SUSE SLED12 Security Update : libreoffice (SUSE-SU-2014:1729-1)

This libreoffice update fixes the following security and non security issues : - Version bump to 4.3.5 release : - Various small fixes - Fix for CVE-2014-9093 bnc907636 - Remove dangling symlinks from previous versions bnc884942 Note that Tenable Network Security has extracted the preceding...

SUSE SLES11 Security Update : Xen (SUSE-SU-2015:0745-1)

The Virtualization service XEN was updated to fix various bugs and security issues. The following security issues have been fixed : CVE-2015-2756: XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through...

SUSE SLED12 / SLES12 Security Update : jasper (SUSE-SU-2015:0288-1)

jasper was updated to fix two security issues. These security issues were fixed : - CVE-2014-8157: Off-by-one error in the jpcdecprocesssot function in JasPer 1.900.1 and earlier allowed remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted JPEG 2000...

SUSE SLED10 / SLES10 Security Update : IBM Java 1.5.0 (SUSE-SU-2012:1489-1)

IBM Java 1.5.0 has been updated to SR15 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3216, CVE-2012-3143, CVE-2012-5073, CVE-2012-5075, CVE-2012-5083, CVE-2012-5083, CVE-2012-1531, CVE-2012-5081,...

SUSE SLES10 / SLES11 Security Update : Mozilla Firefox (SUSE-SU-2015:0447-1)

Mozilla Firefox has been updated to version 31.5.0 ESR to fix five security issues. These security issues have been fixed : - CVE-2015-0836: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.5 allowed remote attackers to cause a denial of service memory...

SUSE SLED12 / SLES12 Security Update : tigervnc (SUSE-SU-2014:1592-1)

This update for tigervnc provides the following fixes : - Fixed integer overflow flaw, leading to a heap-based buffer overflow in screen size handling. CVE-2014-8240 - Send correctly keys that don't type any characters, such as CTRL+Space. bnc906922 Note that Tenable Network Security has extracte...

Solaris 10 (x86) : 148310-08 (deprecated)

SunOS 5.10x86: dhcp patch. Date this patch was last updated by Sun : Sep/06/17 This plugin has been deprecated and either replaced with individual 148310 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Debian DLA-224-1 : ruby1.8 security update

It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. For the oldoldstable...

Fedora 20 : t1utils-1.39-1.fc20 (2015-7581)

t1utils Version 1.39 2015-02-26 ================================= - t1disasm: Security fixes for buffer overrun reported by Jakub Wilk and Niels Thykier. t1utils Version 1.38 2013-09-29 ================================= - t1disasm: Fix an infinite loop on some fonts reported by Niels Thykier. Not...

Debian DLA-221-1 : tiff security update

Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information disclosure or privilege escalation. CVE-2014-8128 William Robinet discovered that out-of-bounds writes are triggered in several of...

Fedora 22 : kernel-4.0.2-300.fc22 (2015-7784)

The 4.0.2 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 22 : ca-certificates-2015.2.4-1.0.fc22 (2015-7918)

This is an update to the set of CA certificates released with NSS version 3.18.1 However, the package modifies the CA list to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for details. If you prefer to use the unchanged list provided by Mozilla,...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerability (USN-2597-2)

USN-2597-1 fixed vulnerabilities in the Linux kernel, however an unrelated regression in the auditing of some path names was introduced. Due to the regression the system could crash under certain conditions. This update fixes the problem. We apologize for the inconvenience. A race condition betwe...

Fedora 20 : testdisk-7.0-2.fc20 (2015-6933)

TestDisk 7.0 fixes several stack overflows. The new photorec is faster. qphotorec is a qt4 version of PhotoRec. Full release notes: http://www.cgsecurity.org/wiki/TestDisk7.0Release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 20 : springframework-3.1.4-3.fc20 (2015-6862)

Security fix for CVE-2014-0225 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 21 : perl-XML-LibXML-2.0119-1.fc21 (2015-7115)

Security fix for Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Unix / Linux - Local Users Information : Passwords Never Expire

Using the supplied credentials, Nessus was able to list local users that are enabled and whose passwords never expire. TRUSTED...

Fedora 21 : curl-7.37.0-14.fc21 (2015-6728)

require credentials to match for NTLM re-use CVE-2015-3143 - fix invalid write with a zero-length host name in URL CVE-2015-3144 - fix invalid write in cookie path sanitization code CVE-2015-3145 - close Negotiate connections when done CVE-2015-3148 Note that Tenable Network Security has...

Fedora 20 : qt3-3.3.8b-63.fc20 (2015-6573)

This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service application crash and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. Please note that Qt 3 is NOT...

Fedora 22 : kernel-4.0.1-300.fc22 (2015-7371)

The 4.0.1 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...