openSUSE Security Update : libjpeg-turbo (openSUSE-SU-2012:0932-1)

fixed heap overflow bnc771791 - CVE-2012-2806.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-469. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : otrs (openSUSE-SU-2012:1105-1)

A security issue in otrs was fixed : - OSA-2012-1, http://otrs.org/advisory/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-564. The text description of this plugin is C SUSE LL...

openSUSE Security Update : openconnect (openSUSE-SU-2013:0979-1)

This version update fixes several bugs : - Frequent connection drops fixed bnc817152. - Update to version 4.09 - Fix overflow on HTTP request buffers CVE-2012-6128bnc803347 - Fix connection to servers with round-robin DNS with two-stage auth/connect. - Impose minimum MTU of 1280 bytes. - Fix some...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0993-1)

Version upgrade of chromium to address multiple security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-516. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libvorbis (openSUSE-2012-141)

Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : wireshark (openSUSE-SU-2012:0657-1)

This update is a maintenance release of Wireshark. It fixes some vulererabilities when dissecting certain protocols. As packages for these protocols may be received over the network, an attacker may trigger infinite or large loops or crashes of the dissector. Wireshark release notes and advisorie...

openSUSE Security Update : nut (openSUSE-SU-2012:1069-1)

The nut upsd is prone to multiple flaws that allow remote attackers to cause a denial of service application crash by sending unexpected data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : horde3 / horde3-dimp / horde3-imp (openSUSE-2012-112)

Warning: Official end of life for horde 3 is April 2012! Changes in horde3 : - version 3.3.13 - Fixed a XSS vulnerability CVE-2012-0909. - Added support for resetting passwords in LDAP. - Fixed compatibility with Firefox 10. Changes in horde3-imp : - Fixed XSS vulnerabilities CVE-2012-0791. -...

openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)

wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0828-1)

This version upgrade of java-160-openjdk fixes multiple security flaws : - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability...

openSUSE Security Update : postgresql / postgresql-libs (openSUSE-SU-2012:1288-1)

Security and bugfix release 9.1.5 : - Ignore SECURITY DEFINER and SET attributes for a procedural language's call handler CVE-2012-2655 bnc765069 - Fix incorrect password transformation in 'contrib/pgcrypto''s DES crypt function CVE-2012-2143 bnc766799 - Prevent access to external files/URLs via...

openSUSE Security Update : ruby (openSUSE-SU-2013:0278-1)

This update updates the RubyOnRails 2.3 stack to 2.3.16, also this update updates the RubyOnRails 3.2 stack to 3.2.11. Security and bugfixes were done, foremost: CVE-2013-0333: A JSON sql/code injection problem was fixed. CVE-2012-5664: A SQL Injection Vulnerability in Active Record was fixed...

openSUSE Security Update : bind (openSUSE-SU-2012:0722-1)

A remote denial of service in the bind nameserver via zero length rdata fields was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-316. The text description of this plugin...

openSUSE Security Update : php5 (openSUSE-2012-288)

The patch for CVE-2012-1823 was incomplete, this update fixes the remaining bits CVE-2012-2335, CVE-2012-2336 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-288. The text...

openSUSE Security Update : Mozilla Suite (openSUSE-SU-2012:1412-1)

Mozilla Firefox, Thunderbird and XULRunner were updated to 16.0.2. Mozilla SeaMonkey was updated to 2.13.2. Tracker bug: bnc786522 A security issues was fixed : - MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196 bmo800666, bmo793121, bmo802557 Fixes for Location object issues The update als...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0613-1)

Chromium version 20.0.1128 fixes several security issues : - CVE-2011-3078: Use after free in floats handling. - CVE-2012-1521: Use after free in xml parser. - CVE-2011-3079: IPC validation failure. - CVE-2011-3080: Race condition in sandbox IPC - CVE-2011-3081: Use after free in floats handling...

openSUSE Security Update : dhcp (openSUSE-SU-2012:1006-1)

This update of dhcp fixed multiple security vulnerabilities memory leak, Denial of Service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-522. The text description of this plug...

openSUSE Security Update : sudo (openSUSE-SU-2012:0652-1)

sudo did not always honor the HostList setting in /etc/sudoers properly %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-293. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : freetype2 (openSUSE-SU-2012:0489-1)

Specially crafted font files could cause buffer overflows in freetype %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-220. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : puppet (openSUSE-SU-2012:0608-1)

puppet was prone to several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-269. The text description of this plugin is C SUSE LLC...