openSUSE Security Update : subversion (openSUSE-2016-570)

This update for subversion fixes the following issues : - CVE-2016-2167: modauthzsvn: DoS in MOVE/COPY authorization check bsc976849 - CVE-2016-2168: svnserve/sasl may authenticate users using the wrong realm bsc976850 The following non-security bugs were fixed : - bsc969159: subversion...

SUSE-SU-2016:1249-1 Security update for subversion

This update for subversion fixes the following issues: - CVE-2016-2167: modauthzsvn: DoS in MOVE/COPY authorization check bsc976849 - CVE-2016-2168: svnserve/sasl may authenticate users using the wrong realm bsc976850 The following non-security bugs were fixed: - bsc969159: subversion dependencie...

SUSE-SU-2016:1175-1 Security update for ntp

ntp was updated to version 4.2.8p6 to fix 12 security issues. These security issues were fixed: - CVE-2015-8158: Fixed potential infinite loop in ntpq bsc962966. - CVE-2015-8138: Zero Origin Timestamp Bypass bsc963002. - CVE-2015-7979: Off-path Denial of Service DoS attack on authenticated...

Solaris 10 (sparc) : 152252-02 (deprecated)

SunOS 5.10: sudo Patch. Date this patch was last updated by Sun : Feb/09/17 This plugin has been deprecated and either replaced with individual 152252 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Solaris 10 (x86) : 152255-01 (deprecated)

SunOS 5.10x86: sudo Source Patch. Date this patch was last updated by Sun : Apr/20/16 This plugin has been deprecated and either replaced with individual 152255 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 152096-71 (deprecated)

JavaSE 7: update 171 patch equivalent to JDK 7u171. Date this patch was last updated by Sun : Jan/16/18 This plugin has been deprecated and either replaced with individual 152096 patch-revision plugins, or deemed non-security related. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

openSUSE Security Update : samba (openSUSE-2016-462) (Badlock)

"samba was updated to version 4.2.4 to fix 14 security issues. These security issues were fixed : - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. -...

MS16-039: Description of the security update for Windows Graphics Component: April 12, 2016

None None...

SUSE SLED11 / SLES11 Security Update : gcc5 (SUSE-SU-2016:0908-2)

The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed : - Fix C++11 std::randomdevice short read issue that could lead to predictable randomness. CVE-2015-5276, bsc945842 The update package also includes...

SUSE-SU-2016:0908-2 Security update for gcc5

The GNU Compiler Collection was updated to version 5.3.1, which brings several fixes and enhancements. The following security issue has been fixed: - Fix C++11 std::randomdevice short read issue that could lead to predictable randomness. CVE-2015-5276, bsc945842 The following non-security issues...

Solaris 10 (x86) : 152265-01 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utilities. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris. Successful attacks of this...

openSUSE Security Update : libqt5-qtbase (openSUSE-2016-613)

This update for libqt5-qtbase fixes the following issues : - boo865241: disable RC4 based ciphers which are now considered insecure The following non-security bugs were fixed : - boo957006: dolphin freeze when opening a folder containing symlinks to special files %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : qemu (openSUSE-2016-252)

This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : This update also fixes a non-security bug : - Due to...

Security update for glibc (important)

This update for glibc fixes the following security issues: - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD...

SUSE-SU-2016:0470-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD environment...

SUSE-SU-2016:0340-1 Security update for curl

This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer bsc962983 The following non-security bugs were fixed: -...

SUSE-SU-2016:0304-1 Security update for libvirt

libvirt was updated to fix one security issue and several non-security issues. This security issue was fixed: - CVE-2015-0236: libvirt allowed remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc...

SUSE-SU-2016:0303-1 Security update for kdebase4-workspace

This update for kdebase4-workspace fixes the following issues: - CVE-2014-8651: Privilege escalation via KDE Clock KCM helper when non-default polkit settings are used bsc904625 The following non-security bugs were fixed: - bsc929718: Make kdm recognize an IPv6 localhost address as localhost...

SUSE-SU-2016:0282-1 Security update for gdk2

This update for gdk2 fixes the following security issues: - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The following non-security issues were fixed: - bsc960155: fix a possible divide by zero...

Security update for openldap2 (important)

This update fixes the following security issues: - CVE-2015-6908: The bergetnext function allowed remote attackers to cause a denial of service reachable assertion and application crash via crafted BER data, as demonstrated by an attack against slapd. bsc945582 - CVE-2015-4000: Fix weak...