openSUSE Security Update : git-web (openSUSE-SU-2011:0705-1)

Users with commit access to repos served by git-web could cause cross site scripting XSS issues with XML files CVE-2011-2186. Due to a differently formatted /etc/mime.types openSUSE is not affected by default. This update nevertheless turns on git-web's XSS protection mechanism to avoid similar...

openSUSE Security Update : openldap2 (openSUSE-SU-2011:0359-1)

Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password CVE-2011-1024. unauthenticated users could crash the ldap server CVE-2011-1081. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

openSUSE Security Update : wireshark (openSUSE-SU-2011:1142-1)

This update of wireshark fixes the following vulnerabilities : - CVE-2011-3266: Wireshark IKE dissector vulnerability - CVE-2011-3360: Wireshark Lua script execution vulnerability - CVE-2011-3483: Wireshark buffer exception handling vulnerability - CVE-2011-2597: Lucent/Ascend file parser...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4111)

MozillaFirefox was updated to version 3.6.15, fixing various security issues. Following security issues were fixed: MFSA 2011-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...

openSUSE Security Update : opera (openSUSE-SU-2011:0790-1)

opera 11.50 fixes several security vulnerabilities. The full changelog is available at http://www.opera.com/docs/changelogs/unix/1150/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-485...

openSUSE Security Update : foomatic-filters (openSUSE-SU-2011:0892-1)

The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2964: CVSS v2 Base Score: 6.8 moderate AV:N/AC:M/Au:N/C:P/I:P/A:P: Code...

openSUSE Security Update : kernel (openSUSE-SU-2011:0860-1)

The openSUSE 11.4 kernel was updated to 2.6.37.6 fixing lots of bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or simila...

openSUSE Security Update : seamonkey (seamonkey-5122)

This update brings Mozilla SeaMonkey to 2.3.3. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0612-1)

This update fixes a cross-site scripting vulnerability. CVE-2011-2107: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4665. The...

openSUSE Security Update : squid3 (openSUSE-SU-2011:1018-1)

This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code CVE-2011-3205. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid3-5094. The text description of...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0073-1)

Specially crafted XPath expressions could allow attackers to cause a denial of service or possibly have unspecified other impact CVE-2011-2821,CVE-2011-2834. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : bind (openSUSE-SU-2011:0603-1)

This update provides bind 9.7.3P1 which fixes a denial of service issue in RRsig RRSET handling. CVE-2011-1910 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bind-4634. The text description o...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)

This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...

openSUSE Security Update : kernel (openSUSE-SU-2012:0540-1)

This kernel update fixes various bugs and security issues. For bugfixes, - a lot of BTRFS bugs were fixed - a performance issue with transparent huge pages was fixed which could have caused huge slowdowns when doing I/O over e.g. USB sticks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE Security Update : otrs (openSUSE-SU-2011:0464-1)

This updated fixes a cross site scripting XSS issue in otrs. CVE-2011-1518 Upstream advisory: http://otrs.org/advisory/OSA-2011-01-en/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update otrs-4509...

openSUSE Security Update : aaa_base (openSUSE-SU-2011:0207-1)

shell meta characters in file names could cause interactive shells to execute arbitrary commands when performing tab expansion CVE-2011-0468. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libmoon-devel (openSUSE-SU-2011:0313-1)

Moonlight was prone to several security problems : CVE-2011-0989: modification of read-only values via RuntimeHelpers.InitializeArray CVE-2011-0990: buffer overflow due to race condition in in Array.FastCopy CVE-2011-0991: use-after-free due to DynamicMethod resurrection CVE-2011-0992: informatio...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0215-1)

The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. This vulnerability CVE-2011-0609 could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0637-1)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...

openSUSE Security Update : dhcp (openSUSE-SU-2011:0098-1)

A Denial of Service vulnerability while processing DHCPv6 decline messages hass been fixed. CVE-2011-0413 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...