openSUSE 安全性更新:pidgin / pidgin-branding-openSUSE (openSUSE-SU-2014:0239-1)

high Nessus Plugin ID 75256

概要

遠端 openSUSE 主機缺少安全性更新。

說明

- 2.10.8 版的更新 (bnc#861019):

+ 一般:Python build 指令碼和範例外掛程式現在與 Python 3 相容 (pidgin.im#15624)。

+ libpurple:

- 修正 libpurple 嘗試從 STUN 伺服器讀取回覆時如若出現錯誤,可能造成的損毀情形 (CVE-2013-6484)。

- 修正剖析格式錯誤的 HTTP 回應時,可能造成損毀情形 (CVE-2013-6479)。

- 修正使用區塊傳輸編碼剖析格式錯誤的 HTTP 回應時所出現的緩衝區溢位問題 (CVE-2013-6485)。

- 使用負 Content-Length 更妥善地處理 HTTP Proxy 回應。

- 修正使用 libnss 對不含主體之 SSL 憑證的處理。

- 修正在遙遠的未來使用 libnss 時,對含時間戳記之 SSL 憑證的處理 (pidgin.im#15586)。

- 針對所有 HTTP 擷取,強制執行下載大小上限。

+ Pidgin:

- 修正顯示長 URL 的工具提示時所出現的損毀情形 (CVE-2013-6478)。

- 更妥善地處理長度超過 1000 個字母的 URL。

- 修正笑臉符號主題中對多位元組 UTF-8 字元的處理 (pidgin.im#15756)。

+ AIM:修正不受信任的憑證錯誤。

+ AIM 和 ICQ:修正在 Direct IM 工作階段中收到格式錯誤的訊息時可能發生的損毀情形。

+ Gadu-Gadu:

- 修正遠端程式碼執行可能的緩衝區溢位情形。僅可透過 Gadu-Gadu 伺服器或攔截式攻擊觸發 (CVE-2013-6487)。

- 已停用從伺服器匯入或匯出至伺服器的好友清單。

- 已停用新帳戶註冊與密碼變更選項。

+ IRC:

- 修正惡意伺服器或攔截式攻擊因為未與多種訊息一起傳送足夠的引數而可能觸發損毀的錯誤 (CVE-2014-0020)。

- 修正未正確設定 IRC 初始狀態的錯誤。

- 修正使用 Cyrus SASL 支援編譯 libpurple 時無法使用 IRC 的錯誤 (pidgin.im#15517)。

+ MSN:

- 修正 MSN 中剖析標頭時的 NULL 指標解除參照 (CVE-2013-6482)。

- 修正 MSN 中剖析 OIM 資料時的 NULL 指標解除參照 (CVE-2013-6482)。

- 修正 MSN 中剖析 SOAP 資料時的 NULL 指標解除參照 (CVE-2013-6482)。

- 修正傳送非常長的訊息時可能的損毀情形。無法從遠端觸發。

+ MXit:

- 修正遠端程式碼執行可能的緩衝區溢位情形 (CVE-2013-6487)。

- 修正使用者中斷連線後可能發生的 sporadic 損毀情形。

- 修正嘗試透過搜尋結果新增連絡人時發生的損毀情形。

- 檔案傳輸失敗時,顯示錯誤訊息。

- 修正使用 InstantBird 編譯的問題。

- 修正某些自訂表情符號的顯示。

+ SILC:在白板工作階段中正確設定白板尺寸。

+ SIMPLE:修正遠端程式碼執行可能發生的緩衝區溢位情形 (CVE-2013-6487)。

+ XMPP:

- 驗證 iq 要求的「寄件者」位址是否符合「收件者」位址,藉以防止偽造 iq 回覆 (CVE-2013-6483)。

- 修正收到包含極端值的假延遲時間戳記時某些系統的當機情形 (CVE-2013-6477)。

- 修正針對自己的好友圖示選取非常小的檔案時可能的當機情形或其他錯誤的行為。

- 修正使用者嘗試起始包含無資源 JID 之語音/視訊工作階段時的當機情形。

- 修正在使用 Cyrus SASL 時,前兩個可用的驗證機制失敗、但後續機制則可正常運作的情況下,所發生的登入錯誤 (pidgin.im#15524)。

- 修正收到多個 HTTP 回應時,立即中斷 BOSH 連線之傳入 stanza 的問題 (pidgin.im#15684)。

+ Yahoo!:

