openSUSE Security Update : icinga (openSUSE-SU-2013:0206-1)

fixed Stack based buffer overflow in web interface: bnc797237 - CVE-2012-6096 - icinga-fix-bnc797237.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-54. The text...

openSUSE Security Update : xulrunner (openSUSE-SU-2012:0924-1)

Mozilla XULRunner was updated to 14.0.1, fixing bugs and security issues : Following security issues were fixed: MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...

openSUSE Security Update : postgresql (openSUSE-SU-2012:1173-1)

Postgresql was updated to the security and bugfix release 9.1.3 : - Require execute permission on the trigger function for 'CREATE TRIGGER' CVE-2012-0866, bnc749299. - Remove arbitrary limitation on length of common name in SSL certificates CVE-2012-0867, bnc749301. - Convert newlines to spaces i...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0982-1)

This update of icedtea-web fixed multiple hewap buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-513. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : pcp (openSUSE-SU-2012:1079-1)

Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : csound (openSUSE-SU-2012:0370-1)

specially crafted hetro and pvoc files could cause buffer overflows in csound %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-162. The text description of this plugin is C SUSE...

openSUSE Security Update : XEN (openSUSE-SU-2012:1573-1)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

openSUSE Security Update : otrs (openSUSE-SU-2012:1214-1)

fix a XSS vulnerability: bnc778655 CVE-2012-4600 - update to 2.4.14 openSUSE 11.4 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter to detect tag nesting. - update to 3.0.16 openSUSE 12.1 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter...

openSUSE Security Update : libvirt (openSUSE-SU-2013:0274-1)

libvirt was updated to fix some bugs and security issues : Security issues fixed : - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed : - qemu: Fix probing for guest capabilities...

openSUSE Security Update : tiff (openSUSE-SU-2012:0539-1)

specially crafted tiff files could cause a heap overflow in libtiff %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-234. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-5799)

MozillaFirefox was updated to 10.0.1 to fix critical bugs and security issue. Following security issue was fixed: CVE-2012-0452: Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this...

openSUSE Security Update : optipng (openSUSE-SU-2012:1329-1)

optipng received a fix for a palette reduction use-after-free vulnerability. CVE-2012-4432 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-699. The text description of this plugi...

openSUSE Security Update : chromium (openSUSE-SU-2013:0236-1)

Update to 26.0.1383 - Security fixes bnc798326 - CVE-2012-5145: Use-after-free in SVG layout - CVE-2012-5146: Same origin policy bypass with malformed URL - CVE-2012-5147: Use-after-free in DOM handling - CVE-2012-5148: Missing filename sanitization in hyphenation support - CVE-2012-5149: Integer...

openSUSE Security Update : kvm (openSUSE-SU-2012:0207-1)

A missing initgroups call for the -runas option has been fixed in kvm CVE-2011-2527 as well as a buffer overflow in the e1000 device emulation CVE-2012-0029. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : pidgin-otr (openSUSE-SU-2012:0717-1)

pidgin-otr was prone to a format string flaw in logmessagecb %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-314. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : GraphicsMagick (openSUSE-SU-2013:0536-1)

GraphicsMagick was updated to fix integer overflows in the pngmalloc functions CVE-2012-3438. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-252. The text description of this...

openSUSE Security Update : chromium (openSUSE-SU-2012:1682-1)

Update to 25.0.1362 - Security fixes bnc794075 : - CVE-2012-5139: Use-after-free with visibility events - CVE-2012-5140: Use-after-free in URL loader - CVE-2012-5141: Limit Chromoting client plug-in instantiation. - CVE-2012-5142: Crash in history navigation. - CVE-2012-5143: Integer overflow in...

openSUSE Security Update : wireshark (openSUSE-2012-123)

Wireshark version 1.4.11 fixes several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-123. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : perl-DBD-Pg (openSUSE-SU-2012:0422-1)

perl-DBD-Pg was prone to format string errors which could crash applications %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-180. The text description of this plugin is C SUSE LL...

openSUSE Security Update : acroread (openSUSE-SU-2012:0512-1)

Acroread update to version 9.5.1 to fix several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-226. The text description of this plugin is C SUSE LLC...