openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2011:1250-1)

This mysql update fixes the following security issues - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information CWE-noinfo - CVE-2010-3835:...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0405-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder- and ojpeg-decoders CVE-2011-1167, CVE-2009-5022. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)

Update to Chromium 30.0.1599.66 : - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes : + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

openSUSE Security Update : libzip-devel (openSUSE-SU-2011:0449-1)

empty zip archives could crash programs using libzip CVE-2011-0421. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libzip-devel-4188. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2012:0083-1)

Various security vulnerabilities have been fixed in openssl : - DTLS plaintext recovery attack CVE-2011-4108 - uninitialized SSL 3.0 padding CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures CVE-2011-4577 - SGC restart DoS attack CVE-2011-4619 - invalid GOST parameters DoS atta...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2011:1144-1)

OpenSSL's internal certificate verification routines could incorrectly accept a CRL whose nextUpdate field is in the past CVE-2011-3207. Server code for ECDH could crash if it received a specially crafted handshake message CVE-2011-3210. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0709-1)

remote authenticated clients could crash the kdc CVE-2010-1322. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-3259. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : ghostscript-devel (openSUSE-SU-2010:0451-1)

ghostscript by default read some initialization files from the current working directory. Local attackers could potentially exploit that to have other users execute arbitrary commands by placing such files e.g. in /tmp CVE-2010-2055. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : tiff (openSUSE-SU-2013:1482-1)

This tiff security update fixes several buffer overflow issues and a out-of-bounds wirte problem. - tiff: buffer overflows/use after free problem CVE-2013-4231CVE-2013-4232bnc834477 - libtiff gif2tiff: OOB Write in LZW decompressor CVE-2013-4244bnc834788 - libtiff gif2tiff: heap-based buffer...

openSUSE Security Update : libpcsclite1 (openSUSE-SU-2011:0092-1)

An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 and CVE-2010-4531 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2011:0634-1)

This update of openssl fixes a timing attack. This attack can be used to obtain the private key of a TLS server whenever ECDSA signatures are used. CVE-2011-1945: CVSS v2 Base Score: 4.3 important AV:N/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues CWE-310 %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)

Two security bugfixes in libcgroup1 were done : libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : libmoon-devel (openSUSE-SU-2010:1062-1)

Untrusted Moonlight apps could bypass constraints on methods which potentially allowed attackers to execute arbitrary code CVE-2010-4254. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : openssl (openSUSE-SU-2014:0635-1)

Fixed bug bnc876282, CVE-2014-0198 openssl: OpenSSL NULL pointer dereference in dossl3write Add file: CVE-2014-0198.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-359. The...

openSUSE Security Update : libQtWebKit-devel (openSUSE-SU-2011:1120-1)

Specially crafted font files could cause a single byte heap based buffer overflow CVE-2011-3193. Specially crafted grey scale images could cause a heap based buffer overflow CVE-2011-3194. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : libQtWebKit-devel (openSUSE-SU-2012:0091-1)

A stack-based buffer overflow in the glyph handling of libqt4's harfbuzz has been fixed. CVE-2011-3922 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : pcp (openSUSE-SU-2012:1081-1)

Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; bnc775009. + Workaround for security advisory CVE-2012-3419; bnc775010. + Fixes for security advisory CVE-2012-3420; bnc775011. + Fixes for security advisory CVE-2012-3421; bnc775013. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2011:0014-1)

Malicious clients could downgrade a connection to a low strength cipher suite on session resumption if the server offers such ciphers CVE-2010-4180. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : chromium / v8 (openSUSE-2012-107)

Chromium update to version 18.0.1022 fixes several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-107. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : taglib (openSUSE-SU-2012:0615-1)

Specially crafted MP4 files could crash taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-275. The text description of this plugin is C SUSE LLC...