openSUSE Security Update : MozillaFirefox (MozillaFirefox-4761)

Mozilla Firefox was updated to the 3.6.18 security release. - MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards - MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled - MFSA...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0373-1)

Specially crafted Flash files could be exploited to execute arbitrary code CVE-2011-0611. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4399. The text description of this plugin...

openSUSE Security Update : quagga (openSUSE-SU-2011:1155-1)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet CVE-2011-3325 ...

openSUSE Security Update : openldap2 (openSUSE-SU-2011:0363-1)

Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

openSUSE Security Update : kbd (openSUSE-SU-2011:0357-1)

The kbd init scripted wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files CVE-2011-0460. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : cifs-mount (openSUSE-SU-2011:0403-1)

With this update samba is not prone to a remote denial of service attack anymore. CVE-2011-0719 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cifs-mount-4110. The text description of this...

openSUSE Security Update : libgnomesu (openSUSE-SU-2011:0694-1)

The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges CVE-2011-1946. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

openSUSE Security Update : libgnomesu (openSUSE-SU-2011:0694-1)

The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges CVE-2011-1946. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

openSUSE Security Update : sysconfig (openSUSE-SU-2012:0242-1)

This update for sysconfig contains the following fixes : - sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could therefore lead to execution of shell code CVE-2011-4182. - Explicitly disabled posix mode ...

openSUSE Security Update : puppet (openSUSE-SU-2011:1190-1)

A directory traversal vulnerability in puppet allowed unauthenticated remote attackers to upload x.509 certificate signing requests to arbitrary locations CVE-2011-3848 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : libmodplug (openSUSE-SU-2011:0551-1)

specially crafted files could cause a stack overflow in libmodplug CVE-2011-1761. libmodplug version 0.8.8.3 fixes the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmodplug-4614...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0900-1)

libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call CVE-2011-2511. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4836. The text description of this...

openSUSE Security Update : gdm (openSUSE-SU-2011:0275-1)

Local users could trick gdm into changing ownership of arbitrary files by placing symlinks in the user session cache CVE-2011-0727. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gdm-4250. Th...

openSUSE Security Update : freeradius-server (openSUSE-SU-2013:0137-1)

fix for CVE-2011-4966 bnc797313 freeradius-server-CVE-2011-4966.patch - fixed a bug in the logrotate script bnc797292 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-37. The text...

openSUSE Security Update : libQtWebKit-devel (openSUSE-SU-2012:0091-1)

A stack-based buffer overflow in the glyph handling of libqt4's harfbuzz has been fixed. CVE-2011-3922 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : wireshark (openSUSE-SU-2011:1142-1)

This update of wireshark fixes the following vulnerabilities : - CVE-2011-3266: Wireshark IKE dissector vulnerability - CVE-2011-3360: Wireshark Lua script execution vulnerability - CVE-2011-3483: Wireshark buffer exception handling vulnerability - CVE-2011-2597: Lucent/Ascend file parser...

openSUSE Security Update : unixODBC (openSUSE-SU-2011:0655-1)

Specially crafted reply of a malicious server could overflow a buffer in unixODBC CVE-2011-1145. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update unixODBC-4713. The text description of this...

openSUSE Security Update : evince (openSUSE-SU-2011:0279-1)

This update of evince fixes a buffer overflow in linetoken. CVE-2011-0433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update evince-4002. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : pam (openSUSE-SU-2011:1204-1)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : jetty5 (openSUSE-SU-2012:0262-1)

jetty5 was prone to a remotely exploitable Denial of Service flaw via hash collisions CVE-2011-4461. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jetty5-5813. The text description of this...