openSUSE Security Update : dhcp (openSUSE-SU-2012:1252-1)

Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue...

openSUSE Security Update : icinga (openSUSE-SU-2013:0169-1)

imported upstream version 1.7.4 - bnc797237 - core: add fix for CVE-2012-6096 - history.cgi remote command execution Eric Stanley, Markus Frosch 3532 - MF - core: fix embedded perl segfault 3027 - MF - core: fix duplicated events on check scheduling logic for new events Andreas Ericsson 2676 2993...

openSUSE Security Update : pdns (openSUSE-2012-85)

specially crafted request could lead to denial of service %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-85. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : cobbler (openSUSE-SU-2012:0655-1)

The xmlrpc interface of cobbler was prone to command injectoin %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-296. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : gnutls (openSUSE-SU-2012:0620-1)

3 vulnerabilities were discovered for the gnutls packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-277. The text description of this plugin is C...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0828-1)

This version upgrade of java-160-openjdk fixes multiple security flaws : - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability...

openSUSE Security Update : ruby (openSUSE-SU-2013:0278-1)

This update updates the RubyOnRails 2.3 stack to 2.3.16, also this update updates the RubyOnRails 3.2 stack to 3.2.11. Security and bugfixes were done, foremost: CVE-2013-0333: A JSON sql/code injection problem was fixed. CVE-2012-5664: A SQL Injection Vulnerability in Active Record was fixed...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0993-1)

Version upgrade of chromium to address multiple security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-516. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)

wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...

openSUSE Security Update : Hyper-V (openSUSE-SU-2012:1526-1)

This update fixes the following issues for Hyper-V: The source code without this patch caused hvkvpdaemon to exit when it processed a spoofed Netlink packet which has been sent from an untrusted local user. Now Netlink messages with a non-zero nlpid source address are ignored and a warning is...

openSUSE Security Update : openconnect (openSUSE-SU-2013:0979-1)

This version update fixes several bugs : - Frequent connection drops fixed bnc817152. - Update to version 4.09 - Fix overflow on HTTP request buffers CVE-2012-6128bnc803347 - Fix connection to servers with round-robin DNS with two-stage auth/connect. - Impose minimum MTU of 1280 bytes. - Fix some...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0723-1)

Adobe Flash Player was updated to 11.2.202.236, fixing lots of bugs and critical security issues. We also disabled inclusion of mms.cfg again, as it caused trouble on hardware accelerated systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : libjpeg-turbo (openSUSE-SU-2012:0932-1)

fixed heap overflow bnc771791 - CVE-2012-2806.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-469. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : otrs (openSUSE-SU-2012:1105-1)

A security issue in otrs was fixed : - OSA-2012-1, http://otrs.org/advisory/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-564. The text description of this plugin is C SUSE LL...

openSUSE Security Update : LibreOffice (openSUSE-SU-2012:1523-1)

LibreOffice was updated to 3.5.4.13 to fix various bugs and security issues : - NULL pointer dereference bnc778669, CVE-2012-4233 - bullet-color-pptx-import.diff: bullets should have same color as following text by default; missing part of the fix bnc734733 - update to suse-3.5.4.13 SUSE 3.5 bugf...

openSUSE Security Update : accountsservice (openSUSE-SU-2012:0845-1)

This update of accountservice fixed a flaw in userchangeiconfileauthorizedcb that could be exploited by local attackers to read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2012:0917-1)

Mozilla Thunderbird was updated to version 14.0 bnc771583 - MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards - MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-20 12-1952 Gecko memory corruption - MFSA 2012-45/CVE-2012-1955 bmo757376 Spoofing issue with...

openSUSE Security Update : flash-player (openSUSE-2012-98)

Update to 11.1.102.62: bnc747297 https://www.adobe.com/support/security/bulletins/apsb12- 03.html CVEs fixed: CVE-2012-0751, CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756, CVE-2012-0767 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0199-1)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues : - Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions - Bug...

openSUSE Security Update : curl (openSUSE-2012-76) (BEAST)

Fix IMAP, POP3 and SMTP URL sanitization bnc740452, CVE-2012-0036 - Disable SSLOPNETSCAPEREUSECIPHERCHANGEBUG option when built against an older OpenSSL version CVE-2010-4180. - Don't enable SSLOPDONTINSERTEMPTYFRAGMENTS bnc742306, CVE-2011-3389. %NASLMINLEVEL 70300 C Tenable Network Security,...