909 matches found
SuSE 11.3 Security Update : Samba (SAT Patch Number 10321)
Samba has been updated to fix one security issue : - Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed :. CVE-2015-0240 - Realign the winbind request structure following requiremembershipof field expansion. bnc913001 - Reuse...
SuSE 11.3 Security Update : php53 (SAT Patch Number 10313)
PHP 5.3 was updated to fix three security issues : - Use-after-free vulnerability allowed remote attackers to execute arbitrary code via a crafted unserialize call that leveraged improper handling of duplicate keys within the serialized properties of an object. bnc910659. CVE-2014-8142 -...
SuSE 11.3 Security Update : kvm and libvirt (SAT Patch Number 10222)
This collective update for KVM and libvirt provides fixes for security and non-security issues. kvm : - Fix NULL pointer dereference because of uninitialized UDP socket. bsc897654, CVE-2014-3640 - Fix performance degradation after migration. bsc878350 - Fix potential image corruption due to missi...
SuSE 11.3 Security Update : kvm and libvirt (SAT Patch Number 10222)
This collective update for KVM and libvirt provides fixes for security and non-security issues. kvm : - Fix NULL pointer dereference because of uninitialized UDP socket. bsc897654, CVE-2014-3640 - Fix performance degradation after migration. bsc878350 - Fix potential image corruption due to missi...
SuSE 11.3 Security Update : java-1_7_0-ibm (SAT Patch Number 10300)
java-170-ibm was updated to fix two security issues : - Unspecified vulnerability. CVE-2014-8891 - Unspecified vulnerability. CVE-2014-8892 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...
SuSE 11.3 Security Update : java-1_6_0-ibm (SAT Patch Number 10299)
java-160-ibm was updated to fix two security issues : - Unspecified vulnerability. CVE-2014-8891 - Unspecified vulnerability. CVE-2014-8892 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...
SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 10286)
java-170-openjdk was updated to fix 19 security issues. Details are available at http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tmlAppendixJAVA %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
SuSE 11.3 Security Update : clamav (SAT Patch Number 10283)
clamav was updated to version 0.98.6 to fix four security issues. These security issues have been fixed : - ClamAV allowed remote attackers to have unspecified impact via a crafted upx packer file, related to a heap out of bounds condition. bnc916214. CVE-2015-1462 - ClamAV allowed remote attacke...
SuSE 11.3 Security Update : jasper (SAT Patch Number 10261)
This update for jasper fixes the following security issues : - Double free in jasiccattrvaldestroy. Double call to free allowed attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. bsc909474. CVE-2014-8137 - Heap overflow in jasdecode. This could b...
SuSE 11.3 Security Update : ntp (SAT Patch Number 10293)
ntp has been updated to fix four security issues : - ntp-keygen used a weak RNG seed, which made it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. bsc910764. CVE-2014-9294 - The configauth function, when an auth key is not configured, improperl...
SuSE 11.3 Security Update : krb5 (SAT Patch Number 10282)
krb5 has been updated to fix four security issues : - gssprocesscontexttoken incorrectly frees context bsc912002. CVE-2014-5352 - kadmind doubly frees partial deserialization results bsc912002. CVE-2014-9421 - kadmind incorrectly validates server principal name bsc912002. CVE-2014-9422 - libgssrp...
SuSE 11.3 Security Update : glibc (SAT Patch Number 10259)
glibc has been updated to fix security issues and bugs : - Fix crashes on invalid input in IBM gconv modules. CVE-2014-6040 / CVE-2012-6656, bsc894553, bsc894556, GLIBC BZ 17325, GLIBC BZ 14134 - Avoid infinite loop in nssdns getnetbyname. CVE-2014-9402 - Don't touch user-controlled stdio locks i...
SuSE 11.3 Security Update : flash-player, flash-player-gnome, flash-player-kde4 (SAT Patch Number 10287)
flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution CVE-2015-0313 / CVE-2015-0315 / CVE-2015-0320 / CVE-2015-0322. - Memory corruption vulnerabilities that could lead to co...
SuSE 11.3 Security Update : libmpfr (SAT Patch Number 10212)
This update for libmpfr fixes a buffer overflow in mpfrstrtofr. CVE-2014-9474 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...
SuSE 11.3 Security Update : libjasper (SAT Patch Number 10072)
This update for libjasper fixes multiple off-by-one errors which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow triggered by a crafted jp2 JPEG 2000 file. bsc906364, CVE-2014-9029 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 10150)
OpenSSL has been updated to fix various security issues. More information can be found in the OpenSSL advisory: http://openssl.org/news/secadv20150108.txt . The following issues have been fixed : - Bignum squaring BNsqr may produce incorrect results on some platforms, including x8664. bsc912296...
SuSE 11.3 Security Update : compat-openssl097g (SAT Patch Number 10208)
OpenSSL compat-openssl097g has been updated to fix various security issues. More information can be found in the openssl advisory: http://openssl.org/news/secadv20150108.txt . The following issues have been fixed : - Bignum squaring BNsqr may have produced incorrect results on some platforms,...
SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10225)
Mozilla Firefox has been updated to the 31.4.0ESR release, fixing bugs and security issues. Mozilla NSS has been updated to 3.17.3, fixing a security issue and updating the root certificate list. For more information, please see https://www.mozilla.org/en-US/security/advisories/ %NASLMINLEVEL 703...
SuSE 11.3 Security Update : curl (SAT Patch Number 10166)
This update fixes the following security issues : - URL request injection bnc911363 When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. CVE-2014-8150 If the given URL contains line feeds and carriage returns those will be sent alo...
SuSE 11.3 Security Update : flash-player (SAT Patch Number 10226)
Adobe Flash Player was updated to version 11.2.202.440 bsc914463, APSA15-01, CVE-2015-0311. More information can be found at https://helpx.adobe.com/security/products/flash-player/apsa15-01.html . An update of flashplayer executable binary for i386 is currently not available and was thus disabled...