openSUSE Security Update : LibreOffice (openSUSE-SU-2012:1523-1)

LibreOffice was updated to 3.5.4.13 to fix various bugs and security issues : - NULL pointer dereference bnc778669, CVE-2012-4233 - bullet-color-pptx-import.diff: bullets should have same color as following text by default; missing part of the fix bnc734733 - update to suse-3.5.4.13 SUSE 3.5 bugf...

openSUSE Security Update : phpMyAdmin (openSUSE-2012-18)

update to 3.4.9 - bug 3442028 edit Inline editing enum fields with null shows no dropdown - bug 3442004 interface DB suggestion not correct for user with underscore - bug 3438420 core Magic quotes removed in PHP 5.4 - bug 3398788 session No feedback when result is empty signon authtype - bug...

openSUSE Security Update : roundcubemail (openSUSE-SU-2014:0365-1)

roundcubemail was updated to 0.9.5 to fix bugs and security issues. Fixed security issues : - CVE-2013-6172: vulnerability in handling session argument of utils/save-prefs New upstream release 0.9.5 bnc847179 CVE-2013-6172 - Fix failing vCard import when email address field contains spaces - Fix...

openSUSE Security Update : kdenetwork4 (openSUSE-SU-2010:1076-1)

This update of kdenetwork fixes several bugs, the security related issues are : - CVE-2010-1000: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N: CWE-22 The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary...

openSUSE Security Update : Xen (openSUSE-SU-2012:1172-1)

Security Update for Xen Following bug and security fixes were applied : - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...

openSUSE Security Update : clamav (openSUSE-SU-2010:0921-1)

clamav version 0.96.3 fixes problems when scanning pdf files CVE-2010-3434 and also contains numerous other bug fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-3230. The text...

openSUSE Security Update : kernel (openSUSE-SU-2010:0734-1)

This updated openSUSE 11.3 kernel fixes the following security bugs : CVE-2010-3310: local users could corrupt kernel heap memory via ROSE sockets. CVE-2010-2962: local users could write to any kernel memory location via the i915 GEM ioctl interface. Additionally the update restores the...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0199-1)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues : - Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions - Bug...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:1509-1)

This icedtea-web update fixes several security issues. Changes in icedtea-web : - update to 1.4.1 bnc840572 - Improved and cleaned Temporary internet files panel - NetX - PR1465 - java.io.FileNotFoundException while trying to download a JAR file - PR1473 - javaws should not depend on name of loca...

openSUSE Security Update : chromium (openSUSE-SU-2013:1200-1)

Update to 30.0.1553 - Bug and stability fixes - Includes security update for v8 bnc821601 - CVE-2013-2838 Denial of service out-of-bounds read via unspecified vectors - Add the flag --disable-gpu-sandbox to prevent crashes and/or slowness. The GPU Sandbox is a new sandbox introduces in M28 and is...

openSUSE Security Update : kernel (openSUSE-SU-2013:0824-1)

Linux kernel was updated to kernel 3.4.42 fixing various bugs and security issues. - Refresh patches.suse/SUSE-bootsplash. Fix bootsplash breakage due to stable fix bnc813963 - Linux 3.4.39. - kABI: protect struct tracer. - Linux 3.4.38 bnc808829,CVE-2013-0913. -...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0745-1)

apply aarch64 patches on openSUSE 12.3+, EMAARCH64 is not defined in earlier releases - update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization -...

openSUSE Security Update : nagstamon (openSUSE-SU-2013:1235-1)

update to 0.9.10 : + added fullscreen option + added Thruk support + added CheckMK cookie-based auth + added new Centreon autologin option + added configurable default sort order + added filter for hosts in hard/soft state for Nagios, Icinga, Opsview and Centreon + added $STATUS-INFO$ variable...

openSUSE Security Update : samba (openSUSE-SU-2014:0405-1)

"Samba was updated to fix security issues and bugs : Security issues fixed : - Password lockout was not enforced for SAMR password changes, this allowed brute-force attacks on passwords. CVE-2013-4496; bnc849224. - The DCE-RPC fragment length field is incorrectly checked, which could expose samba...

openSUSE Security Update : libvirt (openSUSE-SU-2013:0274-1)

libvirt was updated to fix some bugs and security issues : Security issues fixed : - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed : - qemu: Fix probing for guest capabilities...

openSUSE Security Update : wireshark (openSUSE-SU-2014:0612-1)

This wireshark update to version 1.10.7 fixes the following security issue : - bnc874760: Fixed RTP dissector vulnerabilities CVE-2014-2907. - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.7 .html %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : otrs (openSUSE-SU-2012:1214-1)

fix a XSS vulnerability: bnc778655 CVE-2012-4600 - update to 2.4.14 openSUSE 11.4 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter to detect tag nesting. - update to 3.0.16 openSUSE 12.1 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0964-1)

update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model -...

openSUSE Security Update : putty (openSUSE-SU-2013:1355-1)

Putty was updated to 0.63, bringing features, bug and security fixes. Changes : - Add 0001-Revert-the-default-for-font-bolding-style.patch upstream patch fixing a cosmetic change introduced in 0.63 - Add Conflict tag against pssh package Parallel SSH due to conflicting files in /usr/bin - Do...

openSUSE Security Update : otrs (openSUSE-SU-2014:0360-1)

The OTRS ticket system was updated to 3.1.20 / 3.2.15 : On openSUSE 12.3 it was updated to 3.1.20: fix for OSA-2014-03, CVE-2014-1695 - Improved HTML filter. - 3.1.19 2014-01-28 - Fixed bug10158 - Missing quoting in State::StateGetStatesByType. - Fixed bug10099 - Missing challenge token checks on...