🟡 Medium ⏱ 10–30 min Last verified: 24 December 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1036-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-0262 CVE-2013-0263 CVE-2013-0269 CVE-2013-0276 CVE-2013-0277 Upstream summary: rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside […]
🟢 Low ⏱ 5–15 min Last verified: 17 December 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1329-1 (see also SUSE bugzilla) Related CVEs: CVE-2009-4029 Upstream summary: The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution […]
🟡 Medium ⏱ 10–30 min Last verified: 14 December 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1103-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1990 CVE-2013-1999 Upstream summary: Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer […]
🟢 Low ⏱ 5–15 min Last verified: 12 December 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2371-1 Related CVEs: CVE-2014-7204 Upstream summary: It was discovered that Exuberant Ctags incorrectly handled certain minified js files. An attacker could use this issue to possibly cause Exuberant Ctags to […]
🟡 Medium ⏱ 10–30 min Last verified: 12 December 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2014-4362 Upstream summary: The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID […]
🟢 Low ⏱ 5–15 min Last verified: 7 December 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-3177 Upstream summary: The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6105-2 Related CVEs: https://launchpad.net/bugs/ https://launchpad.net/bugs/XXXXXX https://launchpad.net/bugs/1944481 https://launchpad.net/bugs/1881533 https://launchpad.net/bugs/1719851 https://launchpad.net/bugs/1528645 https://launchpad.net/bugs/1423904 Upstream summary: USN-6105-1 updated ca-certificates. This provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3504 Upstream summary: The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL […]
🟡 Medium ⏱ 10–30 min Last verified: 30 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0403-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 Upstream summary: The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 23 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2008:027 (see also SUSE bugzilla) Related CVEs: CVE-2008-3825 CVE-2009-1384 Upstream summary: pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses incorrect privileges when […]
