openSUSE Security Update : xen (openSUSE-2015-750)

xen was updated to fix 12 security issues. These security issues were fixed : - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vc...

Security update for xen (important)

xen was updated to fix 12 security issues. These security issues were fixed: - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vcp...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox, mozilla-nspr, mozilla-nss (SUSE-SU-2015:1981-1)

This Mozilla Firefox, NSS and NSPR update fixes the following security and non security issues. - mozilla-nspr was updated to version 4.10.10 bsc952810 - MFSA 2015-133/CVE-2015-7183 bmo1205157 NSPR memory corruption issues - mozilla-nss was updated to 3.19.2.1 bsc952810 - MFSA...

openSUSE Security Update : xen (openSUSE-2015-729)

xen was updated to fix 13 security issues. These security issues were fixed : - CVE-2015-7972: Populate-on-demand balloon size inaccuracy can crash guests bsc951845. - CVE-2015-7969: Leak of main per-domain vcpu pointer array DoS bsc950703. - CVE-2015-7969: Leak of per-domain profiling-related vc...

SUSE: Security Advisory for xen (SUSE-SU-2015:1908-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:1898-1)

krb5 was updated to fix one security issue. This security issue was fixed : - CVE-2015-2695: Applications which call gssinquirecontext on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash...

Security update for flash-player (critical)

This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1771-1)

flash-player was updated to fix one security issue. This security issue was fixed : - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm APSA15-05 bsc950474. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

Security update for bind (important)

BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records CVE-2015-5722, bsc944066...

SUSE SLES10 Security Update : Xen (SUSE-SU-2015:1643-1)

Xen was updated to fix the following security issues : CVE-2015-5154: Host code execution via IDE subsystem CD-ROM. bsc938344 CVE-2015-3209: Heap overflow in QEMU's pcnet controller allowing guest to host escape. bsc932770 CVE-2015-4164: DoS through iret hypercall handler. bsc932996 CVE-2015-5165...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1614-1)

Adobe Flash Player was updated to 11.2.202.521 APSB15-23 bsc946880 fixing several security issues : More information can be found on : https://helpx.adobe.com/security/products/flash-player/apsb15-23.html Note that Tenable Network Security has extracted the preceding description block directly fr...

openSUSE Security Update : bind (openSUSE-2015-600)

BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records CVE-2015-5722, bsc944066. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Security update for bind (important)

BIND was updated to fix a denial of service against servers performing validation on DNSSEC-signed records CVE-2015-5722, bsc944066...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2015:1504-1)

Mozilla Firefox was updated to 38.2.1 ESR, fixing two severe security bugs. bsc943608 - MFSA 2015-94/CVE-2015-4497 bsc943557: Use-after-free when resizing canvas element during restyling - MFSA 2015-95/CVE-2015-4498 bsc943558: Add-on notification bypass through data URLs Note that Tenable Network...

SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1480-1)

The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2015:1455-1)

kvm was updated to fix one security issue. This security issue was fixed : - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2015:1383-1)

This security update fixes the following issues : - Add libqt5-Fix-a-division-by-zero-processing-malformed-BMP.p atch - QTBUG-44547, bsc921999 CVE-2015-0295 - Add libqt5-Fixes-crash-in-bmp-and-ico-image-decoding.patch - bsc927806 CVE-2015-1858, bsc927807 CVE-2015-1859 - Add...

SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:1377-1)

cups-filters was updated to fix two security issues. These security issues were fixed : - CVE-2015-3279: Texttopdf integer overflow incomplete fix for CVE-2015-3258 bsc937018. - CVE-2015-3258: Texttopdf heap-based buffer overflow bsc936281. Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2015:1359-1)

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed : - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

openSUSE Security Update : ansible (openSUSE-2015-508)

ansible was updated to fix one security issue. This security issue was fixed : - CVE-2015-3908: Fixed improper TLS Certificate Validation bsc938161. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...