792 matches found
SUSE SLES11 Security Update : vim (SUSE-SU-2016:2938-1)
This update for vim fixes the following security issues : - Fixed CVE-2016-1248, an arbitrary command execution vulnerability bsc1010685 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...
SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:2399-1)
The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...
SUSE SLES11 Security Update : squid (SUSE-SU-2016:2147-1)
This update for squid fixes the following issues : - CVE-2016-4051: backport fix buffer overflow in cachemgr.cgi bsc976553 - CVE-2016-4554: backport fix for header smuggling issue in HTTP Request processing bsc979010 Note that Tenable Network Security has extracted the preceding description block...
SUSE SLED12 Security Update : gimp (SUSE-SU-2016:1962-1)
gimp was updated to fix one security issue. This security issue was fixed : - CVE-2016-4994: Use-after-free vulnerabilities in the channel and layer properties parsing process bsc986021. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...
SUSE SLES11 Security Update : SUSE Manager Client Tools (SUSE-SU-2016:1366-1)
This update for SUSE Manager Client Tools provides the following fixes and enhancements : rhnlib : - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo : - Fix file permissions bsc970550 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
SUSE SLES12 Security Update : Recommended update for git (SUSE-SU-2015:2325-1)
The git package was updated to fix the following security issue : - CVE-2015-7545: Fix remote code execution with recursive fetch of submodules bsc948969. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempt...
SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:2294-1)
The krb5 package was updated to fix the following security and non security issues : - CVE-2015-2695: Fixed missing functions that were still vulnerable bsc954270. - Fixed a memory leak in the handling of error messages bsc954470. Note that Tenable Network Security has extracted the preceding...
SUSE SLES11 Security Update : bind (SUSE-SU-2015:1496-1)
The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...
SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1480-1)
The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...
SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2015:1481-1)
The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...
SUSE SLED11 / SLES11 Security Update : MySQL (SUSE-SU-2015:1177-1) (Logjam)
This update fixes the following security issue : Logjam Attack: MySQL uses 512 bit dh groups in SSL bnc934789 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as mu...
SUSE SLED11 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2015:0921-1)
gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and form...
SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:0805-1)
cups-filters was updated to fix one security issue. This security issue was fixed : - CVE-2015-2265: Remote command execution in removebadchars bnc921753. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding...
SUSE SLED12 / SLES12 Security Update : python, python-base, python-doc (SUSE-SU-2014:1511-1)
python, python-base, python-doc was updated to fix one security issue. This security issue was fixed : - Fixed potential buffer overflow in buffer CVE-2014-7185. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
SUSE SLED11 / SLES11 Security Update : libfreebl3 (SUSE-SU-2013:1920-1)
Mozilla NSS has been updated to the 3.15.3.1 security release. The update blacklists an intermediate CA that was abused to create man in the middle certificates. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2015:0012-1)
mutt was updated to fix one security issue. This security issue was fixed : - Heap-based buffer overflow in muttsubstrdup CVE-2014-9116. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block...
CVE-2013-1764
The Zypper aka zypp backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method...
Design/Logic Flaw
The Zypper aka zypp backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method...
