SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9915)

This OpenSSL update fixes the following issues : - Session Ticket Memory Leak. CVE-2014-3567 - Build option no-ssl3 is incomplete. CVE-2014-3568 - Add support for TLSFALLBACKSCSV to mitigate CVE-2014-3566 POODLE %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.3 Security Update : wget (SAT Patch Number 9933)

wget has been updated to fix one security issue and two non-security issues. This security issue has been fixed : - FTP symlink arbitrary filesystem access CVE-2014-4877. These non-security issues have been fixed : - Fix displaying of download time. bnc901276 - Fix 0 size FTP downloads after...

SuSE 11.3 Security Update : nagios-plugins (SAT Patch Number 9830)

This security update fixes the following issues : - Removed the requirement for root access from plugins-root/checkicmp.c and plugins-root/checkicmp.c. The necessary capabilities7 were added to the README file. - Fixed array out of bounds issue in plugins-root/checkdhcp.c. %NASLMINLEVEL 70300 C...

SuSE 11.3 Security Update : perl (SAT Patch Number 9858)

This update fixes a memory leak and an infinite recursion in Data::Dumper. CVE-2014-4330 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11.3 Security Update : Linux kernel (SAT Patch Number 9750)

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed : - The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data...

SuSE 11.3 Security Update : rsyslog (SAT Patch Number 9840)

rsyslog has been updated to fix a remote denial of service issue : - Under certain configurations, a local or remote attacker able to send syslog messages to the server could have crashed the log server due to an array overread. CVE-2014-3634 / CVE-2014-3683 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : libevent (SAT Patch Number 9824)

This update fixes a buffer overflow in the buffered event handling in libevent. CVE-2014-6272 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11.3 Security Update : python-lxml (SAT Patch Number 9821)

This security update for python-lxml fixes a input sanitization flaw in cleanhtml. CVE-2014-3146 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. ...

SuSE 11.3 Security Update : kvm (SAT Patch Number 9739)

kvm has been updated to fix issues in the embedded qemu : - An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could have used this flaw to corrupt QEMU process memory on the host, which coul...

SuSE 11.3 Security Update : mozilla-nss (SAT Patch Number 9777)

Mozilla NSS was updated to version 3.16.5 to fix a RSA certificate forgery issue. - Antoine Delignat-Lavaud, security researcher at Inria Paris in team Prosecco, reported an issue in Network Security Services NSS libraries affecting all versions. He discovered that NSS is vulnerable to a variant ...

SuSE 11.3 Security Update : bash (SAT Patch Number 9780)

The command-line shell 'bash' evaluates environment variables, which allows the injection of characters and might be used to access files on the system in some circumstances. CVE-2014-7169 Please note that this issue is different from a previously fixed vulnerability tracked under CVE-2014-6271 a...

SuSE 11.3 Security Update : dbus-1 (SAT Patch Number 9733)

Various denial of service issues were fixed in the DBUS service. - dbus-daemon tracks whether method call messages expect a reply, so that unsolicited replies can be dropped. As currently implemented, if there are n parallel method calls in progress, each method reply takes On CPU time. A malicio...

SuSE 11.3 Security Update : php53 (SAT Patch Number 9718)

This php53 update fixes the following security issues : - Insecure temporary file used for cache data was fixed by switching to a different root only directory /var/cache/php-pear. CVE-2014-5459 - An incomplete fix for CVE-2014-4049. CVE-2014-3597 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9729)

Squid3 was updated to fix a denial of service in Range Header processing, which would have allowed proxy users to crash the squid proxy process. CVE-2014-3609 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 9704)

Adobe Flash Player has been updated to 11.2.202.406 which fixes various security issues. These updates : - resolve a memory leakage vulnerability that could have been used to bypass memory address randomization. CVE-2014-0557 - resolve a security bypass vulnerability. CVE-2014-0554 - resolve a...

SuSE 11.3 Security Update : kdelibs4 (SAT Patch Number 9676)

This update of the kdelibs4 KSSL interface makes it select a set of default ciphers that is recommended for current usage. This update is needed for Konqueror to restrict its cipher set when using https. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

SuSE 11.3 Security Update : libqt4 (SAT Patch Number 9683)

This update of the QT4 QSSL interface makes it select a set of default ciphers that is recommended for current usage. This update is needed for Konqueror to restrict its cipher set when using https. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9687)

Mozilla Firefox was updated to the 24.8.0ESR release, fixing security issues and bugs. Only some of the published security advisories affect the Mozilla Firefox 24ESR codestream : - Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layou...

SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9679)

This update for net-snmp fixes a remote denial of service problem inside snmptrapd when it is started with the '-OQ' option. CVE-2014-3565, bnc894361 Additionally, a timeout issue during SNMP MIB walk on OID 1.3.6.1.2.1.4.24 when using newer v5.5+ versions of snmpwalk has been fixed. bnc865222...

SuSE 11.3 Security Update : ppp (SAT Patch Number 9648)

This ppp update fixes a potential security issue that an unprivileged attacker could access privileged options : - integer overflow in option parsing CVE-2014-3158, bnc891489 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...