🟡 Medium ⏱ 10–30 min Last verified: 12 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1467-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3641 Upstream summary: The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from […]
🟡 Medium ⏱ 10–30 min Last verified: 10 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-3466 Upstream summary: GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a […]
🟢 Low ⏱ 5–15 min Last verified: 5 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2338-1 Related CVEs: CVE-2014-5461 Upstream summary: It was discovered that Lua incorrectly handled certain vararg functions with a large number of fixed parameters. An attacker could use this issue to […]
🟡 Medium ⏱ 10–30 min Last verified: 5 November 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory TID7009193 (see also SUSE bugzilla) Related CVEs: CVE-2011-2729 Upstream summary: native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 […]
🟡 Medium ⏱ 10–30 min Last verified: 30 October 2014 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:014 (see also SUSE bugzilla) Related CVEs: CVE-2010-2494 CVE-2012-5468 Upstream summary: Multiple buffer underflows in the base64 decoder in base64.c in (1) bogofilter and (2) bogolexer in bogofilter before 1.2.2 allow remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2438-1 Related CVEs: CVE-2014-8091 CVE-2014-8098 CVE-2014-8298 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X […]
🟢 Low ⏱ 5–15 min Last verified: 12 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2461-1 Related CVEs: CVE-2014-9130 Upstream summary: Stanisław Pitucha and Jonathan Gray discovered that LibYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger […]
🟢 Low ⏱ 5–15 min Last verified: 4 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]
🟢 Low ⏱ 5–15 min Last verified: 21 September 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2945-1 Related CVEs: https://launchpad.net/bugs/1565000 Upstream summary: It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's certificate, […]
🟢 Low ⏱ 10–30 min Last verified: 10 September 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3566, IBM Support Bulletin CVE: CVE-2014-3566 NVD summary: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for […]
