openSUSE Security Update : apache2 (openSUSE-SU-2012:0248-1)

This update fixes several security issues in the Apache2 webserver. CVE-2011-3368, CVE-2011-4317: This update also includes several fixes for a modproxy reverse exposure via RewriteRule or ProxyPassMatch directives. CVE-2011-3607: Integer overflow in appregsub function resulting in a heap based...

openSUSE Security Update : postgresql (openSUSE-SU-2012:1173-1)

Postgresql was updated to the security and bugfix release 9.1.3 : - Require execute permission on the trigger function for 'CREATE TRIGGER' CVE-2012-0866, bnc749299. - Remove arbitrary limitation on length of common name in SSL certificates CVE-2012-0867, bnc749301. - Convert newlines to spaces i...

openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1148-1)

This xorg-x11-server update fixes a DoS vulnerability and adds randr support. - Uos-Reset-input-buffer-s-ignoreBytes-field.patch - If a client sends a request larger than maxBigRequestSize, the server is supposed to ignore it. Before commit cf88363d, the server would simply disconnect the client...

openSUSE Security Update : webyast (openSUSE-SU-2013:1954-1)

Fixed CVE-2013-3709: make the secret token file secrettoken.rb readable only for the webyast user to avoid forging the session cookie bnc851116 reported by joernchen of Phenoelit %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : libXv (openSUSE-SU-2013:1010-1)

This update of libXrender fixes several buffer and integer overflow issues. - U0001-integer-overflow-in-XvQueryPortAttributes-CVE-201 3-1.patch, U0002-integer-overflow-in-XvListImageFormats-CVE-2013-1 989.patch, U0003-integer-overflow-in-XvCreateImage-CVE-2013-1989-3 -3.patch - integer overflow i...

openSUSE Security Update : bind (openSUSE-SU-2012:0864-1)

Fixed domain name resolving flaw: CVE-2012-1033, bnc746074 Non-security fixes : - added TLSA record type - added wire format lookup method to sdb - many many bugfixes see CHANGES for details - 9.8.3-P1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : libXvMC (openSUSE-SU-2013:1025-1)

This update of libXvMC fixes several integer overflow issues. - U0001-integer-overflow-in-XvMCListSurfaceTypes-CVE-2013 -19.patch, U0002-integer-overflow-in-XvMCListSubpictureTypes-CVE-2 013.patch - integer overflow in XvMCListSurfaceTypes, XvMCListSubpictureTypes CVE-2013-1990 bnc821663, bnc8154...

openSUSE Security Update : rubygems (openSUSE-SU-2014:0332-1)

This update fixes the following issue with some rubygems : - bnc864873: fix rubygem patches are not applied to the gem but only to the tree. Packages embedding rubygems via their .gem files were not receiving security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : opera (openSUSE-SU-2012:0827-1)

update to 12.00 - full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes bnc767045 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-366. The text...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0308-1)

OpenJDK java-160-openjdk was updated to 1.12.2 to fix bugs and security issues bnc801972 - Security fixes on top of 1.12.0 - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at...

openSUSE Security Update : kernel (openSUSE-SU-2013:1619-1)

The Linux kernel was updated to 3.4.63, fixing various bugs and security issues. - Linux 3.4.59 CVE-2013-2237 bnc828119. - Linux 3.4.57 CVE-2013-2148 bnc823517. - Linux 3.4.55 CVE-2013-2232 CVE-2013-2234 CVE-2013-4162 CVE-2013-4163 bnc827749 bnc827750 bnc831055 bnc831058. - Drivers: hv: util: Fix...

openSUSE Security Update : acroread (openSUSE-SU-2013:0363-1)

Update to 9.5.3 bnc797529 to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616,...

openSUSE Security Update : Mozilla Suite (openSUSE-SU-2012:1412-1)

Mozilla Firefox, Thunderbird and XULRunner were updated to 16.0.2. Mozilla SeaMonkey was updated to 2.13.2. Tracker bug: bnc786522 A security issues was fixed : - MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196 bmo800666, bmo793121, bmo802557 Fixes for Location object issues The update als...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2012:1419-1) (ROBOT)

java-170-opendjk was updated to icedtea-2.3.3 bnc785814 - Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7158796, CVE-2012-5070: Tighten properties...

openSUSE Security Update : phpMyAdmin (openSUSE-2012-135)

update to 3.4.10.1 fix for bnc747841 - security XSS in replication setup, see PMASA-2012-1 - 3.4.10.0 2012-02-14 - bug 3460090 interface TextareaAutoSelect feature broken - patch 3375984 export PHP Array export might generate invalid php code - bug 3049209 import Import from ODS ignores cell that...

openSUSE Security Update : icedtea-web (openSUSE-SU-2014:0310-1)

icedtea-web was updated to version 1.4.2 bnc864364, fixing various bugs and a security issues : - Dialogs center on screen before becoming visible - Support for u45 new manifest attributes Application-Name - Custom applet permission policies panel in itweb-settings control panel - Plugin - PR1271...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0371-1)

update to 1.2 - New features : - Signed JNLP support - Support for client authentication certificates - Cache size enforcement now supported via itweb-settings - Applet parameter passing through JNLP files now supported - Better icons for access warning dialog - Security Dialog UI revamped to...

openSUSE Security Update : samba (openSUSE-SU-2012:0507-1)

" - Add the ldapsmb sources as else patches against them have no chance to apply. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the 'root' user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; bso8815...

openSUSE Security Update : xen (openSUSE-SU-2013:1636-1)

Xen was updated to 4.1.6 c/s 23588 to fix various bugs and security issues. Following changes are listed : - Comment out the -include directive in Config.mk as the build service build seems to error out not finding '.config' xen-config.diff - bnc845520 - CVE-2013-4416: xen: ocaml xenstored...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1493-1)

This MozillaFirefox update to version 24.0 fixes several security and non-security issues : - move greek to the translations-common package bnc840551 - update to Firefox 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720...