SUSE SLES11 Security Update : glibc (SUSE-SU-2015:0167-1)

glibc has been updated to fix a security issue and two bugs : Security issue fixed : - Copy filename argument in posixspawnfileactionsaddopen CVE-2014-4043 Bugs fixed : - don't touch user-controlled stdio locks in forked child bsc864081, GLIBC BZ 12847 - Fix infinite loop in checkpf bsc909053,...

SUSE SLES11 Security Update : Mozilla Firefox (SUSE-SU-2013:0850-1)

Mozilla Firefox has been updated to the17.0.6ESR security version upgrade as a LTSS roll up release. MFSA 2013-30: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memor...

SUSE SLES11 Security Update : Xen (SUSE-SU-2014:0372-1)

The SUSE Linux Enterprise Server 11 Service Pack 2 LTSS Xen hypervisor and toolset has been updated to fix various security issues and several bugs. The following security issues have been addressed : XSA-88: CVE-2014-1950: Use-after-free vulnerability in the xccpupoolgetinfo function in Xen 4.1....

SUSE SLES11 Security Update : IBM Java 1.7.0 (SUSE-SU-2012:1489-2)

IBM Java 1.7.0 has been updated to SR3 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3159, CVE-2012-3216, CVE-2012-5070, CVE-2012-5067, CVE-2012-3143, CVE-2012-5076, CVE-2012-5077, CVE-2012-5073,...

SUSE SLES11 Security Update : Xen (SUSE-SU-2015:0745-1)

The Virtualization service XEN was updated to fix various bugs and security issues. The following security issues have been fixed : CVE-2015-2756: XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2013:1256-1)

IBM Java 1.7.0 has been updated to SR5 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ Also the following bugs have been fixed : - add Europe/Busingen to tzmappings bnc817062 - mark files in jre/bin and bin/ as executable bnc823034 Note that...

SUSE SLES10 Security Update : kernel (SUSE-SU-2013:1832-1)

The SUSE Linux Enterprise Server 10 SP3 LTSS kernel received a roll up update to fix lots of moderate security issues and several bugs. The Following security issues have been fixed : CVE-2012-4530: The loadscript function in fs/binfmtscript.c in the Linux kernel did not properly handle recursion...

SUSE SLED10 / SLES10 Security Update : kernel (SUSE-SU-2013:0674-1)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed : CVE-2013-0871: A race condition in ptrace2 could be used by local attackers to crash the kernel and/or execute code in kernel context...

SUSE SLES10 Security Update : kernel (SUSE-SU-2014:0772-1)

The SUSE Linux Enterprise Server 10 Service Pack 4 LTSS kernel has been updated to fix various security issues and several bugs. The following security issues have been addressed : CVE-2013-6382: Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local...

SUSE-SU-2015:0939-1 Security update for tigervnc, fltk

tigervnc and fltk were updated to fix security issues and non-security bugs. This security issue was fixed: - CVE-2015-0255: Information leak in the XkbSetGeometry request of X servers bnc915810. These non-security issues were fixed: - vncviewer-tigervnc does not display mouse cursor shape change...

Fedora 21 : NetworkManager-0.9.10.2-5.fc21 (2015-7623)

This update for NetworkManager fixes a number of bugs and a low-impact security issue for IPv6. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

CVE-2015-3644

Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication...

RHEL 7 : kernel (RHSA-2015:0987)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

openSUSE Security Update : libreoffice (openSUSE-2015-357)

LibreOffice was updated to 4.3.7 to fix one security issue and a number of bugs. The following vulnerability was fixed : - CVE-2015-1774: Specially crafted HWP documents could have led to an application crash or possibly the execution of arbitrary code boo919409 The following non-security bugs we...

openSUSE Security Update : gnu_parallel (openSUSE-2015-358)

GNU parallel was updated to version 20150422 to fix one security issue, several bugs and add functionality. The following vulnerability was fixed : - A local attacker could make a user overwrite one of his own files with a single byte when using --compress, --tmux, --pipe, --cat or --fifo when...

CentOS 7 : kernel (CESA-2015:0987)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

SUSE-SU-2015:0896-1 Security update for qemu

qemu / kvm was updated to fix a security issue and some bugs. Security issue fixed: CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. CVE-2015-1779: Fixed insufficient resource...

Updated testdisk packages fix security vulnerabilities

Updated testdisk packages fix security vulnerabilities: The testdisk package has been updated to version 7.0, fixing several security issues and a couple of bugs. See the upstream announcement for more details...

Miscellaneous memory safety hazards (rv:38.0 / rv:31.7) — Mozilla

Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of the...

Updated postgis packages fix security vulnerabilities

Updated postgis packages fix security vulnerability: The PostGIS Raster support in PostGIS before 2.1.3 may give more privileges to users than an administrator is willing to grant. These include reading files from the filesystem and opening connections to network hosts. The postgis package has be...