openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2011:0935-2)

Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues : Mozilla Foundation Security Advisory 2011-32 MFSA 2011-32 http://www.mozilla.org/security/announce/2011/mfsa2011-32.html Many of the issues listed below are not exploitable through mail since JavaScript is disable...

openSUSE Security Update : evince (openSUSE-SU-2011:0279-1)

This update of evince fixes a buffer overflow in linetoken. CVE-2011-0433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update evince-4002. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : kernel (openSUSE-SU-2012:0236-1)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...

openSUSE Security Update : rsync (openSUSE-SU-2011:0441-1)

Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : namazu (openSUSE-2011-79)

bnc732323 pretty bug number! - CVE-2011-4345 XSS flaw for IE6/7 in japanese locale %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-79. The text description of this plugin is C...

openSUSE Security Update : vsftpd (openSUSE-SU-2011:0435-1)

Certain file patterns could cause vsftpd to consume excessive CPU resulting in denial of service CVE-2011-0762. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update vsftpd-4115. The text descriptio...

openSUSE Security Update : FastCGI (openSUSE-2011-102)

added FastCGI-fixdeprecatedapi.patch: bnc735882 Fixes an issue where CGI.pm received CGI variables from previous requests. CVE-2011-2766 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : gimp (openSUSE-SU-2011:0586-1)

This update fixes various overflows : + CVE-2011-1178: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P + CVE-2011-1782: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : gdm (openSUSE-SU-2011:0275-1)

Local users could trick gdm into changing ownership of arbitrary files by placing symlinks in the user session cache CVE-2011-0727. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gdm-4250. Th...

openSUSE Security Update : nbd (openSUSE-SU-2011:0193-2)

Nbd was updated to fix a buffer overflow in the mainloop function of nbd-server.c. This vulnerability can be exploited by remote attackers via long requests to execute arbitrary code. CVE-2011-0530: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0347-1)

Wireshark was updated to version 1.4.4 to fix several security issues CVE-2011-1138, CVE-2011-1139, CVE-2011-1140 CVE-2011-1143. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-4339...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0352-1)

A rogue dhcp server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the dhcp client needs to sanitize the host name offered by the server CVE-2011-0997. %NASLMINLEVEL 70300 C...

openSUSE Security Update : opera (openSUSE-2011-76)

Opera version update to 11.60 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-76. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

openSUSE Security Update : chromium (openSUSE-SU-2012:0492-1)

Security update for Chromium and V8 to 18.0.1025.142. Following bugs are listed in the Chrome changelog : - $500 109574 Medium CVE-2011-3058: Bad interaction possibly leading to XSS in EUC-JP. Credit to Masato Kinugawa. - $500 112317 Medium CVE-2011-3059: Out-of-bounds read in SVG text handling...

openSUSE Security Update : libzip-devel (openSUSE-SU-2011:0449-1)

empty zip archives could crash programs using libzip CVE-2011-0421. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libzip-devel-4188. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : apache2 (openSUSE-2012-132)

httpd-2.2.x-bnc743743-CVE-2012-0053-serverprotocolc-cookieexposure.diff addresses CVE-2012-0053: error responses can expose cookies when no custom 400 error code ErrorDocument is configured. bnc743743 - httpd-2.2.x-bnc741243-CVE-2012-0031-scoreboardhandling.diff: scoreboard corruption shared mem...

openSUSE Security Update : man-pages (openSUSE-SU-2011:0970-1)

The crypt3 manpage was updated to also list the 2y prefix. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update man-pages-5032. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : phpMyAdmin (openSUSE-2011-94)

update to 3.4.8 - bug 3425230 interface enum data split at space char more space to edit - bug 3426840 interface ENUM/SET editor can't handle commas in values - bug 3427256 interface no links to browse/empty views and tables - bug 3430377 interface Deleted search results remain visible - bug...

openSUSE Security Update : pam (openSUSE-SU-2011:1204-1)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : jetty5 (openSUSE-SU-2012:0262-1)

jetty5 was prone to a remotely exploitable Denial of Service flaw via hash collisions CVE-2011-4461. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jetty5-5813. The text description of this...