openSUSE Security Update : xen (openSUSE-SU-2014:1281-1)

XEN was updated to fix security issues and bugs. Security issues fixed : - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 - CVE-2014-7155:...

openSUSE Security Update : lua (openSUSE-SU-2014:1145-1)

lua was updated to fix an overflow in varargs functions CVE-2014-5461 ,bnc893824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-549. The text description of this plugin is C SUS...

update flash-player to 11.2.202.40 (important)

Adobe Flash Player was updated to 11.2.202.406 bnc895856: APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on:...

SuSE 11.3 Security Update : LibreOffice (SAT Patch Number 9677)

LibreOffice was updated to version 4.0.3.3.26. SUSE 4.0-patch26, tag suse-4.0-26, based on upstream 4.0.3.3. Two security issues have been fixed : - DOCM memory corruption vulnerability. CVE-2013-4156, bnc831578 - Data exposure using crafted OLE objects. CVE-2014-3575, bnc893141 The following...

glibc (important)

glibc was updated to fix three security issues: - A directory traversal in locale environment handling was fixed CVE-2014-0475, bnc887022, GLIBC BZ 17137 - Disable gconv transliteration module loading which could be used for code execution CVE-2014-5119, bnc892073, GLIBC BZ 17187 - Fix crashes on...

SuSE 11.3 Security Update : ppp (SAT Patch Number 9648)

This ppp update fixes a potential security issue that an unprivileged attacker could access privileged options : - integer overflow in option parsing CVE-2014-3158, bnc891489 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

SuSE 11.3 Security Update : tomcat6 (SAT Patch Number 9487)

Tomcat has been updated to version 6.0.41, which brings security and bug fixes. The following security fixes have been fixed : - A XXE vulnerability via user-supplied XSLTs. CVE-2014-0096 - Request smuggling via malicious content length header. CVE-2014-0099 - A XML parser hijack by malicious web...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:0926-1)

CVE-2014-3532 CVE-2014-3533 bnc885241 fdo80163 fdo79694 fdo80469 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-465. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : samba (openSUSE-SU-2014:0857-1)

"samba was updated to fix three security issues and two non-security issues. These security issues were fixed : - Fix segmentation fault in smbdmarshalldirentry's SMBFINDFILEUNIX handler CVE-2014-3493 - Fix nmbd denial of service CVE-2014-0244 - Fix malformed FSCTLSRVENUMERATESNAPSHOTS response...

BNC 2.2.4/2.4.6/2.4.8 IRC Proxy Buffer Overflow Vulnerability (2)

No description provided by source. / source: http://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, t...

SuSE 11.3 Security Update : compat-wireless, compat-wireless-debuginfo, etc (SAT Patch Number 9414)

This update for the compat-wireless kernel modules provides many fixes and enhancements : - Fix potential crash problem in ath9k. CVE-2014-2672, bnc871148 - Fix improper updates of MAC addresses in ath9khtc. bnc851426, CVE-2013-4579 - Fix stability issues in iwlwifi. bnc865475 - Improve support f...

openSUSE Security Update : deb / update-alternatives (openSUSE-SU-2012:1437-1)

Fix tmp issues in annotate-output bnc778291, CVE-2012-3500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-757. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : xtrabackup (openSUSE-SU-2014:0363-1)

xtrabackup was updated to 2.1.8 : Disabled the 'binary version check' functionality in the VersionCheck module due to security concerns. The automatic version check remains disabled in the openSUSE package. bnc864194 CVE-2014-2029 More bugs fixed : - do not discard read-ahead buffers through...

openSUSE Security Update : glibc (openSUSE-SU-2013:1510-1)

This update fixes the following issues in glibc : - CVE-2012-4412: glibc: buffer overflow in strcoll - CVE-2013-0242: glibc: DoS due to a buffer overrun in regexp matcher by processing multibyte characters - CVE-2013-1914: glibc: stack overflow in getaddrinfo sorting - CVE-2013-2207: glibc: ptcho...

openSUSE Security Update : gpg2 (openSUSE-SU-2013:0880-1)

This update of gpg2 fixes two security issues : - fix for CVE-2012-6085 bnc798465 added gpg2-CVE-2012-6085.patch - fix for bnc780943 added gpg2-setumaskbeforeopenoutfile.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

openSUSE Security Update : xen (openSUSE-SU-2013:1392-1)

XEN was updated to 4.1.5 release. It fixes various bugs and security issues. Issues fixed separately from the 4.1.5 release : - bnc824676 - Failed to setup devices for vm instance when start multiple vms simultaneously - bncXXXXXX - xen: CVE-2013-XXXX: XSA-61: suppress device assignment to HVM...

openSUSE Security Update : libXfont (openSUSE-SU-2014:0073-1)

UCVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.p atch - unlimited sscanf overflows stack buffer in bdfReadCharacters CVE-2013-6462, bnc854915 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : phpMyAdmin (openSUSE-2012-18)

update to 3.4.9 - bug 3442028 edit Inline editing enum fields with null shows no dropdown - bug 3442004 interface DB suggestion not correct for user with underscore - bug 3438420 core Magic quotes removed in PHP 5.4 - bug 3398788 session No feedback when result is empty signon authtype - bug...

openSUSE Security Update : squid (openSUSE-SU-2013:1436-1)

This squid update includes several security fixes and minor changes. - squid-2.7.x-bnc829084-CVE-2013-4115-BOrequesthandling. diff Squid advisory SQUID-20132, CVE-2013-4115, bnc829084 Specially crafted http requests can trigger a buffer overflow when squid attempts to resolve an overly long...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2012:1419-1) (ROBOT)

java-170-opendjk was updated to icedtea-2.3.3 bnc785814 - Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7158796, CVE-2012-5070: Tighten properties...