openSUSE Security Update : libQtWebKit-devel (openSUSE-SU-2012:0091-1)

A stack-based buffer overflow in the glyph handling of libqt4's harfbuzz has been fixed. CVE-2011-3922 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2012:0083-1)

Various security vulnerabilities have been fixed in openssl : - DTLS plaintext recovery attack CVE-2011-4108 - uninitialized SSL 3.0 padding CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures CVE-2011-4577 - SGC restart DoS attack CVE-2011-4619 - invalid GOST parameters DoS atta...

openSUSE Security Update : libmoon-devel (openSUSE-SU-2011:0313-1)

Moonlight was prone to several security problems : CVE-2011-0989: modification of read-only values via RuntimeHelpers.InitializeArray CVE-2011-0990: buffer overflow due to race condition in in Array.FastCopy CVE-2011-0991: use-after-free due to DynamicMethod resurrection CVE-2011-0992: informatio...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0420-1)

specially crafted tiff images could cause a buffer overflow in libtiff CVE-2010-2067. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-devel-2720. The text description of this plugin is...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0633-1)

Oracle Java 6 Update 26 fixes several security vulnerabilities. Please refer to Oracle's site for further information: http://www.oracle.com/technetwork/topics/security/javacpujun e2011-313339.html CVE-2011-0862, CVE-2011-0873, CVE-2011-0815, CVE-2011-0817, CVE-2011-0863, CVE-2011-0864,...

openSUSE Security Update : libcollection-devel (openSUSE-SU-2011:0058-1)

This update fixes a local denial-of-service attack that stops other users from logging in. The bug existed in the pamparseindatav2 function. CVE-2010-4341: CVSS v2 Base Score: 2.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : libmoon-devel (openSUSE-SU-2011:0313-1)

Moonlight was prone to several security problems : CVE-2011-0989: modification of read-only values via RuntimeHelpers.InitializeArray CVE-2011-0990: buffer overflow due to race condition in in Array.FastCopy CVE-2011-0991: use-after-free due to DynamicMethod resurrection CVE-2011-0992: informatio...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2010:0951-1)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : libvmtools-devel (openSUSE-SU-2011:0617-1)

This update of open-vm-tools fixes the following vulnerabilities which allowed an attacker to gain root privileges within the guest system : - CVE-2011-1681 - CVE-2011-2146 - CVE-2011-1787 - CVE-2011-2145 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2012:0266-1)

This update of OpenSSL fixes a Denial of Services issue CVE-2012-0050. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libopenssl-devel-5761. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0010-1)

CVE-2013-6436: Fix crashes in lxc memtune code, one of which results in DoS f8c1cb90-CVE-2013-6436.patch, 9faf3f29-LXC-memtune.patch bnc854486 - Backported upstream patch to fix LXC container failing start. bnc855239 - Building with polkit support requires polkit-devel bnc854144 %NASLMINLEVEL...

openSUSE Security Update : libpcsclite1 (openSUSE-SU-2010:0500-1)

This update of pcsc-liste fixes two vulnerabilities : - CVE-2009-4901: local denial of service daemon crash via crafted SCARDSETATTRIB message data, a related issue to CVE-2010-0407. - CVE-2009-4902: a buffer overflow might allow local users to gain privileges via crafted SCARDCONTROL message dat...

openSUSE Security Update : samba (openSUSE-SU-2012:0507-1)

" - Add the ldapsmb sources as else patches against them have no chance to apply. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the 'root' user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; bso8815...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2011:1250-1)

This mysql update fixes the following security issues - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information CWE-noinfo - CVE-2010-3835:...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0619-1)

specially crafted tiff files could cause a memory corruption in libtiff. Attackers could potentially exploit that to execute arbitrary code in applications that use libtiff for processing tiff files CVE-2010-3087. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

openSUSE Security Update : libQtWebKit-devel (openSUSE-SU-2011:1119-1)

Specially crafted font files could cause a single byte heap based buffer overflow CVE-2011-3193. Specially crafted grey scale images could cause a heap based buffer overflow CVE-2011-3194. The update also fixes the following non-security bugs : - fix QFileDialog not showing system files bnc669604...

CentOS Update for libtasn1 CESA-2014:0596 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : firefox (ELSA-2014-0448)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-0448 advisory. 24.5.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Build with nspr-devel = 4.10.0 to fix build failure...

firefox security update

24.5.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Build with nspr-devel = 4.10.0 to fix build failure 24.5.0-1 - Update to 24.5.0 ESR 24.4.0-3 - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory usage in Firefox 24 ESR on RHEL 6.5 24.4.0...

firefox security update

24.4.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Build with nspr-devel = 4.10.0 to fix build failure 24.4.0-1 - Update to 24.4.0 ESR 24.3.0-4 - Fixed rhbz1070467 - Enable Add Ons by default in Firefox 24.3.0-3 - Fixed rhbz1054832 - Firefox does not...