openSUSE Security Update : horde3-dimp (horde3-dimp-5829)

This version upgrade of horde3-dimp to 1.1.8 fixes several issues including security related flaws, CVE-2012-0791 and adds new features. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : freetype2 (openSUSE-SU-2013:0165-1)

BNC795826, CVE-2012-5668.patch bdf Fix Savannah bug 37905. - src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in - BNC795826, CVE-2012-5669.patch bdf Fix Savannah bug 37906. - src/bdf/bdflib.c bdfparseglyphs: Use correct array...

openSUSE Security Update : freetype2 (openSUSE-SU-2013:0177-1)

new license string. - BNC795826, CVE-2012-5668.patch - BNC795826, CVE-2012-5669.patch bdf Fix Savannah bug 37906. - src/bdf/bdflib.c bdfparseglyphs: Use correct array size for checking glyphenc'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE Security Update : acroread (openSUSE-SU-2013:0138-1)

Update to 9.5.3 bnc797529 to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616,...

openSUSE Security Update : cvs (openSUSE-SU-2012:0310-1)

A heap-based buffer overflow flaw was found in the way CVS read proxy connection HTTP responses. An attacker could exploit this to cause the application to crash or, potentially, execute arbitrary code in the context of the user running the application CVE-2012-0804. %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : mysql-cluster (openSUSE-SU-2012:0860-1)

This version upgrade of mysql-cluster to version 7.1.22 fixed an authentication bypass flaw. Additionally, this version upgrade also includes fixes for various other bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0981-1)

update to 1.2.1 bnc773458 - Security Updates - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings - NetX - PR898: signed applications with big jnlp-file doesn't start webstart affect like 'frozen'...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0813-1)

Update Chromium to 22.0.1190 - Security Fixes bnc769181 : - CVE-2012-2815: Leak of iframe fragment id - CVE-2012-2816: Prevent sandboxed processes interfering with each other - CVE-2012-2817: Use-after-free in table section handling - CVE-2012-2818: Use-after-free in counter layout -...

openSUSE Security Update : tor (openSUSE-SU-2012:1624-1)

Tear down the circuit when receiving an unexpected SENDME cell. Prevents circumvention of the network's flow control, exhaustion of network resources and possible denial-of-service attacks on entry nodes bnc791374 CVE-2012-5573, adding tor-0.2.2.39-SENDME-DOS.patch %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : cgit (openSUSE-SU-2012:1460-1)

Specially crafted commits can cause code to be executed on the clients due to improperly quoted arguments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-764. The text descripti...

openSUSE Security Update : mysql-community-server (openSUSE-2012-332)

Version upgrade to 5.5.25 of MySQL to fix an authentication bypass flaw. Additionally, various other non-security bugs were fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : apache2 (openSUSE-SU-2013:0629-1)

apache2 was updated to fix : - fix for cross site scripting vulnerability in modbalancer. This is CVE-2012-4558 bnc807152 - fixes for low profile cross site scripting vulnerabilities, known as CVE-2012-3499 bnc806458 - Escape filename for the case that uploads are allowed with untrusted user's...

openSUSE Security Update : libxslt / libxslt-python (openSUSE-SU-2012:0883-1)

Changes in libxslt, libxslt-python : - fixing an incorrect read operation in the XSL implementation CVE-2012-2825, bnc769182 that could cause a DoS condition %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : rhythmbox (openSUSE-SU-2012:0954-1)

This security update fixes problems in rhythmbox : - Add rhythmbox-CVE-2012-3355.patch: fix insecure temporary directory use in context plugin. bnc768681, CVE-2012-3355 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : horde4-imp (openSUSE-2012-111)

New version 5.0.18 fixes security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-111. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

openSUSE Security Update : postfixadmin (openSUSE-2012-86)

update to PostfixAdmin 2.3.5 security release - fixes some SQL injections CVE-2012-0811 - fixes some XSS vulnerabilities CVE-2012-0812 - see CHANGELOG.TXT or bnc741455 for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : gegl (openSUSE-SU-2012:1627-1)

Fix integer overflow by parsing PPM image. bnc789835, CVE-2012-4433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-841. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:0893-1)

Changes in icedtea-web with update to 1.4 bnc818768 : - Added cs, de, pl localization - Splash screen for javaws and plugin - Better error reporting for plugin via Error-splash-screen - All IcedTea-Web dialogues are centered to middle of active screen - Download indicator made compact for more th...

openSUSE Security Update : rubygem-actionpack-2_3 / rubygem-activesupport-2_3 (openSUSE-SU-2012:1218-1)

added 3-0-escapehtml-activesupport.patch: bnc775653 Also encode single quote CVE-2012-3464 - added 3-0-striptags.patch: bnc775649 Do not mark striptags result as htmlsafe CVE-2012-3465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : RubyOnRails (openSUSE-SU-2013:0338-1)

The Ruby on Rails 2.3 stack was updated to 2.3.17. The Ruby on Rails 3.2 stack was updated to 3.2.12. The Ruby Rack was updated to 1.1.6. The Ruby Rack was updated to 1.2.8. The Ruby Rack was updated to 1.3.10. The Ruby Rack was updated to 1.4.5. The updates fix various security issues and bugs. ...