🟢 Low ⏱ 5–15 min Last verified: 7 December 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3177 Upstream summary: The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6105-2 Related CVEs: https://launchpad.net/bugs/ https://launchpad.net/bugs/XXXXXX https://launchpad.net/bugs/1944481 https://launchpad.net/bugs/1881533 https://launchpad.net/bugs/1719851 https://launchpad.net/bugs/1528645 https://launchpad.net/bugs/1423904 Upstream summary: USN-6105-1 updated ca-certificates. This provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3504 Upstream summary: The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0403-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 Upstream summary: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 23 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2008:027 (see also SUSE bugzilla) Related CVEs: CVE-2008-3825 CVE-2009-1384 Upstream summary: pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when […]
🟡 Medium ⏱ 10–30 min Last verified: 21 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-9220 Upstream summary: SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the […]
🟡 Medium ⏱ 10–30 min Last verified: 17 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2438-1 Related CVEs: CVE-2014-8091 CVE-2014-8098 CVE-2014-8298 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X […]
🟡 Medium ⏱ 10–30 min Last verified: 14 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-2766 Upstream summary: The FCGI (aka Fast CGI) module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request […]
🟡 Medium ⏱ 10–30 min Last verified: 12 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1467-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3641 Upstream summary: The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from […]
🟡 Medium ⏱ 10–30 min Last verified: 10 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-3466 Upstream summary: GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a […]
Progressive Robot: Your Gateway to Comprehensive IT Solutions — Specializing in Web Development, Mobile App Development, and Expert IT Services.
© All Copyright by Progressiverobot.com
VAT Number ( 506152326 )
