openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0509-1)

java-170-openjdk was updated to icedtea-2.3.7 bnc809386 : - Security fixes - S8007014, CVE-2013-0809: Improve image handling - S8007675, CVE-2013-1493: Improve color conversion - Backports - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS - S8004344: Fix a crash in...

openSUSE Security Update : otrs (openSUSE-SU-2012:1214-1)

fix a XSS vulnerability: bnc778655 CVE-2012-4600 - update to 2.4.14 openSUSE 11.4 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter to detect tag nesting. - update to 3.0.16 openSUSE 12.1 fix for OSA-2012-02, http://otrs.org/advisory/ - Improved HTML security filter...

openSUSE Security Update : postgresql (openSUSE-SU-2012:0480-1)

Security and bugfix release 9.1.3 : - Require execute permission on the trigger function for 'CREATE TRIGGER' CVE-2012-0866, bnc749299. - Remove arbitrary limitation on length of common name in SSL certificates CVE-2012-0867, bnc749301. - Convert newlines to spaces in names written in pgdump...

openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2011:0902-1)

This update of ecryptfs-utils fixes several security problems : - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 -...

openSUSE Security Update : jasper (openSUSE-SU-2011:1328-1)

Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper CVE-2011-4516, CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update jasper-5543. The text description of...

openSUSE Security Update : icinga (openSUSE-SU-2013:0206-1)

fixed Stack based buffer overflow in web interface: bnc797237 - CVE-2012-6096 - icinga-fix-bnc797237.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-54. The text...

openSUSE Security Update : libxml2 / python-libxml2 (openSUSE-SU-2014:0716-1)

Updated fix for openSUSE-SU-2014:0645-1 because of a regression that caused xmllint to break. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-394. The text description of this...

openSUSE Security Update : roundcubemail (openSUSE-SU-2012:1124-1)

Update to version 0.8.1 - lot of bugfixes and new features including new skin please check the CHANGELOG - contains security related fixes bnc777446 - Fix XSS vulnerability in message subject handling using Larry skin CVE-2012-3507 - Fix XSS issue where plain signatures wasn't secured in HTML...

openSUSE Security Update : ncpfs (openSUSE-SU-2011:0985-1)

Following issues are fixed by this update: The ncpfs mount and umount programs were affected by the /etc/mtab truncation problems on RLIMITFSIZE. CVE-2011-1679 Also on errors, the mtab lock was not removed, blocking other applications from modifying /etc/mtab. CVE-2011-1680 %NASLMINLEVEL 70300 C...

openSUSE Security Update : libxslt / libxslt-python (openSUSE-SU-2012:0883-1)

Changes in libxslt, libxslt-python : - fixing an incorrect read operation in the XSL implementation CVE-2012-2825, bnc769182 that could cause a DoS condition %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : gnutls (openSUSE-SU-2013:1714-1)

the following security issue was fixed : - Fix bug bnc848510, CVE-2013-4487 off-by-one security fix in libdane %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-858. The text...

openSUSE Security Update : krb5 (openSUSE-SU-2013:1119-1)

This update fixes a kpasswd UDP ping-pong security bug CVE-2002-2443. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-546. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : typo3-cms-4_5/typo3-cms-4_6/typo3-cms-4_7 (openSUSE-SU-2013:0510-1)

The Typo3 CMS versions were updated to receive security and bug fixes. - Raised to version 4.5.25 - bugfix: External URL regression by jumpurl security fix Helmut Hummel, t346071 - Raised to version 4.5.24 - Raise submodule pointer TYPO3 Release Team - security: Open redirection with jumpurl Fran...

SuSE Update for update openSUSE-SU-2014:0492-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201404921.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for update openSUSE-SU-2014:0492-1 update Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program i...

CVE-2013-6774

Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an...

Design/Logic Flaw

Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse appprocess program via a crafted PATH environment variable for a /system/xbin/su process...

SuSE Update for kernel openSUSE-SU-2014:0204-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201402041.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for kernel openSUSE-SU-2014:0204-1 kernel Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program i...

coreutils security, bug fix, and enhancement update

8.4-31.0.1 - clean up empty file if cp is failed Orabug 15973168 8.4-31 - adjust the fix for the du bindmounts failure836557 Mon Oct 07 2013 Ondrej Oprala - Fix su retvals once again 8.4-29 - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various segmentation faults in sort, uniq and join1015019...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel 3.0 3.3.5 - CLONE_NEWUSER|CLONE_FS Local Privilege Escalation

Linux Kernel 3.0 3.3.5 - CLONENEWUSER|CLONEFS Local Privilege Escalation / source: https://www.securityfocus.com/bid/58478/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain kernel privileges, which will aid in further attacks....