- 修正處理非 UTF-8 的傳入字串時可能發生的損毀情形 (CVE-2012-6152)。

- 修正讀取遠端使用者可能觸發損毀之對等式訊息時出現的錯誤 (CVE-2013-6481)。

+ 外掛程式:

- 修正連絡人可用性外掛程式中的損毀情形。

- 修正 perl 函式 Purple::Network::ip_atoi。

- 新增 Unity 整合外掛程式。

+ Windows 專屬修正:(CVE-2013-6486、pidgin.im#15520、pidgin.im#15521、bgo#668154)。

- 放置 pidgin-irc-sasl.patch,已修正上游。

- 淘汰 pidgin-facebookchat:此套件不再進行維護,而且 pidgin 成為 Facebook Chat 的內建支援。

- 使用 with_mono 巨集保護 mono-devel 的 buildrequires。

- 新增 pidgin-gstreamer1.patch:GStreamer 1.0 的連接埠。只在 openSUSE 13.1 和更新版本上啟用。

- 在 openSUSE 13.1 和更新版本上,使用 gstreamer-devel 和 gstreamer-plugins-base-devel BuildRequires。

解決方案

更新受影響的 pidgin / pidgin-branding-openSUSE 套件。

另請參閱

https://bugzilla.novell.com/show_bug.cgi?id=861019

https://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html

Plugin 詳細資訊

嚴重性: High

ID: 75256

檔案名稱: openSUSE-2014-132.nasl

版本: 1.5

類型: local

代理程式: unix

已發布: 2014/6/13

已更新: 2021/1/19

支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

風險資訊

VPR

風險因素: Medium

分數: 5.9

CVSS v2

風險因素: High

基本分數: 9.3

時間分數: 6.9

媒介: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

弱點資訊

CPE: p-cpe:/a:novell:opensuse:mozillafirefox-branding-basedonopensuse, p-cpe:/a:novell:opensuse:packagekit-branding-basedonopensuse, p-cpe:/a:novell:opensuse:awesome-branding-basedonopensuse, p-cpe:/a:novell:opensuse:bot-sentry-debugsource, p-cpe:/a:novell:opensuse:branding-basedonopensuse, p-cpe:/a:novell:opensuse:compiz-branding-basedonopensuse, p-cpe:/a:novell:opensuse:dynamic-wallpaper-branding-basedonopensuse, p-cpe:/a:novell:opensuse:e17-branding-basedonopensuse, p-cpe:/a:novell:opensuse:epiphany-branding-basedonopensuse, p-cpe:/a:novell:opensuse:fcitx-branding-basedonopensuse, p-cpe:/a:novell:opensuse:finch, p-cpe:/a:novell:opensuse:finch-debuginfo, p-cpe:/a:novell:opensuse:finch-devel, p-cpe:/a:novell:opensuse:gcin-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gconf2-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gdm-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gfxboot-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gio-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gnome-menus-branding-basedonopensuse, p-cpe:/a:novell:opensuse:grub2-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gtk2-branding-basedonopensuse, p-cpe:/a:novell:opensuse:gtk3-branding-basedonopensuse, p-cpe:/a:novell:opensuse:hicolor-icon-theme-branding-basedonopensuse, p-cpe:/a:novell:opensuse:install-initrd-branding-basedonopensuse, p-cpe:/a:novell:opensuse:kdebase3-suse-branding-basedonopensuse, p-cpe:/a:novell:opensuse:kdebase4-runtime-branding-basedonopensuse, p-cpe:/a:novell:opensuse:kdebase4-workspace-branding-basedonopensuse, p-cpe:/a:novell:opensuse:kdelibs4-branding-basedonopensuse, p-cpe:/a:novell:opensuse:kdm-branding-basedonopensuse, p-cpe:/a:novell:opensuse:ksplash-qml-branding-basedonopensuse, p-cpe:/a:novell:opensuse:ksplashx-branding-basedonopensuse, p-cpe:/a:novell:opensuse:leechcraft, p-cpe:/a:novell:opensuse:leechcraft-advancednotifications, p-cpe:/a:novell:opensuse:leechcraft-advancednotifications-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-aggregator, p-cpe:/a:novell:opensuse:leechcraft-aggregator-bodyfetch, p-cpe:/a:novell:opensuse:leechcraft-aggregator-bodyfetch-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-aggregator-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-anhero, p-cpe:/a:novell:opensuse:leechcraft-anhero-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-auscrie, p-cpe:/a:novell:opensuse:leechcraft-auscrie-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth, p-cpe:/a:novell:opensuse:leechcraft-azoth-acetamide, p-cpe:/a:novell:opensuse:leechcraft-azoth-acetamide-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-adiumstyles, p-cpe:/a:novell:opensuse:leechcraft-azoth-adiumstyles-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-autoidler, p-cpe:/a:novell:opensuse:leechcraft-azoth-autoidler-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-autopaste, p-cpe:/a:novell:opensuse:leechcraft-azoth-autopaste-