other non-security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-5431. The text description of this...

openSUSE Security Update : tomcat6 (openSUSE-SU-2011:0988-1)

The following security issues were fixed in tomcat : - Fixed a tomcat user password information leak CVE-2011-2204 - Fixed atomcat information leak and DoS CVE-2011-2526 Also one bug was fixed : - fix bnc702289 - suse manager pam ldap authentication fails - source CATALINAHOME/bin/setenv.sh if...

openSUSE Security Update : cobbler (openSUSE-SU-2011:0277-1)

/var/log/cobbler/ directory was owned by the web service user. Access to this account could potentially be abused to corrupt files during root filesystem operations by the Cobbler daemon CVE-2011-1551. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : acroread (openSUSE-2012-33)

Acrobat Reader was updated to version 9.4.7 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-33. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4459)

Mozilla Firefox was updated to the 3.6.17 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances,...

openSUSE Security Update : sysconfig (openSUSE-2012-74)

Fixed to quote config / interface variables in ifservices script and cleaned up content of the ESSID which gets appended to them by NetworkManager dispatcher hook bnc735394, CVE-2011-4182. Fixed also to return proper exit code 0 in NM dispatcher hooks. - Changed to call ip addr flush in ifdown,...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-5329) (BEAST)

Oracle/Sun OpenJDK 1.6.0 was updated to the 1.10.4release, fixing lots of bugs and security issues. Please see http://www.oracle.com/technetwork/topics/security/javacpuoct2011-44343 1.html for more details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : bind (openSUSE-SU-2011:1272-1)

specially crafted DNS queries could crash the bind name server CVE-2011-4313. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-5441. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : v8 / chromium (openSUSE-2011-93)

Chromium update to to 18.0.972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-93. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

openSUSE Security Update : bind (openSUSE-SU-2011:0135-1)

This bind update fixes a remote denial of service vulnerability that can be triggered using an IXFR or DDNS update. CVE-2011-0414: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : seamonkey (seamonkey-5834)

Mozilla SeaMonkey was updated to 2.7.2 to fix a security issue with the embedded libpng, where a integer overflow could allow remote attackers to crash the browser or potentially execute code CVE-2011-3026, %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : pure-ftpd (openSUSE-SU-2011:0483-1)

Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : kdelibs4 (openSUSE-SU-2011:0281-1)

KSSL did not properly verify the host name of a certificate if the certificate was issued for an IP address CVE-2011-1094. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdelibs4-4225. The te...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-3937)

This update improves the ClientHello handshake message parsing function. Prior to this update is was possible that this function reads beyond the end of a message leading to invalid memory access and a crash. Under some circumstances it was possible that information from the OCSP extensions was...

openSUSE Security Update : t1lib (openSUSE-SU-2012:0559-1)

Specially crafted type1 fonts could cause memory corruptions in t1lib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-249. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)

This update of open-vm-tools fixes the following vulnerabilities which allowed an attacker to gain root privileges within the guest system : - CVE-2011-1681 - CVE-2011-2146 - CVE-2011-1787 - CVE-2011-2145 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...