SuSE 11.3 Security Update : OpenVPN (SAT Patch Number 10061)

This update fixes a critical denial of service vulnerability in OpenVPN : - Critical denial of service vulnerability in OpenVPN servers that can be triggered by authenticated attackers. Also an incompatibility with OpenVPN and OpenSSL in FIPS mode has been fixed. bnc895882. CVE-2014-8104...

PT-2014-8443 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3 Description: The issue allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset. This is relate...

SuSE 11.3 Security Update : clamav (SAT Patch Number 10016)

clamav was updated to version 0.98.5 to fix three security issues and several non-security issues. These security issues have been fixed : - Crash when scanning maliciously crafted yoda's crypter files. CVE-2013-6497 - Heap-based buffer overflow when scanning crypted PE files. CVE-2014-9050 - Cra...

SuSE 11.3 Security Update : flac (SAT Patch Number 10029)

flac was updated to fix two security issues : - Stack overflow may result in arbitrary code execution. CVE-2014-8962 - Heap overflow via specially crafted .flac files. CVE-2014-9028 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.3 Security Update : pure-ftpd (SAT Patch Number 10004)

pure-ftpd was updated to fix one security issue and two non-security bugs : - SSLv2 and SSLv3 have been disabled to avoid the attack named POODLE. CVE-2014-3566, bnc902229 - Added the disableascii option. bnc828469 - Fixed wait on TLS handshake. bnc856424 %NASLMINLEVEL 70300 C Tenable Network...

Sql injection

Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the 1 OPMBVNAME parameter in a Delete operation to the APMBVHandler servlet ...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10023)

The following vulnerability is fixed with this update : - hardening against a remote code execution flaw APSB14-26. bnc907257 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...

SuSE 11.3 Security Update : LibreOffice (SAT Patch Number 10001)

LibreOffice was updated to fix two security issues. These security issues have been fixed : - 'Document as E-mail' vulnerability. bnc900218 - Impress remote control use-after-free vulnerability. CVE-2014-3693 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.3 Security Update : IBM Java (SAT Patch Number 9999)

java-170-ibm has been updated to version 1.7.0sr7.2 to fix 21 security issues. These security issues have been fixed : - Unspecified vulnerability. CVE-2014-3065 - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier...

SuSE 11.3 Security Update : IBM Java (SAT Patch Number 9992)

java-160-ibm has been updated to version 1.6.0sr16.2 to fix 18 security issues. These security issues has been fixed : - Unspecified vulnerability in Oracle Java SE 6u81. CVE-2014-3065 - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding,...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 9968)

wireshark has been updated to version 1.10.11 to fix five security issues. These security issues have been fixed : - SigComp UDVM buffer overflow. CVE-2014-8710 - AMQP dissector crash. CVE-2014-8711 - NCP dissector crashes. CVE-2014-8712 / CVE-2014-8713 - TN5250 infinite loops CVE-2014-8714. This...

SuSE 11.3 Security Update : Python (SAT Patch Number 9996)

Python was updated to fix one security issue : - Potential wraparound/overflow in buffer CVE-2014-7185 As an additional hardening measure SSLv2 has been disabled. bnc901715 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

SuSE 11.3 Security Update : evolution-data-server (SAT Patch Number 9969)

evolution-data-server has been updated to disable support for SSLv3. This security issues has been fixed : - SSLv3 POODLE attack CVE-2014-3566 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.3 Security Update : file (SAT Patch Number 9982)

file was updated to fix one security issue. - An out-of-bounds read flaw file's donote function. This could possibly lead to file executable crash. CVE-2014-3710 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9972)

This version update of Mozilla Firefox to 31.2.0ESR brings improvements, stability fixes and also security fixes for the following CVEs : CVE-2014-1574 / CVE-2014-1575 / CVE-2014-1576 / CVE-2014-1577 / CVE-2014-1578 / CVE-2014-1581 / CVE-2014-1583 / CVE-2014-1585 / CVE-2014-1586 It also disables...

SuSE 11.3 Security Update : openwsman (SAT Patch Number 9902)

This update adds a configuration option to disable SSLv2 and SSLv3 in openwsman. This is required to mitigate CVE-2014-3566. To use the new option, edit /etc/openwsman/openwsman.conf and add the following line to the server section : ssldisabledprotocols = SSLv2 SSLv3 %NASLMINLEVEL 70300 C Tenabl...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 9958)

flash-player was updated to version 11.2.202.418 to fix 18 security issues : - Memory corruption vulnerabilities that could lead to code execution. CVE-2014-0576 / CVE-2014-0581 / CVE-2014-8440 / CVE-2014-8441 - Use-after-free vulnerabilities that could lead to code execution. CVE-2014-0573 /...

SuSE 11.3 Security Update : php53 (SAT Patch Number 9916)

This update fixes the following vulnerabilities in php : - Heap corruption issue in exifthumbnail. CVE-2014-3670 - Integer overflow in unserialize. CVE-2014-3669 - Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime. CVE-2014-3668 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11.3 Security Update : Java OpenJDK (SAT Patch Number 9906)

Oracle Critical Patch Update Advisory - October 2014 Description : A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.h tml %NASLMINLEVEL 70300 C Tenable...

SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9935)

This version update of Mozilla Firefox to 31.2.0ESR brings improvements, stability fixes and also security fixes for the following CVEs : CVE-2014-1574 / CVE-2014-1575 / CVE-2014-1576 / CVE-2014-1577 / CVE-2014-1578 / CVE-2014-1581 / CVE-2014-1583 / CVE-2014-1585 / CVE-2014-1586 It also disables...