openSUSE Security Update : sysconfig (openSUSE-SU-2012:0242-1)

This update for sysconfig contains the following fixes : - sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could therefore lead to execution of shell code CVE-2011-4182. - Explicitly disabled posix mode ...

openSUSE Security Update : opera (openSUSE-SU-2012:0827-1)

update to 12.00 - full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes bnc767045 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-366. The text...

openSUSE Security Update : rubygems (openSUSE-SU-2014:0332-1)

This update fixes the following issue with some rubygems : - bnc864873: fix rubygem patches are not applied to the gem but only to the tree. Packages embedding rubygems via their .gem files were not receiving security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0308-1)

OpenJDK java-160-openjdk was updated to 1.12.2 to fix bugs and security issues bnc801972 - Security fixes on top of 1.12.0 - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at...

openSUSE Security Update : Mozilla Suite (openSUSE-SU-2012:1412-1)

Mozilla Firefox, Thunderbird and XULRunner were updated to 16.0.2. Mozilla SeaMonkey was updated to 2.13.2. Tracker bug: bnc786522 A security issues was fixed : - MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196 bmo800666, bmo793121, bmo802557 Fixes for Location object issues The update als...

openSUSE Security Update : postgresql (openSUSE-SU-2012:1173-1)

Postgresql was updated to the security and bugfix release 9.1.3 : - Require execute permission on the trigger function for 'CREATE TRIGGER' CVE-2012-0866, bnc749299. - Remove arbitrary limitation on length of common name in SSL certificates CVE-2012-0867, bnc749301. - Convert newlines to spaces i...

openSUSE Security Update : acroread (openSUSE-SU-2013:0363-1)

Update to 9.5.3 bnc797529 to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616,...

openSUSE Security Update : apache2 (openSUSE-SU-2012:0248-1)

This update fixes several security issues in the Apache2 webserver. CVE-2011-3368, CVE-2011-4317: This update also includes several fixes for a modproxy reverse exposure via RewriteRule or ProxyPassMatch directives. CVE-2011-3607: Integer overflow in appregsub function resulting in a heap based...

openSUSE Security Update : libXv (openSUSE-SU-2013:1010-1)

This update of libXrender fixes several buffer and integer overflow issues. - U0001-integer-overflow-in-XvQueryPortAttributes-CVE-201 3-1.patch, U0002-integer-overflow-in-XvListImageFormats-CVE-2013-1 989.patch, U0003-integer-overflow-in-XvCreateImage-CVE-2013-1989-3 -3.patch - integer overflow i...

openSUSE Security Update : webyast (openSUSE-SU-2013:1954-1)

Fixed CVE-2013-3709: make the secret token file secrettoken.rb readable only for the webyast user to avoid forging the session cookie bnc851116 reported by joernchen of Phenoelit %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : libXvMC (openSUSE-SU-2013:1025-1)

This update of libXvMC fixes several integer overflow issues. - U0001-integer-overflow-in-XvMCListSurfaceTypes-CVE-2013 -19.patch, U0002-integer-overflow-in-XvMCListSubpictureTypes-CVE-2 013.patch - integer overflow in XvMCListSurfaceTypes, XvMCListSubpictureTypes CVE-2013-1990 bnc821663, bnc8154...

openSUSE Security Update : bind (openSUSE-SU-2012:0864-1)

Fixed domain name resolving flaw: CVE-2012-1033, bnc746074 Non-security fixes : - added TLSA record type - added wire format lookup method to sdb - many many bugfixes see CHANGES for details - 9.8.3-P1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : xorg-x11-server (openSUSE-SU-2013:1148-1)

This xorg-x11-server update fixes a DoS vulnerability and adds randr support. - Uos-Reset-input-buffer-s-ignoreBytes-field.patch - If a client sends a request larger than maxBigRequestSize, the server is supposed to ignore it. Before commit cf88363d, the server would simply disconnect the client...

openSUSE Security Update : phpMyAdmin (openSUSE-2012-135)

update to 3.4.10.1 fix for bnc747841 - security XSS in replication setup, see PMASA-2012-1 - 3.4.10.0 2012-02-14 - bug 3460090 interface TextareaAutoSelect feature broken - patch 3375984 export PHP Array export might generate invalid php code - bug 3049209 import Import from ODS ignores cell that...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2012:1419-1) (ROBOT)

java-170-opendjk was updated to icedtea-2.3.3 bnc785814 - Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7158796, CVE-2012-5070: Tighten properties...

openSUSE Security Update : freetype2 (openSUSE-SU-2013:0165-1)

BNC795826, CVE-2012-5668.patch bdf Fix Savannah bug 37905. - src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in - BNC795826, CVE-2012-5669.patch bdf Fix Savannah bug 37906. - src/bdf/bdflib.c bdfparseglyphs: Use correct array...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / chmsee / etc (openSUSE-2012-83)

Changes in MozillaFirefox : - update to Firefox 10.0 bnc744275 - MFSA 2012-01/CVE-2012-0442/CVE-2012-0443 Miscellaneous memory safety hazards - MFSA 2012-03/CVE-2012-0445 bmo701071 element exposed across domains via name attribute - MFSA 2012-04/CVE-2011-3659 bmo708198 Child nodes from...

openSUSE Security Update : kernel (openSUSE-SU-2013:1043-1)

The openSUSE 12.3 kernel was updated to fix a critical security issue and two reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi target...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0981-1)

update to 1.2.1 bnc773458 - Security Updates - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings - NetX - PR898: signed applications with big jnlp-file doesn't start webstart affect like 'frozen'...

openSUSE Security Update : kernel (openSUSE-SU-2014:0205-1)

The Linux Kernel was updated to version 3.11.10, fixing security issues and bugs : - floppy: bail out in open if drive is not responding to block0 read bnc773058. - compatsysrecvmmsg X32 fix bnc860993 CVE-2014-0038. - HID: usbhid: fix sis quirk bnc859804. - hwmon: coretemp Fix truncated name of...