openSUSE Security Update : apache2 (openSUSE-SU-2013:0243-1)

ignore case when checking against SNI server names. bnc798733 httpd-2.2.x-bnc798733-SNIignorecase.diff - better cleanup of busy count after recovering from failure bnc789828 httpd-2.2.x-bnc789828-modbalancer.diff - httpd-2.2.x-bnc788121-CVE-2012-4557-modproxyajptimeout.diff: backend timeouts...

openSUSE Security Update : flash-player (openSUSE-2011-4)

This update provides flash-player 11.1.102.55, which files the following critical security issues : - This update resolves a memory corruption vulnerability that could lead to code execution CVE-2011-2445. - This update resolves a heap corruption vulnerability that could lead to code execution...

openSUSE Security Update : libxcrypt (openSUSE-SU-2011:0972-1)

The security update for CVE-2011-2483 broke changing blowfish passwords if compat mode was turned on default. This update fixes the regression. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : curl (openSUSE-SU-2012:0199-1)

This update of curl disables GSSAPI to workaround CVE-2011-2192 bnc698796. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update curl-5737. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : kvm (openSUSE-SU-2011:0803-1)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host CVE-2011-2212, CVE-2011-2512. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : chasen (openSUSE-SU-2012:0026-1)

A potential buffer overflow in ChaSen that could possibly allow remote attackers to execute arbitrary code via a specially crafted string was fixed CVE-2011-4000. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE Security Update : icecast (openSUSE-SU-2012:0352-1)

Icecast didn't strip newlines from log entries, therefore allowing uses to forge log entries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-153. The text description of this...

openSUSE Security Update : libsndfile (openSUSE-SU-2011:0854-1)

An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Additionally an divide by zero CVE-2009-4835 has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : freetype2 (openSUSE-SU-2012:0015-1)

This update of freetype2 fixes multiple security flaws that could allow attackers to cause a denial of service or to execute arbitrary code via specially crafted fonts CVE-2011-3256, CVE-2011-3439. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

openSUSE Security Update : vsftpd (openSUSE-SU-2011:0435-1)

Certain file patterns could cause vsftpd to consume excessive CPU resulting in denial of service CVE-2011-0762. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update vsftpd-4116. The text descriptio...

openSUSE Security Update : pidgin (openSUSE-2011-35)

specially crafted SILC messages could crash libpurple CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-35. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : ruby (openSUSE-SU-2012:0228-1)

This update of ruby provides 1.8.7p357, which contains many stability fixes and bug fixes, which are fully compatible with the previous version. You can review the detailed list here : http://svn.ruby-lang.org/repos/ruby/tags/v187357/ChangeLog The particularly noteworthy fixes are : - Hash...

openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)

flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460 %NASLMINLEVEL 70300 C Tenab...

openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)

this update fixes an information disclosure and a connection hijacking vulnerability CVE-2011-4091, CVE-2011-4093. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update net6-5585. The text descripti...

openSUSE Security Update : etherape (openSUSE-SU-2011:1176-1)

Etherape was updated to 0.9.12 to fix a security issue CVE-2011-3369 and various bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update etherape-5318. The text description of this plugin is C...

openSUSE Security Update : apache2 (openSUSE-2011-55)

specially crafted requests could bypass RewriteRule and ProxyPassMatch - new template file: /etc/apache2/vhosts.d/vhost-ssl.template allow TLSv1 only, browser match stuff commented out. - rc script /etc/init.d/apache2: handle reload with deleted binaries by message to stdout only, but refrain...

openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2012:0106-1)

mount.ecrpytfsprivate did not set correct group ownerships when it modifies mtab CVE-2011-3145. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ecryptfs-utils-5541. The text description of thi...

openSUSE Security Update : gimp (openSUSE-SU-2011:0586-1)

This update fixes various overflows : + CVE-2011-1178: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P + CVE-2011-1782: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : python-feedparser (openSUSE-SU-2011:0314-1)

Various issues in python-feedparser have been fixed, including fixes for crashes due to missing input sanitizaion and a XSS vulnerability. CVE-2011-1156, CVE-2011-1157, CVE-2011-1158 and CVE-2009-5065 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0613-1)

Chromium version 20.0.1128 fixes several security issues : - CVE-2011-3078: Use after free in floats handling. - CVE-2012-1521: Use after free in xml parser. - CVE-2011-3079: IPC validation failure. - CVE-2011-3080: Race condition in sandbox IPC - CVE-2011-3081: Use after free in floats handling...