openSUSE Security Update : flash-player (openSUSE-SU-2012:0427-1)

Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could lead to code execution %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-18...

openSUSE Security Update : net-snmp (openSUSE-SU-2012:0659-1)

SNMP GET request involving on a non-existent extension table entry could crash snmpd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-299. The text description of this plugin is C...

openSUSE Security Update : postgresql / postgresql-libs (openSUSE-SU-2012:1288-1)

Security and bugfix release 9.1.5 : - Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler CVE-2012-2655 bnc765069 - Fix incorrect password transformation in 'contrib/pgcrypto''s DES crypt function CVE-2012-2143 bnc766799 - Prevent access to external files/URLs via...

openSUSE Security Update : kvm (openSUSE-SU-2012:1153-1)

Fix VT100 emulation vulnerability bnc777084 CVE-2012-3515 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-591. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : tomcat (openSUSE-SU-2013:1307-1)

Tomcat was updated to fix security issues and bug: CVE-2013-1976: Avoid a potential symlink race during startup of the tomcat server, where a local attacker that gaine access to the tomcat chroot could escalate privileges to root. CVE-2013-2067:...

openSUSE Security Update : Xen (openSUSE-SU-2012:1172-1)

Security Update for Xen Following bug and security fixes were applied : - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...

openSUSE Security Update : jakarta-commons-httpclient (openSUSE-SU-2013:0622-1)

jakarta-commons-httpclient was updated to enhance the fix of bnc803332 / CVE-2012-5783 - also check for subjectAltNames in the certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0993-1)

Version upgrade of chromium to address multiple security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-516. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)

wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...

openSUSE Security Update : Hyper-V (openSUSE-SU-2012:1526-1)

This update fixes the following issues for Hyper-V: The source code without this patch caused hvkvpdaemon to exit when it processed a spoofed Netlink packet which has been sent from an untrusted local user. Now Netlink messages with a non-zero nlpid source address are ignored and a warning is...

openSUSE Security Update : openconnect (openSUSE-SU-2013:0979-1)

This version update fixes several bugs : - Frequent connection drops fixed bnc817152. - Update to version 4.09 - Fix overflow on HTTP request buffers CVE-2012-6128bnc803347 - Fix connection to servers with round-robin DNS with two-stage auth/connect. - Impose minimum MTU of 1280 bytes. - Fix some...

openSUSE Security Update : libvorbis (openSUSE-SU-2012:0319-1)

Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code CVE-2012-0444. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : deb / update-alternatives (openSUSE-SU-2012:1437-1)

Fix tmp issues in annotate-output bnc778291, CVE-2012-3500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-757. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : pidgin (openSUSE-SU-2012:0905-1)

Changes in pidgin : - Fixing bnc752275, CVE-2012-1178: Pidgin fails to verify the text's utf-8 encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-432. The text description ...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0349-1)

flash-player 11.1.102.63 fixes two security issues : - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : python-crypto (openSUSE-SU-2012:0830-1)

fixes bnc764127 CVE-2012-2417 insecure ElGamal key generation %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-367. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : krb5 (openSUSE-SU-2012:0834-1)

Fixing CVE-2012-1013 krb5 kadmind denial of service via NULL pointer dereference %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-360. The text description of this plugin is C SUS...

openSUSE Security Update : libvorbis (openSUSE-2012-141)

Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : inkscape (openSUSE-SU-2013:0294-1)

Inkscape was updated to fix two security issues : - inkscape occasionaly tries to open EPS files from /tmp bnc796306, CVE-2012-6076. - inkscape could load XML from external hosts bnc794958, CWE-827, CVE-2012-5656. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

openSUSE Security Update : iproxy (openSUSE-SU-2012:0345-1)

This update of usbmuxd fixes a heap-based buffer overflow which could be triggered via an overly long 'SerialNumber' field CVE-2012-0065. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...