SuSE 11.2 / 11.3 Security Update : CUPS (SAT Patch Numbers 8436 / 8437)

The following security issue has been fixed in the CUPS print daemon CVE-2012-5519: The patch adds better default protection against misuse of privileges by normal users who have been specifically allowed by root to do cupsd configuration changes The new ConfigurationChangeRestriction cupsd.conf...

SuSE 11.2 Security Update : libvirt (SAT Patch Number 8348)

This libvirt update fixes a security issue. - EMBARGOED: libvirt: Fix crash in remoteDispatchDomainMemoryStats. bnc838638: CVE-2013-4296 - Regression: vm-install fails to display on SLES 11 SP2 UV2000. bnc817008 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.2 / 11.3 Security Update : Python (SAT Patch Numbers 8404 / 8405)

This python update fixes a certificate hostname issue. - python: SSL module does not handle certificates that contain hostnames with NULL bytes. bnc834601: CVE-2013-4238 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.2 / 11.3 Security Update : gpg2 (SAT Patch Numbers 8426 / 8427)

This GnuPG update fixes two security issues : - GnuPG treated no-usage-permitted keys as all-usages-permitted. CVE-2013-4351 - An infinite recursion in the compressed packet parser was fixed. CVE-2013-4402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

SuSE 11.2 / 11.3 Security Update : kdelibs4 (SAT Patch Numbers 8401 / 8402)

This kdelibs4 update fixes several security issues related to khtml/konqueror. - Fix security issues and NULL pointer references in khtml/konqueror bnc787520 CVE-2012-4512 / CVE-2012-4513 / CVE-2012-4515 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

SuSE 11.2 / 11.3 Security Update : icedtea-web (SAT Patch Numbers 8357 / 8358)

This icedtea-web update adds a missing fix for an off-by-one heap-based buffer overflow. - icedtea-web 1.4.1 fixes the missing patch for CVE-2012-4540. bnc840572: CVE-2013-4349 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

SuSE 11.2 / 11.3 Security Update : coreutils (SAT Patch Numbers 8334 / 8336)

This coreutils update fixes three minor security issues : - VUL-1: CVE-2013-0221: segmentation fault in 'sort -d' and 'sort -M' with long line input. bnc798538 - VUL-1: CVE-2013-0222: segmentation fault in 'uniq' with long line input. bnc796243 - VUL-1: CVE-2013-0223: segmentation fault in 'join...

SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8318 / 8319)

This wireshark version update from 1.8.8 to 1.8.9 includes several security and general bug fixes. bnc831718 http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html - The Bluetooth SDP dissector could go into a large loop CVE-2013-4927 wnpa-sec-2013-45 - The DIS dissector could go into a larg...

SuSE 11.2 / 11.3 Security Update : tomcat6 (SAT Patch Numbers 8155 / 8156)

This update of tomcat6 fixes : - apache-tomcat-CVE-2012-3544.patch. bnc831119 - use chown --no-dereference to prevent symlink attacks on log bnc822177c7/prevents CVE-2013-1976 - Fix tomcat init scripts generating malformed classpath http://youtrack.jetbrains.com/issue/JT-18545 bnc804992 patch fro...

SuSE 11.2 Security Update : OpenSSH (SAT Patch Number 8078)

This update for OpenSSH provides the following fixes : - Implement remote denial of service hardening. bnc802639, CVE-2010-5107 - Use only FIPS 140-2 approved algorithms when FIPS mode is detected. bnc755505, bnc821039 - Do not link OpenSSH binaries with LDAP libraries. bnc826906 %NASLMINLEVEL...

SuSE 11.2 / 11.3 Security Update : Mozilla Firefox (SAT Patch Numbers 8187 / 8191)

This update to Firefox 17.0.8esr bnc833389 addresses : - bmo855331, bmo844088, bmo858060, bmo870200, bmo874974, bmo861530, bmo854157, bmo893684, bmo878703, bmo862185, bmo879139, bmo888107, bmo880734. MFSA 2013-63 / CVE-2013-1701 / CVE-2013-1702 Miscellaneous memory safety hazards have been fixed...

SuSE 11.2 / 11.3 Security Update : PHP5 (SAT Patch Numbers 8087 / 8088)

The following security issues have been fixed : - bnc828020:. CVE-2013-4635 - Integer overflow in SdnToJewish - bnc829207:. CVE-2013-4113 - heap corruption due to badly formed xml %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 8086)

The following security issues have been fixed : - bnc828020:. CVE-2013-4635 - Integer overflow in SdnToJewish - bnc807707:. CVE-2013-1635 / CVE-2013-1643 - reading system files via untrusted SOAP input - soap.wsdlcachedir function did not honour PHP openbasedir - bnc829207:. CVE-2013-4113 - heap...

SuSE 11.2 / 11.3 Security Update : bind (SAT Patch Numbers 8160 / 8161)

A specially crafted query with malicious rdata could have caused a crash DoS in named. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEV...

SuSE 11.2 / 11.3 Security Update : puppet / puppet, puppet-server (SAT Patch Numbers 8131 / 8132)

This puppet update fixes a remote code execution issue : - Unauthenticated Remote Code Execution Vulnerability with YAML and REST API calls bug825878, CVE-2013-3567 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE...

SuSE 11.2 Security Update : java-1_4_2-ibm (SAT Patch Number 8109)

IBM Java 1.4.2 was updated to SR13-FP18 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ Also the following bug has been fixed : - mark files in jre/bin and bin/ as executable bnc823034 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 Security Update : java-1_6_0-openjdk (SAT Patch Number 8084)

java-160-openjdk has been updated to Icedtea6-1.12.6 version. Security fixes : - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450:...

SuSE 11.2 Security Update : KVM (SAT Patch Number 7906)

This update fixes a file permission issue with qga the QEMU Guest Agent from the qemu/kvm package and includes several bug-fixes. bnc818182 CVE-2013-2007 bnc786813 bnc725008 bnc712137. bnc824340 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11.2 / 11.3 Security Update : nagios-nrpe, nagios-plugins-nrpe (SAT Patch Numbers 8032 / 8033)

Nagios NRPE was updated to add more blacklisting to avoid shell injection via nagios request packets. CVE-2013-1362 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8038 / 8039)

Adobe flash-player has been updated to version 11.2.202.291 ABSP13-17 which fixes bugs and security issues. This update fixes the following security issues : - a heap buffer overflow vulnerability that could have lead to code execution. CVE-2013-3344 - a memory corruption vulnerability that could...