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-birthdaynotifier, p-cpe:/a:novell:opensuse:leechcraft-azoth-birthdaynotifier-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-chathistory, p-cpe:/a:novell:opensuse:leechcraft-azoth-chathistory-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-depester, p-cpe:/a:novell:opensuse:leechcraft-azoth-depester-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-embedmedia, p-cpe:/a:novell:opensuse:leechcraft-azoth-embedmedia-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-herbicide, p-cpe:/a:novell:opensuse:leechcraft-azoth-herbicide-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-hili, p-cpe:/a:novell:opensuse:leechcraft-azoth-hili-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-isterique, p-cpe:/a:novell:opensuse:leechcraft-azoth-isterique-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-juick, p-cpe:/a:novell:opensuse:leechcraft-azoth-juick-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-keeso, p-cpe:/a:novell:opensuse:leechcraft-azoth-keeso-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-lastseen, p-cpe:/a:novell:opensuse:leechcraft-azoth-lastseen-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-metacontacts, p-cpe:/a:novell:opensuse:leechcraft-azoth-metacontacts-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-modnok, p-cpe:/a:novell:opensuse:leechcraft-azoth-modnok-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-nativeemoticons, p-cpe:/a:novell:opensuse:leechcraft-azoth-nativeemoticons-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-otroid, p-cpe:/a:novell:opensuse:leechcraft-azoth-otroid-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-p100q, p-cpe:/a:novell:opensuse:leechcraft-azoth-p100q-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-rosenthal, p-cpe:/a:novell:opensuse:leechcraft-azoth-rosenthal-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-shx, p-cpe:/a:novell:opensuse:leechcraft-azoth-shx-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-standardstyles, p-cpe:/a:novell:opensuse:leechcraft-azoth-standardstyles-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-vader, p-cpe:/a:novell:opensuse:leechcraft-azoth-vader-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-velvetbird, p-cpe:/a:novell:opensuse:leechcraft-azoth-velvetbird-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-xoox, p-cpe:/a:novell:opensuse:leechcraft-azoth-xoox-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-xtazy, p-cpe:/a:novell:opensuse:leechcraft-azoth-xtazy-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-azoth-zheet, p-cpe:/a:novell:opensuse:leechcraft-azoth-zheet-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-bittorrent, p-cpe:/a:novell:opensuse:leechcraft-bittorrent-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-blogique, p-cpe:/a:novell:opensuse:leechcraft-blogique-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-blogique-hestia, p-cpe:/a:novell:opensuse:leechcraft-blogique-hestia-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-blogique-metida, p-cpe:/a:novell:opensuse:leechcraft-blogique-metida-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-choroid, p-cpe:/a:novell:opensuse:leechcraft-choroid-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-cstp, p-cpe:/a:novell:opensuse:leechcraft-cstp-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-dbusmanager, p-cpe:/a:novell:opensuse:leechcraft-dbusmanager-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-deadlyrics, p-cpe:/a:novell:opensuse:leechcraft-deadlyrics-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-debugsource, p-cpe:/a:novell:opensuse:leechcraft-devel, p-cpe:/a:novell:opensuse:leechcraft-dolozhee, p-cpe:/a:novell:opensuse:leechcraft-dolozhee-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-dumbeep, p-cpe:/a:novell:opensuse:leechcraft-dumbeep-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-gacts, p-cpe:/a:novell:opensuse:leechcraft-gacts-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-glance, p-cpe:/a