openSUSE Security Update : flash-player (openSUSE-SU-2012:0331-1)

flash-player 11.1.102.63 fixes two security issues : - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : phpMyAdmin (openSUSE-SU-2012:0494-1)

update to 3.4.10.2 - security Fixed local path disclosure vulnerability, see PMASA-2012-2 http://www.phpmyadmin.net/homepage/security/PMASA-2012- 2.php %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : hostapd (openSUSE-SU-2012:1371-1)

This patch validated the message length of EAP-TLS to avoid the potential DoS attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-718. The text description of this plugin is C...

openSUSE Security Update : pdns (openSUSE-2012-85)

specially crafted request could lead to denial of service %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-85. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : cobbler (openSUSE-SU-2012:0655-1)

The xmlrpc interface of cobbler was prone to command injectoin %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-296. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : php5 (openSUSE-SU-2012:0976-1)

Three security issues were fixed in php5 : CVE-2012-2688: php5: potential overflow in phpstreamscandir CVE-2012-3365: openbasedir bypass via SQLite extension Also a out of band read sql denial of service was fixed bnc769785 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : iproxy (openSUSE-SU-2012:0345-1)

This update of usbmuxd fixes a heap-based buffer overflow which could be triggered via an overly long 'SerialNumber' field CVE-2012-0065. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : xen (openSUSE-SU-2012:0886-1)

This update of XEN fixed multiple security flaws that could be exploited by local attackers to cause a Denial of Service or potentially escalate privileges. Additionally, several other upstream changes were backported. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : ImageMagick (openSUSE-SU-2013:0535-1)

ImageMagick received fixes for a overflow in pngmalloc functions. CVE-2012-3437 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-251. The text description of this plugin is C SUSE...

openSUSE Security Update : inn (openSUSE-SU-2012:1171-1)

fix starttls command injection issue CVE-2012-3523, bnc776967 - handle /var/run on tmpfs. bnc778439 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-600. The text description of...

openSUSE Security Update : jakarta-commons-httpclient (openSUSE-SU-2013:0622-1)

jakarta-commons-httpclient was updated to enhance the fix of bnc803332 / CVE-2012-5783 - also check for subjectAltNames in the certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0427-1)

Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could lead to code execution %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-18...

openSUSE Security Update : kernel (openSUSE-SU-2012:1330-1)

This kernel update to 3.4.11 fixes various bugs and security issues. The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here. Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume...

openSUSE Security Update : Chromium (openSUSE-SU-2012:1637-1)

Chromium was updated to 25.0.1343 - Security Fixes bnc791234 and bnc792154 : - CVE-2012-5131: Corrupt rendering in the Apple OSX driver for Intel GPUs - CVE-2012-5133: Use-after-free in SVG filters. - CVE-2012-5130: Out-of-bounds read in Skia - CVE-2012-5132: Browser crash with chunked encoding -...

openSUSE Security Update : tomcat (openSUSE-SU-2013:1307-1)

Tomcat was updated to fix security issues and bug: CVE-2013-1976: Avoid a potential symlink race during startup of the tomcat server, where a local attacker that gaine access to the tomcat chroot could escalate privileges to root. CVE-2013-2067:...

openSUSE Security Update : net-snmp (openSUSE-SU-2012:0659-1)

SNMP GET request involving on a non-existent extension table entry could crash snmpd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-299. The text description of this plugin is C...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0309-1)

java-160-openjdk was updated to the b24 release, fixing multiple security issues : dbg114-java-160-openjdk-5856 java-160-openjdk-5856 newupdateinfo Security fixes - S7082299, CVE-2011-3571: Fix inAtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502:...

openSUSE Security Update : libzip (openSUSE-SU-2012:0416-1)

2 vulnerabilities were discovered for the libzip packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-176. The text description of this plugin is C...

openSUSE Security Update : libexif (openSUSE-SU-2012:0914-1)

Several security issues were found by the Google Security Team in libexif and fixed there. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-440. The text description of this plugi...

openSUSE Security Update : krb5 (openSUSE-SU-2012:0967-1)

Several potential codeexecution flaws were fixed in krb5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-497. The text description of this plugin is C SUSE LLC...