openSUSE Security Update : chromium (openSUSE-SU-2012:1215-1)

Chromium was updated to 21.0.1180.88 to fix various bugs and security issues. Security fixes and rewards : Please see the Chromium security pagefor more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. - $500 121347 Medium...

openSUSE Security Update : openssl (openSUSE-SU-2012:0547-1)

The implementation of Cryptographic Message Syntax CMS and PKCS 7 in OpenSSL was vulnerable to a Million Message Attack MMA adaptive chosen ciphertext attack CVE-2012-0884. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : pcp (openSUSE-SU-2012:1081-1)

Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : samba (openSUSE-SU-2012:0583-1)

" - docs-xml: fix default name resolve order; bso7564. - s3-aio-fork: Fix a segfault in vfsaiofork; bso8836. - docs: remove whitespace in example samba.ldif; bso8789. - s3-smbd: move printbackendinit behind initsysteminfo %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

openSUSE Security Update : apache2 (openSUSE-SU-2013:0243-1)

ignore case when checking against SNI server names. bnc798733 httpd-2.2.x-bnc798733-SNIignorecase.diff - better cleanup of busy count after recovering from failure bnc789828 httpd-2.2.x-bnc789828-modbalancer.diff - httpd-2.2.x-bnc788121-CVE-2012-4557-modproxyajptimeout.diff: backend timeouts...

openSUSE Security Update : php5 (openSUSE-2012-288)

The patch for CVE-2012-1823 was incomplete, this update fixes the remaining bits CVE-2012-2335, CVE-2012-2336 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-288. The text...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-5751)

Mozilla Thunderbird was updated to 3.1.18 security update, fixing security issues and bugs. Following security bugs were fixed : MFSA 2012-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...

openSUSE Security Update : openssl (openSUSE-SU-2013:0337-1)

openssl was updated to 1.0.1e, fixing bugs and security issues : o Fix renegotiation in TLS 1.1, 1.2 by using the correct TLS version. o Include the fips configuration module. o Fix OCSP bad key DoS attack CVE-2013-0166 bnc802746 o Fix for SSL/TLS/DTLS CBC plaintext recovery attack CVE-2013-0169...

openSUSE Security Update : php5 (openSUSE-SU-2012:0590-1)

when used in CGI mode remote attackers could inject command line arguments to php %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-261. The text description of this plugin is C SU...

openSUSE Security Update : cifs-utils (openSUSE-SU-2012:0607-1)

mount.cifs could leak information about existence of files normally not accessible to users %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-268. The text description of this plug...

openSUSE Security Update : puppet (openSUSE-SU-2012:0608-1)

puppet was prone to several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-269. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : gimp (openSUSE-SU-2012:1131-1)

Fixed 2 gimp security bugs : - fixed bnc724628 CVE-2012-3481: gimp: GIF plugin 'height' / 'len' integer overflow leading to heap-based buffer overflow - fixed bnc763595 CVE-2012-2763: gimp: buffer overflow in script-fu's server component %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : openconnect (openSUSE-SU-2013:1072-1)

This openconnect update to version 3.20 includes several security and bug fixes. - fix bnc767616 - fix for CVE-2012-3291 - make vpnc mandatory during build, following upstream changes - package documentation in a -doc package - Update to version 3.20 - Cope with non-keepalive HTTP response on...

openSUSE Security Update : cvs (openSUSE-2012-133)

cvs was prone to a heap-based buffer overflow in the client side proxy handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-133. The text description of this plugin is C SUSE...

openSUSE Security Update : tomcat (openSUSE-SU-2013:0170-1)

fix bnc794548 - denial of service CVE-2012-4534 - tomcat-CVE-2012-4534.patch fixes apache53138, apache52858 http://svn.apache.org/viewvc?view=rev&rev=1340218 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : viewvc (openSUSE-SU-2012:0831-1)

update to 1.1.15 bnc768680 : - security fix: complete authz support for remote SVN views CVE-2012-3356 - security fix: log msg leak in SVN revision view with unreadable copy source CVE-2012-3357 Additionally the following non-security issues have been addressed : - fix several instances of...

openSUSE Security Update : mono-web (openSUSE-SU-2012:0974-1)

Mono was updated to fix : A cross site scripting attack in the System.Web class 'forbidden extensions' filtering was fixed. CVE-2012-3382 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : taglib (openSUSE-SU-2012:0615-1)

Specially crafted MP4 files could crash taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-275. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : gnutls (openSUSE-2012-121)

Fix GnuTLS DTLS plaintext recovery attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-121. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc'...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1064-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...