:novell:opensuse:leechcraft-glance-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-gmailnotifier, p-cpe:/a:novell:opensuse:leechcraft-gmailnotifier-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-historyholder, p-cpe:/a:novell:opensuse:leechcraft-historyholder-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-hotsensors, p-cpe:/a:novell:opensuse:leechcraft-hotsensors-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-hotstreams, p-cpe:/a:novell:opensuse:leechcraft-hotstreams-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-kbswitch, p-cpe:/a:novell:opensuse:leechcraft-kbswitch-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-kinotify, p-cpe:/a:novell:opensuse:leechcraft-kinotify-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-knowhow, p-cpe:/a:novell:opensuse:leechcraft-knowhow-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lackman, p-cpe:/a:novell:opensuse:leechcraft-lackman-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lastfmscrobble, p-cpe:/a:novell:opensuse:leechcraft-lastfmscrobble-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-launchy, p-cpe:/a:novell:opensuse:leechcraft-launchy-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lemon, p-cpe:/a:novell:opensuse:leechcraft-lemon-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lhtr, p-cpe:/a:novell:opensuse:leechcraft-lhtr-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-liznoo, p-cpe:/a:novell:opensuse:leechcraft-liznoo-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lmp, p-cpe:/a:novell:opensuse:leechcraft-lmp-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lmp-dumbsync, p-cpe:/a:novell:opensuse:leechcraft-lmp-dumbsync-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lmp-graffiti, p-cpe:/a:novell:opensuse:leechcraft-lmp-graffiti-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-lmp-mp3tunes, p-cpe:/a:novell:opensuse:leechcraft-lmp-mp3tunes-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-monocle, p-cpe:/a:novell:opensuse:leechcraft-monocle-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-monocle-fxb, p-cpe:/a:novell:opensuse:leechcraft-monocle-fxb-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-monocle-mu, p-cpe:/a:novell:opensuse:leechcraft-monocle-mu-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-monocle-pdf, p-cpe:/a:novell:opensuse:leechcraft-monocle-pdf-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-monocle-postrus, p-cpe:/a:novell:opensuse:leechcraft-monocle-postrus-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-monocle-seen, p-cpe:/a:novell:opensuse:leechcraft-monocle-seen-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-musiczombie, p-cpe:/a:novell:opensuse:pidgin-otr-debuginfo, p-cpe:/a:novell:opensuse:pidgin-otr-debugsource, p-cpe:/a:novell:opensuse:pidgin-plugin-advanced-sound-notification, p-cpe:/a:novell:opensuse:pidgin-plugin-advanced-sound-notification-debuginfo, p-cpe:/a:novell:opensuse:pidgin-plugin-birthday-reminder, p-cpe:/a:novell:opensuse:pidgin-plugin-birthday-reminder-debuginfo, p-cpe:/a:novell:opensuse:pidgin-plugin-embeddedvideo, p-cpe:/a:novell:opensuse:pidgin-plugin-embeddedvideo-debuginfo, p-cpe:/a:novell:opensuse:pidgin-plugin-guifications, p-cpe:/a:novell:opensuse:pidgin-plugin-guifications-debuginfo, p-cpe:/a:novell:opensuse:pidgin-plugin-pack, p-cpe:/a:novell:opensuse:pidgin-plugin-pack-debuginfo, p-cpe:/a:novell:opensuse:pidgin-plugin-pack-extras, p-cpe:/a:novell:opensuse:pidgin-plugin-skype, p-cpe:/a:novell:opensuse:pidgin-sipe, p-cpe:/a:novell:opensuse:pidgin-sipe-debugsource, p-cpe:/a:novell:opensuse:plymouth-branding-basedonopensuse, p-cpe:/a:novell:opensuse:purple-plugin-pack-debugsource, p-cpe:/a:novell:opensuse:purple-plugin-pack-lang, p-cpe:/a:novell:opensuse:skype4pidgin-debugsource, p-cpe:/a:novell:opensuse:splashy-branding-basedonopensuse, p-cpe:/a:novell:opensuse:susegreeter-branding-basedonopensuse, p-cpe:/a:novell:opensuse:systemd-presets-branding-basedonopensuse, p-cpe:/a:novell:opensuse:telepathy-haze, p-cpe:/a:novell:opensuse:telepathy-haze-debuginfo, p-cpe:/a:novell:opensuse:telepathy-haze-debugsource, p-cpe:/a:novell:opensuse:telepathy-plugin-sipe, p-cpe:/a:novell:opensuse:telepathy-plugin-sipe-debuginfo, p-cpe:/a:novell:opensuse:thunar-volman-branding-basedonopensuse, p-cpe:/a:novell:opensuse:wallpaper-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfce4-notifyd-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfce4-panel-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfce4-session-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfce4-settings-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfce4-splash-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfdesktop-branding-basedonopensuse, p-cpe:/a:novell:opensuse:xfwm4-branding-basedonopensuse, p-cpe:/a:novell:opensuse:yast2-branding-basedonopensuse, p-cpe:/a:novell:opensuse:yast2-qt-branding-basedonopensuse, cpe:/o:novell:opensuse:12.3, cpe:/o:novell:opensuse:13.1, p-cpe:/a:novell:opensuse:leechcraft-musiczombie-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-netstoremanager, p-cpe:/a:novell:opensuse:leechcraft-netstoremanager-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-netstoremanager-googledrive, p-cpe:/a:novell:opensuse:leechcraft-netstoremanager-googledrive-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-networkmonitor, p-cpe:/a:novell:opensuse:leechcraft-networkmonitor-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-newlife, p-cpe:/a:novell:opensuse:leechcraft-newlife-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-otlozhu, p-cpe:/a:novell:opensuse:leechcraft-otlozhu-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-pintab, p-cpe:/a:novell:opensuse:leechcraft-pintab-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-pogooglue, p-cpe:/a:novell:opensuse:leechcraft-pogooglue-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-popishu, p-cpe:/a:novell:opensuse:leechcraft-popishu-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku, p-cpe:/a:novell:opensuse:leechcraft-poshuku-autosearch, p-cpe:/a:novell:opensuse:leechcraft-poshuku-autosearch-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-cleanweb, p-cpe:/a:novell:opensuse:leechcraft-poshuku-cleanweb-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-fatape, p-cpe:/a:novell:opensuse:leechcraft-poshuku-fatape-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-filescheme, p-cpe:/a:novell:opensuse:leechcraft-poshuku-filescheme-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-fua, p-cpe:/a:novell:opensuse:leechcraft-poshuku-fua-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-keywords, p-cpe:/a:novell:opensuse:leechcraft-poshuku-keywords-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-onlinebookmarks, p-cpe:/a:novell:opensuse:leechcraft-poshuku-onlinebookmarks-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-onlinebookmarks-delicious, p-cpe:/a:novell:opensuse:leechcraft-poshuku-onlinebookmarks-delicious-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-poshuku-onlinebookmarks-readitlater, p-cpe:/a:novell:opensuse:leechcraft-poshuku-onlinebookmarks-readitlater-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-sb2, p-cpe:/a:novell:opensuse:leechcraft-sb2-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-secman, p-cpe:/a:novell:opensuse:leechcraft-secman-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-secman-simplestorage, p-cpe:/a:novell:opensuse:leechcraft-secman-simplestorage-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-seekthru, p-cpe:/a:novell:opensuse:leechcraft-seekthru-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-shaitan, p-cpe:/a:novell:opensuse:leechcraft-shaitan-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-shellopen, p-cpe:/a:novell:opensuse:leechcraft-shellopen-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-summary, p-cpe:/a:novell:opensuse:leechcraft-summary-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-syncer, p-cpe:/a:novell:opensuse:leechcraft-syncer-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-tabsessionmanager, p-cpe:/a:novell:opensuse:leechcraft-tabsessionmanager-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-tabslist, p-cpe:/a:novell:opensuse:leechcraft-tabslist-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-touchstreams, p-cpe:/a:novell:opensuse:leechcraft-touchstreams-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-tpi, p-cpe:/a:novell:opensuse:leechcraft-tpi-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-vgrabber, p-cpe:/a:novell:opensuse:leechcraft-vgrabber-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-vrooby, p-cpe:/a:novell:opensuse:leechcraft-vrooby-debuginfo, p-cpe:/a:novell:opensuse:leechcraft-xproxy, p-cpe:/a:novell:opensuse:leechcraft-xproxy-debuginfo, p-cpe:/a:novell:opensuse:libexo-1-0-branding-basedonopensuse, p-cpe:/a:novell:opensuse:libgarcon-branding-basedonopensuse, p-cpe:/a:novell:opensuse:libpurple, p-cpe:/a:novell:opensuse:libpurple-branding-basedonopensuse, p-cpe:/a:novell:opensuse:libpurple-branding-opensuse, p-cpe:/a:novell:opensuse:libpurple-branding-upstream, p-cpe:/a:novell:opensuse:libpurple-debuginfo, p-cpe:/a:novell:opensuse:libpurple-devel, p-cpe:/a:novell:opensuse:libpurple-lang, p-cpe:/a:novell:opensuse:libpurple-meanwhile, p-cpe:/a:novell:opensuse:libpurple-meanwhile-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-bot-sentry, p-cpe:/a:novell:opensuse:libpurple-plugin-bot-sentry-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-bot-sentry-lang, p-cpe:/a:novell:opensuse:libpurple-plugin-facebookchat, p-cpe:/a:novell:opensuse:libpurple-plugin-facebookchat-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-mrim, p-cpe:/a:novell:opensuse:libpurple-plugin-mrim-lang, p-cpe:/a:novell:opensuse:libpurple-plugin-openfetion, p-cpe:/a:novell:opensuse:libpurple-plugin-openfetion-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-openfetion-lang, p-cpe:/a:novell:opensuse:libpurple-plugin-pack, p-cpe:/a:novell:opensuse:libpurple-plugin-pack-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-pack-extras, p-cpe:/a:novell:opensuse:libpurple-plugin-pack-extras-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-sipe, p-cpe:/a:novell:opensuse:libpurple-plugin-sipe-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-skype, p-cpe:/a:novell:opensuse:libpurple-plugin-skype-debuginfo, p-cpe:/a:novell:opensuse:libpurple-plugin-skype-lang, p-cpe:/a:novell:opensuse:libpurple-tcl, p-cpe:/a:novell:opensuse:libpurple-tcl-debuginfo, p-cpe:/a:novell:opensuse:libreoffice-branding-basedonopensuse, p-cpe:/a:novell:opensuse:libsocialweb-branding-basedonopensuse, p-cpe:/a:novell:opensuse:libxfce4ui-branding-basedonopensuse, p-cpe:/a:novell:opensuse:lightdm-gtk-greeter-branding-basedonopensuse, p-cpe:/a:novell:opensuse:lxde-common-branding-basedonopensuse, p-cpe:/a:novell:opensuse:midori-branding-basedonopensuse, p-cpe:/a:novell:opensuse:pidgin, p-cpe:/a:novell:opensuse:pidgin-advanced-sound-notification-debugsource, p-cpe:/a:novell:opensuse:pidgin-advanced-sound-notification-lang, p-cpe:/a:novell:opensuse:pidgin-birthday-reminder-debugsource, p-cpe:/a:novell:opensuse:pidgin-birthday-reminder-lang, p-cpe:/a:novell:opensuse:pidgin-debuginfo, p-cpe:/a:novell:opensuse:pidgin-debugsource, p-cpe:/a:novell:opensuse:pidgin-devel, p-cpe:/a:novell:opensuse:pidgin-embeddedvideo-debugsource, p-cpe:/a:novell:opensuse:pidgin-facebookchat, p-cpe:/a:novell:opensuse:pidgin-facebookchat-debugsource, p-cpe:/a:novell:opensuse:pidgin-guifications-debugsource, p-cpe:/a:novell:opensuse:pidgin-guifications-lang, p-cpe:/a:novell:opensuse:pidgin-mrim, p-cpe:/a:novell:opensuse:pidgin-openfetion, p-cpe:/a:novell:opensuse:pidgin-openfetion-debugsource, p-cpe:/a:novell:opensuse:pidgin-otr

必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

可輕鬆利用: No known exploits are available

修補程式發佈日期: 2014/2/17

參考資訊

CVE: CVE-2012-6152, CVE-2013-6477, CVE-2013-6478, CVE-2013-6479, CVE-2013-6481, CVE-2013-6482, CVE-2013-6483, CVE-2013-6484, CVE-2013-6485, CVE-2013-6486, CVE-2013-6487, CVE-2014-0020

BID: 65188, 65189, 65243, 65492