SUSE SLES11 Security Update : Mozilla Firefox (SUSE-SU-2015:0173-1)

Mozilla Firefox has been updated to the 31.4.0ESR release, fixing bugs and security issues. Mozilla NSS has been updated to 3.17.3, fixing a security issue and updating the root certificates list. For more information, please refer to https://www.mozilla.org/en-US/security/advisories/ . Note that...

SUSE SLED11 Security Update : acroread (SUSE-SU-2013:1967-1)

Adobe has discontinued the support of Adobe Reader for Linux in June 2013. Newer security problems and bugs are no longer fixed. As the Adobe Reader is binary only software and we cannot provide a replacement, SUSE declares the acroread package of Adobe Reader as being out of support and...

SUSE SLES12 Security Update : docker (SUSE-SU-2015:0082-1)

This docker version upgrade fixes the following security and non security issues, and adds the also additional features : - Updated to 1.4.1 2014-12-15 : - Runtime : - Fix issue with volumes-from and bind mounts not being honored after create fixes bnc913213 - Added e2fsprogs as runtime dependenc...

SUSE SLES10 / SLES11 Security Update : xinetd (SUSE-SU-2014:0871-1)

Xinetd receives a LTSS roll-up update to fix two security issues. - CVE-2012-0862: xinetd enabled all services when tcp multiplexing is used. - CVE-2013-4342: xinetd ignored user and group directives for tcpmux services, running services as root. While both issues are not so problematic on their...

SUSE SLES11 Security Update : PHP5 (SUSE-SU-2014:0064-1)

This update fixes the following issues : - memory corruption in opensslparsex509 CVE-2013-6420 - Heap buffer over-read in DateInterval CVE-2013-6712 - man-in-the-middle attacks by specially crafting certificates CVE-2013-4248 Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2015:0290-2)

MIT kerberos krb5 was updated to fix several security issues and bugs. Security issues fixed: CVE-2014-5351: The kadm5randkeyprincipal3 function in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 sent old keys in a response to a -randkey -keepold request, which allowed remote...

SUSE SLES11 Security Update : Xen (SUSE-SU-2015:0745-1)

The Virtualization service XEN was updated to fix various bugs and security issues. The following security issues have been fixed : CVE-2015-2756: XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through...

SUSE SLED10 / SLES10 Security Update : xorg-x11-server (SUSE-SU-2013:0857-1)

In some cases, input events are sent to X servers not currently the VT owner, allowing a user to capture passwords. This update fixes this issue. CVE-2013-1940 has been assigned to this issue. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2014:1729-1)

This libreoffice update fixes the following security and non security issues : - Version bump to 4.3.5 release : - Various small fixes - Fix for CVE-2014-9093 bnc907636 - Remove dangling symlinks from previous versions bnc884942 Note that Tenable Network Security has extracted the preceding...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2013:1256-1)

IBM Java 1.7.0 has been updated to SR5 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ Also the following bugs have been fixed : - add Europe/Busingen to tzmappings bnc817062 - mark files in jre/bin and bin/ as executable bnc823034 Note that...

SUSE SLED10 / SLES10 Security Update : IBM Java 1.5.0 (SUSE-SU-2012:1489-1)

IBM Java 1.5.0 has been updated to SR15 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3216, CVE-2012-3143, CVE-2012-5073, CVE-2012-5075, CVE-2012-5083, CVE-2012-5083, CVE-2012-1531, CVE-2012-5081,...

SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2014:1592-1)

This update for tigervnc provides the following fixes : - Fixed integer overflow flaw, leading to a heap-based buffer overflow in screen size handling. CVE-2014-8240 - Send correctly keys that don't type any characters, such as CTRL+Space. bnc906922 Note that Tenable Network Security has extracte...

SUSE SLES10 / SLES11 Security Update : Mozilla Firefox (SUSE-SU-2015:0447-1)

Mozilla Firefox has been updated to version 31.5.0 ESR to fix five security issues. These security issues have been fixed : - CVE-2015-0836: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.5 allowed remote attackers to cause a denial of service memory...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2015:0288-1)

jasper was updated to fix two security issues. These security issues were fixed : - CVE-2014-8157: Off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allowed remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000...

ACE Files

ACE is a data compression format used for archiving, which consists of blocks of various types and sizes. An attacker may use the compressed ACE format in order to bypass inspection by network security devices, which will not be able to inspect the original content that is being transferred...

Solaris 10 (x86) : 148310-08 (deprecated)

SunOS 5.10x86: dhcp patch. Date this patch was last updated by Sun : Sep/06/17 This plugin has been deprecated and either replaced with individual 148310 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Debian DLA-224-1 : ruby1.8 security update

It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. For the oldoldstable...

Penn State Offline Following Advanced Two-Year Cyberattack

Penn State University President Eric J. Barron announced Friday that the university disconnected its networks from the public Internet after sustaining an intrusion into the College of Engineering that had lasted longer than two years. It will be a matter of days before Penn State brings its...

Debian DLA-221-1 : tiff security update

Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information disclosure or privilege escalation. CVE-2014-8128 William Robinet discovered that out-of-bounds writes are triggered in several of...

Fedora 20 : t1utils-1.39-1.fc20 (2015-7581)

t1utils Version 1.39 2015-02-26 ================================= - t1disasm: Security fixes for buffer overrun reported by Jakub Wilk and Niels Thykier. t1utils Version 1.38 2013-09-29 ================================= - t1disasm: Fix an infinite loop on some fonts reported by Niels Thykier. Not...