openSUSE Security Update : xinetd (openSUSE-SU-2014:0517-1)

xinetd was updated to receive security fixes and a bug fix. Security issues fixed : - CVE-2013-4342 bnc844230 - xinetd ignored user and group directives for tcpmux services - CVE-2012-0862 bnc762294 - xinetd enabled all services when tcp multiplexing is used Also added support for setting maximum...

openSUSE Security Update : roundcubemail (openSUSE-SU-2013:0307-1)

The update to version 0.8.5 includes a fix for an XSS vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-130. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : systemtap (openSUSE-SU-2013:0475-1)

This systemtap updated fixes a security issue and bugs : Security fix: Fix kernel panic when processing malformed DWARF unwind data bnc748564 CVE-2012-0875 Also bugs were fixed : - Change how systemtap looks for tracepoint header files bnc796574, new patch: systemtap-build-source-dir.patch - Add...

openSUSE Security Update : arpwatch (openSUSE-SU-2012:0915-1)

Changes in arpwatch : - arpwatch-2.1a11-drop-privs.dif: call initgroups with pw-pwgid, not NULL, to not have groupid 0 initialized. bnc764521, CVE-2012-2653 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0996-1)

Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-518. The text description of this plugin i...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0613-1)

Chromium version 20.0.1128 fixes several security issues : - CVE-2011-3078: Use after free in floats handling. - CVE-2012-1521: Use after free in xml parser. - CVE-2011-3079: IPC validation failure. - CVE-2011-3080: Race condition in sandbox IPC - CVE-2011-3081: Use after free in floats handling...

openSUSE Security Update : file (openSUSE-SU-2012:0488-1)

specially crafted CDF files could crash the 'file' program %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-221. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : csound (openSUSE-SU-2012:0315-1)

This update of csound fixes two stack-based buffer overflows that could be exploited via malformed hetro and pvoc files CVE-2012-0270. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : bind (openSUSE-SU-2012:1372-1)

The bind nameserver was updated to fix specially crafted DNS data can cause a lockup in named. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-716. The text description of this...

openSUSE Security Update : sudo (openSUSE-SU-2012:0652-1)

sudo did not always honor the HostList setting in /etc/sudoers properly %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-293. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : freetype2 (openSUSE-SU-2012:0489-1)

Specially crafted font files could cause buffer overflows in freetype %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-220. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0367-1)

Flash Player was updated to 11.2.202.251 bnc788450, fixing severe security issues : - CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : mariadb (openSUSE-SU-2013:0014-1)

MariaDB was updated to 5.2.13. - Release notes: http://kb.askmonty.org/v/mariadb-5213-release-notes - Changelog: http://kb.askmonty.org/v/mariadb-5213-changelog %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:1175-1)

The icedtea-web Java plugin was updated to 1.11.4 to fix critical security issues : - Security fixes - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder - S7163201, CVE-2012-0547: Simplify toolkit internals references - OpenJDK - S7182135: Impossible to use some editors directly ...

openSUSE Security Update : optipng (openSUSE-SU-2012:1329-1)

optipng received a fix for a palette reduction use-after-free vulnerability. CVE-2012-4432 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-699. The text description of this plugi...

openSUSE Security Update : chromium (openSUSE-SU-2013:0236-1)

Update to 26.0.1383 - Security fixes bnc798326 - CVE-2012-5145: Use-after-free in SVG layout - CVE-2012-5146: Same origin policy bypass with malformed URL - CVE-2012-5147: Use-after-free in DOM handling - CVE-2012-5148: Missing filename sanitization in hyphenation support - CVE-2012-5149: Integer...

openSUSE Security Update : pcp (openSUSE-SU-2012:1079-1)

Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0982-1)

This update of icedtea-web fixed multiple hewap buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-513. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : chromium (openSUSE-SU-2012:1215-1)

Chromium was updated to 21.0.1180.88 to fix various bugs and security issues. Security fixes and rewards : Please see the Chromium security pagefor more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. - $500 121347 Medium...

openSUSE Security Update : openssl (openSUSE-SU-2012:0547-1)

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL was vulnerable to a Million Message Attack MMA adaptive chosen ciphertext attack CVE-2012-0884. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...