openSUSE Security Update : libexif (openSUSE-SU-2012:0914-1)

Several security issues were found by the Google Security Team in libexif and fixed there. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-440. The text description of this plugi...

openSUSE Security Update : apache2 (openSUSE-SU-2013:0245-1)

httpd-2.2.x-bnc798733-SNIignorecase.diff: ignore case when checking against SNI server names. bnc798733 - httpd-2.2.x-bnc777260-CVE-2012-2687-modnegotiationfilenamexss.diff Escape filename for the case that uploads are allowed with untrusted user's control over filenames and modnegotiation...

openSUSE Security Update : php5 (openSUSE-SU-2012:0976-1)

Three security issues were fixed in php5 : CVE-2012-2688: php5: potential overflow in phpstreamscandir CVE-2012-3365: openbasedir bypass via SQLite extension Also a out of band read sql denial of service was fixed bnc769785 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : icinga (openSUSE-SU-2013:0169-1)

imported upstream version 1.7.4 - bnc797237 - core: add fix for CVE-2012-6096 - history.cgi remote command execution Eric Stanley, Markus Frosch 3532 - MF - core: fix embedded perl segfault 3027 - MF - core: fix duplicated events on check scheduling logic for new events Andreas Ericsson 2676 2993...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0828-1)

This version upgrade of java-160-openjdk fixes multiple security flaws : - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability...

openSUSE Security Update : openssl (openSUSE-SU-2012:0474-1)

Changes in openssl : - S/MIME verification may erroneously fail - Free headers after use in error message - Symmetric crypto errors in PKCS7decrypt %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : xen (openSUSE-SU-2012:1685-1)

This update of XEN fixes various denial of service bugs. - bnc789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability XSA-26 - bnc789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs XSA-27 - bnc789940 - CVE-2012-5512: xen:...

openSUSE Security Update : gpg2 (openSUSE-SU-2013:0880-1)

This update of gpg2 fixes two security issues : - fix for CVE-2012-6085 bnc798465 added gpg2-CVE-2012-6085.patch - fix for bnc780943 added gpg2-setumaskbeforeopenoutfile.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0331-1)

flash-player 11.1.102.63 fixes two security issues : - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : phpMyAdmin (openSUSE-SU-2012:0494-1)

update to 3.4.10.2 - security Fixed local path disclosure vulnerability, see PMASA-2012-2 http://www.phpmyadmin.net/homepage/security/PMASA-2012- 2.php %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0199-1)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues : - Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions - Bug...

openSUSE Security Update : flash-player (openSUSE-2012-98)

Update to 11.1.102.62: bnc747297 https://www.adobe.com/support/security/bulletins/apsb12- 03.html CVEs fixed: CVE-2012-0751, CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756, CVE-2012-0767 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / seamonkey / etc (openSUSE-SU-2012:0567-1)

Changes in xulrunner : - update to 12.0 bnc758408 - rebased patches - MFSA 2012-20/CVE-2012-0467/CVE-2012-0468 Miscellaneous memory safety hazards - MFSA 2012-22/CVE-2012-0469 bmo738985 use-after-free in IDBKeyRange - MFSA 2012-23/CVE-2012-0470 bmo734288 Invalid frees causes heap corruption in...

openSUSE Security Update : curl (openSUSE-2012-76) (BEAST)

Fix IMAP, POP3 and SMTP URL sanitization bnc740452, CVE-2012-0036 - Disable SSLOPNETSCAPEREUSECIPHERCHANGEBUG option when built against an older OpenSSL version CVE-2010-4180. - Don't enable SSLOPDONTINSERTEMPTYFRAGMENTS bnc742306, CVE-2011-3389. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : libzip (openSUSE-SU-2012:0416-1)

2 vulnerabilities were discovered for the libzip packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-176. The text description of this plugin is C...

openSUSE Security Update : puppet (openSUSE-SU-2012:0891-1)

puppet was updated to fix various security issues: CVEs fixed : - bnc770828 - CVE-2012-3864: puppet: authenticated clients can read arbitrary files via a flaw in puppet master - bnc770829 - CVE-2012-3865: puppet: arbitrary file delete / Denial of Service on Puppet Master by authenticated clients ...

openSUSE Security Update : cobbler (openSUSE-SU-2012:0655-1)

The xmlrpc interface of cobbler was prone to command injectoin %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-296. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : postgresql (openSUSE-SU-2012:0480-1)

Security and bugfix release 9.1.3 : - Require execute permission on the trigger function for 'CREATE TRIGGER' CVE-2012-0866, bnc749299. - Remove arbitrary limitation on length of common name in SSL certificates CVE-2012-0867, bnc749301. - Convert newlines to spaces in names written in pgdump...

openSUSE Security Update : pdns (openSUSE-2012-85)

specially crafted request could lead to denial of service %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-85. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libqt4 (openSUSE-SU-2013:0157-1)

libqt4 received security fixes for : - XMLHttpRequest could redirect to a file: URL CVE-2012-5624, bnc793194 - Disable SSL compression by default to mitigate CRIME attack CVE-2012-4929 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...