openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0375-1)

java-160-openjdk was updated to IcedTea 1.12.3 bnc804654 containing security and bugfixes : - Security fixes - S8006446: Restrict MBeanServer access CVE-2013-1486 - S8006777: Improve TLS handling of invalid messages Lucky 13 CVE-2013-0169 - S8007688: Blacklist known bad certificate issued by...

openSUSE Security Update : kernel (openSUSE-SU-2013:0824-1)

Linux kernel was updated to kernel 3.4.42 fixing various bugs and security issues. - Refresh patches.suse/SUSE-bootsplash. Fix bootsplash breakage due to stable fix bnc813963 - Linux 3.4.39. - kABI: protect struct tracer. - Linux 3.4.38 bnc808829,CVE-2013-0913. -...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0745-1)

apply aarch64 patches on openSUSE 12.3+, EMAARCH64 is not defined in earlier releases - update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization -...

openSUSE Security Update : nagstamon (openSUSE-SU-2013:1235-1)

update to 0.9.10 : + added fullscreen option + added Thruk support + added CheckMK cookie-based auth + added new Centreon autologin option + added configurable default sort order + added filter for hosts in hard/soft state for Nagios, Icinga, Opsview and Centreon + added $STATUS-INFO$ variable...

openSUSE Security Update : samba (openSUSE-SU-2014:0405-1)

"Samba was updated to fix security issues and bugs : Security issues fixed : - Password lockout was not enforced for SAMR password changes, this allowed brute-force attacks on passwords. CVE-2013-4496; bnc849224. - The DCE-RPC fragment length field is incorrectly checked, which could expose samba...

openSUSE Security Update : libvirt (openSUSE-SU-2013:0274-1)

libvirt was updated to fix some bugs and security issues : Security issues fixed : - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed : - qemu: Fix probing for guest capabilities...

openSUSE Security Update : wireshark (openSUSE-SU-2014:0612-1)

This wireshark update to version 1.10.7 fixes the following security issue : - bnc874760: Fixed RTP dissector vulnerabilities CVE-2014-2907. - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.7 .html %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : otrs (openSUSE-SU-2012:1214-1)

fix a XSS vulnerability: bnc778655 CVE-2012-4600 - update to 2.4.14 openSUSE 11.4 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter to detect tag nesting. - update to 3.0.16 openSUSE 12.1 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0964-1)

update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model -...

openSUSE Security Update : putty (openSUSE-SU-2013:1355-1)

Putty was updated to 0.63, bringing features, bug and security fixes. Changes : - Add 0001-Revert-the-default-for-font-bolding-style.patch upstream patch fixing a cosmetic change introduced in 0.63 - Add Conflict tag against pssh package Parallel SSH due to conflicting files in /usr/bin - Do...

openSUSE Security Update : otrs (openSUSE-SU-2014:0360-1)

The OTRS ticket system was updated to 3.1.20 / 3.2.15 : On openSUSE 12.3 it was updated to 3.1.20: fix for OSA-2014-03, CVE-2014-1695 - Improved HTML filter. - 3.1.19 2014-01-28 - Fixed bug10158 - Missing quoting in State::StateGetStatesByType. - Fixed bug10099 - Missing challenge token checks on...

openSUSE Security Update : ruby (openSUSE-SU-2012:0228-1)

This update of ruby provides 1.8.7p357, which contains many stability fixes and bug fixes, which are fully compatible with the previous version. You can review the detailed list here : http://svn.ruby-lang.org/repos/ruby/tags/v187357/ChangeLog The particularly noteworthy fixes are : - Hash...

openSUSE Security Update : phpMyAdmin (openSUSE-2011-94)

update to 3.4.8 - bug 3425230 interface enum data split at space char more space to edit - bug 3426840 interface ENUM/SET editor can't handle commas in values - bug 3427256 interface no links to browse/empty views and tables - bug 3430377 interface Deleted search results remain visible - bug...

openSUSE Security Update : kernel (openSUSE-SU-2013:1619-1)

The Linux kernel was updated to 3.4.63, fixing various bugs and security issues. - Linux 3.4.59 CVE-2013-2237 bnc828119. - Linux 3.4.57 CVE-2013-2148 bnc823517. - Linux 3.4.55 CVE-2013-2232 CVE-2013-2234 CVE-2013-4162 CVE-2013-4163 bnc827749 bnc827750 bnc831055 bnc831058. - Drivers: hv: util: Fix...

openSUSE Security Update : kernel (openSUSE-SU-2014:0204-1)

The Linux kernel was updated to fix various bugs and security issues : - mm/page-writeback.c: do not count anon pages as dirtyable memory reclaim stalls. - mm/page-writeback.c: fix dirtybalancereserve subtraction from dirtyable memory reclaim stalls. - compatsysrecvmmsg X32 fix bnc860993...

openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)

Update to Chromium 30.0.1599.66 : - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes : + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

openSUSE Security Update : virtualbox (openSUSE-SU-2012:1323-1)

VirtualBox was updated to 4.1.22 stable release, bringing lots of security and also bugfixes. The 4.1.22 release is brought to all openSUSE distributions to align their versions. changes in virtualbox 4.1.22 maintenance release - VMM: fixed a potential host crash triggered by shutting down a VM...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:1509-1)

This icedtea-web update fixes several security issues. Changes in icedtea-web : - update to 1.4.1 bnc840572 - Improved and cleaned Temporary internet files panel - NetX - PR1465 - java.io.FileNotFoundException while trying to download a JAR file - PR1473 - javaws should not depend on name of loca...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:1424-1) (ROBOT)

java 1.6.0 openjdk / icedtea was updated to 1.11.5 bnc785433 - Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7167656, CVE-2012-5077: Multiple Seeders...

openSUSE Security Update : Kernel (openSUSE-SU-2012:0799-1)

This kernel update of the openSUSE 12.1 kernel fixes lots of bugs and security issues. Following issues were fixed : - tcp: drop SYN+FIN messages bnc765102. - net: sock: validate datalen before allocating skb in sockallocsendpskb bnc765320, CVE-2012-2136. - fcaps: clear the same personality flags...