openSUSE Security Update : apache2-201202 (openSUSE-SU-2012:0314-1)

This update of apache2 fixes regressions and several security problems : bnc728876, fix graceful reload bnc741243, CVE-2012-0031: Fixed a scoreboard corruption shared mem segment by child causes crash of privileged parent invalid free during shutdown. bnc743743, CVE-2012-0053: Fixed an issue in...

openSUSE Security Update : apache2 (openSUSE-2012-132)

httpd-2.2.x-bnc743743-CVE-2012-0053-serverprotocolc-cookieexposure.diff addresses CVE-2012-0053: error responses can expose cookies when no custom 400 error code ErrorDocument is configured. bnc743743 - httpd-2.2.x-bnc741243-CVE-2012-0031-scoreboardhandling.diff: scoreboard corruption shared mem...

openSUSE Security Update : kernel (openSUSE-SU-2013:0395-1)

The Linux kernel was updated to 3.4.33 and to fix a local root privilege escalation and various other security and non-security bugs. CVE-2013-1763: A out of bounds access in sockdiag could be used by local attackers to execute code in kernel context and so become root. CVE-2013-0160: The atime o...

openSUSE Security Update : jakarta-poi (openSUSE-SU-2012:0654-1)

Specially crafted CDF/CFBF files could trigger an out of memory condition %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-292. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : NetworkManager (openSUSE-SU-2012:1151-1)

The broken AdHoc WPA mode was disabled in NetworkManager, which would have created an open network instead. CVE-2012-2736 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-589. The...

openSUSE Security Update : php5 (openSUSE-SU-2012:0426-1)

php5 security update %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-182. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc'; include'compat.inc'...

openSUSE Security Update : chromium (openSUSE-SU-2012:1215-1)

Chromium was updated to 21.0.1180.88 to fix various bugs and security issues. Security fixes and rewards : Please see the Chromium security pagefor more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. - $500 121347 Medium...

openSUSE Security Update : bind (openSUSE-SU-2012:1372-1)

The bind nameserver was updated to fix specially crafted DNS data can cause a lockup in named. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-716. The text description of this...

openSUSE Security Update : xinetd (openSUSE-SU-2014:0517-1)

xinetd was updated to receive security fixes and a bug fix. Security issues fixed : - CVE-2013-4342 bnc844230 - xinetd ignored user and group directives for tcpmux services - CVE-2012-0862 bnc762294 - xinetd enabled all services when tcp multiplexing is used Also added support for setting maximum...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2012:0083-1)

Various security vulnerabilities have been fixed in openssl : - DTLS plaintext recovery attack CVE-2011-4108 - uninitialized SSL 3.0 padding CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures CVE-2011-4577 - SGC restart DoS attack CVE-2011-4619 - invalid GOST parameters DoS atta...

openSUSE Security Update : phpMyAdmin (openSUSE-2012-135)

update to 3.4.10.1 fix for bnc747841 - security XSS in replication setup, see PMASA-2012-1 - 3.4.10.0 2012-02-14 - bug 3460090 interface TextareaAutoSelect feature broken - patch 3375984 export PHP Array export might generate invalid php code - bug 3049209 import Import from ODS ignores cell that...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0370-1)

Flash Player was updated to 11.2.202.243 - CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264,...

openSUSE Security Update : libqt4 (openSUSE-SU-2013:0154-1)

libqt4 received a fix for a security issue : - avoid redirect to file url scheme in XMLHttpRequests bnc793194, CVE-2012-5624 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-11. T...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0367-1)

Flash Player was updated to 11.2.202.251 bnc788450, fixing severe security issues : - CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : tiff (openSUSE-SU-2012:0829-1)

fixing multiple integer overflows : - CVE-2012-2113 bnc767852 - CVE-2012-2088 bnc767854 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-361. The text description of this plugin...

openSUSE Security Update : mariadb (openSUSE-SU-2013:0014-1)

MariaDB was updated to 5.2.13. - Release notes: http://kb.askmonty.org/v/mariadb-5213-release-notes - Changelog: http://kb.askmonty.org/v/mariadb-5213-changelog %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : tor (openSUSE-SU-2012:1068-1)

Tor 0.2.2.38 fixes a rare race condition that can crash exit relays; fixes a remotely triggerable crash bug; and fixes a timing attack that could in theory leak path information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : samba (openSUSE-SU-2012:0508-1)

Samba upgrade to version 3.6.3 fixes the following security issue : - PIDL based autogenerated code allows overwriting beyond of allocated array. Remove attackers could exploit that to execute arbitrary code as root CVE-2012-1182, bso8815, bnc752797 Please see...

openSUSE Security Update : perl (openSUSE-SU-2013:0497-1)

Perl was updated to fix 3 security issues : - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329 In openSUSE 12.1 also the following non-security bug...

openSUSE Security Update : icinga (openSUSE-SU-2013:0206-1)

fixed Stack based buffer overflow in web interface: bnc797237 - CVE-2012-6096 - icinga-fix-bnc797237.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-54. The text...