Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
202
security advisoryupdateimportantopenSUSE 11.4: 2014:0379-1 Important Flash Player Security Fix
An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.. openSUSE Security Update: flash-player to 11.2.202.346 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0379-1 Rating: important References: #867808 Cross-References: CVE-2014-0503 CVE-2014-0504 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Adobe Flash Player was updated to version 11.2.202.346 to fix security issues: CVE-2014-0503: A vulnerability that could be used to bypass the same origin policy was fixed. CVE-2014-0504: A vulnerability that could be used to read the contents of the clipboard was fixed. More information can be found on: -08.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-33 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.346-99.1 flash-player-gnome-11.2.202.346-99.1 flash-player-kde4-11.2.202.346-99.1 References: https://www.suse.com/security/cve/CVE-2014-0503.html https://www.suse.com/security/cve/CVE-2014-0504.html . Critical patches addressing two major vulnerabilities in Flash Player have been released for openSUSE 11.4. Please make sure to update your system promptly.. Flash Player Update, openSUSE Security, Important Update. . Severity: Important. LinuxSecurity.com Team
Mar 15, 2014
•Important
OpenSUSE
98
security advisorysecurity updateremote accessRed Hat Enterprise Linux 6: RHSA-2013-0169-01 Moderate: Vino Access Risk
An updated vino package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: vino security update Advisory ID: RHSA-2013:0169-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0169.html Issue date: 2013-01-21 CVE Names: CVE-2011-0904 CVE-2011-0905 CVE-2011-1164 CVE-2011-1165 CVE-2012-4429 ==================================================================== 1. Summary: An updated vino package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: Vino is a Virtual Network Computing (VNC) server for GNOME. It allows remote users to connect to a running GNOME session using VNC. It was found that Vino transmitted all clipboard activity on the system running Vino to all clients connected to port 5900, even those who had not authenticated. A remote attacker who is able to access port 5900 on a system running Vino could use this flaw to read clipboard data without authenticating. (CVE-2012-4429) Two out-of-bounds memory read flaws were found in the way Vino processed client framebuffer requests in certain encodings. Anauthenticated client could use these flaws to send a specially-crafted request to Vino, causing it to crash. (CVE-2011-0904, CVE-2011-0905) In certain circumstances, the vino-preferences dialog box incorrectly indicated that Vino was only accessible from the local network. This could confuse a user into believing connections from external networks are not allowed (even when they are allowed). With this update, vino-preferences no longer displays connectivity and reachable information. (CVE-2011-1164) There was no warning that Universal Plug and Play (UPnP) was used to open ports on a user's network router when the "Configure network automatically to accept connections" option was enabled (it is disabled by default) in the Vino preferences. This update changes the option's description to avoid the risk of a UPnP router configuration change without the user's consent. (CVE-2011-1165) All Vino users should upgrade to this updated package, which contains backported patches to resolve these issues. The GNOME session must be restarted (log out, then log back in) for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 553477 - CVE-2011-1164 vino: vino-preferences incorrectly indicates that computer is only reachable over local network 678846 - CVE-2011-1165 vino-preferences does not warn about UPnP especially with no password and no confirmation. 694455 - CVE-2011-0904 vino: Out of bounds read flaw by processing certain client raw encoding framebuffer update requests 694456 - CVE-2011-0905 vino: Out of bounds read flaw by processing certain client tight encoding framebuffer update requests 857250 - CVE-2012-4429 vino: information leak and authentication bypass 6. Package List: Red HatEnterprise Linux Desktop (v. 6): Source: i386: vino-2.28.1-8.el6_3.i686.rpm vino-debuginfo-2.28.1-8.el6_3.i686.rpm x86_64: vino-2.28.1-8.el6_3.x86_64.rpm vino-debuginfo-2.28.1-8.el6_3.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: vino-2.28.1-8.el6_3.i686.rpm vino-debuginfo-2.28.1-8.el6_3.i686.rpm ppc64: vino-2.28.1-8.el6_3.ppc64.rpm vino-debuginfo-2.28.1-8.el6_3.ppc64.rpm s390x: vino-2.28.1-8.el6_3.s390x.rpm vino-debuginfo-2.28.1-8.el6_3.s390x.rpm x86_64: vino-2.28.1-8.el6_3.x86_64.rpm vino-debuginfo-2.28.1-8.el6_3.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: vino-2.28.1-8.el6_3.i686.rpm vino-debuginfo-2.28.1-8.el6_3.i686.rpm x86_64: vino-2.28.1-8.el6_3.x86_64.rpm vino-debuginfo-2.28.1-8.el6_3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2011-0904 https://access.redhat.com/security/cve/CVE-2011-0905 https://access.redhat.com/security/cve/CVE-2011-1164 https://access.redhat.com/security/cve/CVE-2011-1165 https://access.redhat.com/security/cve/CVE-2012-4429 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFQ/cQCXlSAg2UNWIIRAiBQAJ44hwOjZL72v7GmJ77EZFa2XyO27gCaAnqs vZl0XkPZPdvK3IQhWrFSdFI=sso5 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Jan 21, 2013
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!