openSUSE Security Update : phpMyAdmin (openSUSE-SU-2012:0494-1)

update to 3.4.10.2 - security Fixed local path disclosure vulnerability, see PMASA-2012-2 http://www.phpmyadmin.net/homepage/security/PMASA-2012- 2.php %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : openssl (openSUSE-SU-2012:0474-1)

Changes in openssl : - S/MIME verification may erroneously fail - Free headers after use in error message - Symmetric crypto errors in PKCS7decrypt %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0331-1)

flash-player 11.1.102.63 fixes two security issues : - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : libupnp (openSUSE-SU-2013:0255-1)

Update to version 1.6.18 bnc801061 + Security fix for CERT issue VU922681 This patch addresses three possible buffer overflows in function uniqueservicename. The three issues have the folowing CVE numbers: CVE-2012-5958 Issue 2: Stack-based buffer overflow of Tempbuf CVE-2012-5959 Issue 4:...

openSUSE Security Update : accountsservice (openSUSE-SU-2012:0845-1)

This update of accountservice fixed a flaw in userchangeiconfileauthorizedcb that could be exploited by local attackers to read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libxslt (openSUSE-SU-2013:0585-1)

Two denial of service problems crashes with NULL pointer derference were fixed in libxslt, which could potentially be used by remote attackers to crash libxslt using programs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

openSUSE Security Update : dhcp (openSUSE-SU-2012:1252-1)

Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue...

openSUSE Security Update : curl (openSUSE-2012-76) (BEAST)

Fix IMAP, POP3 and SMTP URL sanitization bnc740452, CVE-2012-0036 - Disable SSLOPNETSCAPEREUSECIPHERCHANGEBUG option when built against an older OpenSSL version CVE-2010-4180. - Don't enable SSLOPDONTINSERTEMPTYFRAGMENTS bnc742306, CVE-2011-3389. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : dhcp (openSUSE-SU-2012:1254-1)

Update to ISC dhcp-4.2.4-P2 release, providing a security fix for an issue with the use of lease times was found and fixed. Making certain changes to the end time of an IPv6 lease could cause the server to abort. Thanks to Glen Eustace of Massey University, New Zealand for finding this issue...

openSUSE Security Update : cgit (openSUSE-SU-2012:1461-1)

Specially crafted commits can cause code to be executed on the clients due to improperly quoted arguments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-765. The text descripti...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-nss / etc (openSUSE-SU-2012:0760-1)

Changes in MozillaFirefox : - update to Firefox 13.0 bnc765204 - MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards - MFSA 2012-36/CVE-2012-1944 bmo751422 Content Security Policy inline-script bypass - MFSA 2012-37/CVE-2012-1945 bmo670514 Information...

openSUSE Security Update : pidgin (openSUSE-SU-2012:0905-1)

Changes in pidgin : - Fixing bnc752275, CVE-2012-1178: Pidgin fails to verify the text's utf-8 encoding %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-432. The text description ...

openSUSE Security Update : horde3 (openSUSE-SU-2012:0286-1)

This version upgrade of horde3 to 3.3.13 fixes several issues including a security related flaw, CVE-2012-0909 and adds new features. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update horde3-583...

openSUSE Security Update : krb5 (openSUSE-SU-2012:0834-1)

Fixing CVE-2012-1013 krb5 kadmind denial of service via NULL pointer dereference %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-360. The text description of this plugin is C SUS...

openSUSE Security Update : ClamAV (openSUSE-SU-2012:0833-1)

This update addresses possible evasion cases in some archive formats and stability issues in portions of the bytecode engine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-362...

openSUSE Security Update : libzip (openSUSE-SU-2012:0416-1)

2 vulnerabilities were discovered for the libzip packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-176. The text description of this plugin is C...

openSUSE Security Update : libexif (openSUSE-SU-2012:0914-1)

Several security issues were found by the Google Security Team in libexif and fixed there. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-440. The text description of this plugi...

openSUSE Security Update : krb5 (openSUSE-SU-2012:0967-1)

Several potential codeexecution flaws were fixed in krb5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-497. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0349-1)

flash-player 11.1.102.63 fixes two security issues : - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : Mesa (openSUSE-SU-2012:1120-1)

Mesa was updated to fix a buffer overrun in glsl shaders : - Uglsl-linker-Avoid-buffer-over-run-in-parceloutunif.p atch - Avoid buffer over-run in parceloutuniformstorage::visitfield When too may uniforms are used, the error will be caught in checkresources src/glsl/linker.cpp. CVE-2012-2864,...