Vulnerability fixed in OpenSSL

A vulnerability has been fixed in OpenSSL. When a remote malicious party manages to provide a rogue certificate and a rogue certificate-revocation-list manages to offer them to an ssl server or ssl client, a denial-of-service can be caused by doing so. OpenSSL has released updates to fix the...

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command which triggers a stack-based buffer overflow in the alloca function.

...

OPENSUSE-SU-2020:0999-1 Security update for xrdp

This update for xrdp fixes the following issues: - Security fixes bsc1173580, CVE-2020-4044: + Add patches: xrdp-cve-2020-4044-fix-0.patch xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: xrdp-fate318398-change-expired-password.patch This update was imported from the SUSE:SLE-15:Update update...

coreutils: segfault in uniq with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function...

coreutils: segfault in "join -i" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service segmentation fault and crash via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function...

SLES11: Security update for IBM Java 1.6.0

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-160-ibm java-160-ibm-alsa java-160-ibm-fonts java-160-ibm-jdbc java-160-ibm-plugin More details may also be found by searching for the SuSE Enterprise...

SLES9: Security update for gd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gd gd-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018750 within the...

SUSE-SA:2005:014: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:014 RealPlayer. Two security problems were found in the media player RealPlayer: - CVE-2005-0455: A buffer overflow in the handling of .smil files. - CVE-2005-0611: A buffer overflow in the handling of .wav files. Both buffer...