openSUSE Security Update : freetype2 (openSUSE-2015-274)

freetype2 was updated to fix various vulnerabilities that could lead to crashes or potentially code execution when parsing fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : gnu-efi / pesign / shim (openSUSE-2015-48)

shim was updated to fix several security issues. - OOB read access when parsing DHCPv6 packets remote DoS CVE-2014-3675. - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot option RCE CVE-2014-3676. - Memory corruption when processing user provided MOK lists CVE-2014-3677...

openSUSE: Security Advisory for chromium (openSUSE-SU-2014:1626-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : docker (openSUSE-SU-2014:1596-1)

docker was updated to version 1.3.2 to fix two security issues. These security issues were fixed : - Symbolic and hardlink issues leading to privilege escalation CVE-2014-6407. - Potential container escalation CVE-2014-6408. There non-security issues were fixed : - Fix deadlock in docker ps -f...

openSUSE Security Update : flash-player (openSUSE-SU-2014:1329-1)

Security update to 11.2.202.411 bnc901334 : - APSB14-22, CVE-2014-0569 ZDI-14-365, CVE-2014-0564, CVE-2014-0558 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-603. The text...

openSUSE Security Update : bind (openSUSE-SU-2011:0135-1)

This bind update fixes a remote denial of service vulnerability that can be triggered using an IXFR or DDNS update. CVE-2011-0414: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : bind (openSUSE-2011-13)

Cache lookup could return RRSIG data associated with nonexistent records, leading to an assertion failure. bnc730995 CVE-2011-4313 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : claws-mail (openSUSE-SU-2012:1374-1)

A denial of service attack NULL ptr dereference in claws mail was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-719. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:1243-1)

MozillaFirefox was updated to version 8 bnc728520 to fix the following security issues : dbg114-MozillaFirefox-5399 MozillaFirefox-5399 newupdateinfo MFSA 2011-47/CVE-2011-3648 bmo690225 Potential XSS against sites using Shift-JIS dbg114-MozillaFirefox-5399 MozillaFirefox-5399 newupdateinfo MFSA...

openSUSE Security Update : mozilla-nss (openSUSE-SU-2013:1868-1)

This update fixes the following security issue with mozilla-nss : - update to 3.15.3.1 bnc854367 - includes certstore update 1.95 bmo946351 explicitely distrust AC DG Tresor SSL - adapt specfile to ppc64le %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0008-1)

This update fixes the following security issues with SeaMonkey : - update to SeaMonkey 2.23 bnc854370 - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger...

openSUSE Security Update : nagios (openSUSE-SU-2011:0836-1)

statusmap.cgi and config.cgi were prone to cross-site scripting XSS vulnerabilities CVE-2011-1523, CVE-2011-2179. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-4839. The text...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0126-1)

Sun Java 1.6 was updated to Update 24 fixing various bugs and security issues. The update is rated critical by Sun. Following CVEs were addressed: CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4467 CVE-2010-4469 CVE-2010-4473 CVE-2010-4422 CVE-2010-4451...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0900-1)

libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call CVE-2011-2511. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4836. The text description of this...

openSUSE Security Update : sblim-cim-client2 (openSUSE-SU-2012:1621-1)

This update of sblim-cim-client2 fixed a Denial of Service via hash table collision issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-839. The text description of this plugi...

openSUSE Security Update : libpng12 (libpng12-4947)

This update of libpng12-0 fixes : - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Design Error CWE-DesignError - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2691: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Other...

openSUSE Security Update : libpciaccess0 (openSUSE-SU-2011:1299-1)

Specially crafted font files could cause a buffer overflow in applications that use libXfont to load such files CVE-2011-2895. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpciaccess0-510...

openSUSE Security Update : nagios (openSUSE-SU-2013:0140-1)

avoid stack based buffer overflow in web interface history: added nagios-historybufferoverflow.patch - bnc797237 fixes CVE-2012-6096 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : transmission (openSUSE-SU-2013:0485-1)

transmission was updated to fix remote crashes in UTPProcessIncoming CVE-2012-6129, bnc803088. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-220. The text description of this...

openSUSE Security Update : gdk-pixbuf-loader-rsvg (openSUSE-SU-2011:1090-1)

Specially crafted SVG files could make librsvg dereference a function pointer which potentially allows to execute arbitrary code CVE-2011-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...