openSUSE Security Update : vte (openSUSE-SU-2010:0404-1)

VTE was vulnerable to an old title set+query attack which could be used by remote attackers to execute arbitrary code CVE-2010-2713. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update vte-2729. T...

openSUSE Security Update : kernel (openSUSE-SU-2010:0655-1)

This update of the openSUSE 11.3 kernel fixes two local root exploits, various other security issues and some bugs. Following security issues are fixed by this update: CVE-2010-3301: Mismatch between 32bit and 64bit register usage in the system call entry path could be used by local attackers to...

openSUSE Security Update : libpcsclite1 (openSUSE-SU-2011:0092-1)

An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 and CVE-2010-4531 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9251)

This update fixes a NULL ptr dereference DoS via IDDERASN1DN ID payloads. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0602-1)

This wireshark update fixes : - Use of un-initialized variables CVE-2011-1590 - Buffer overflow in DECT dissector CVE-2011-1591 - Crash in NFS dissector on Windows CVE-2011-1592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : encfs (openSUSE-SU-2010:1028-1)

This update of encfs fixes : - CVE-2010-3073: CVSS v2 Base Score: 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues CWE-310: encfs Only 32 bit of file IV used - CVE-2010-3074: CVSS v2 Base Score: 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N: Cryptographic Issues CWE-310: encfs Watermarking attack The patch...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2011:1144-1)

OpenSSL's internal certificate verification routines could incorrectly accept a CRL whose nextUpdate field is in the past CVE-2011-3207. Server code for ECDH could crash if it received a specially crafted handshake message CVE-2011-3210. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : kernel (openSUSE-SU-2011:0861-1)

The openSUSE 11.3 kernel was updated to 2.6.34.10 to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or...

openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...

openSUSE Security Update : opera (openSUSE-SU-2011:0790-1)

opera 11.50 has been released, fixing numerous vulnerabilities. The full changelog is available at http://www.opera.com/docs/changelogs/unix/1150/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

openSUSE Security Update : libpcsclite1 (openSUSE-SU-2010:0500-1)

This update of pcsc-liste fixes two vulnerabilities : - CVE-2009-4901: local denial of service daemon crash via crafted SCARDSETATTRIB message data, a related issue to CVE-2010-0407. - CVE-2009-4902: a buffer overflow might allow local users to gain privileges via crafted SCARDCONTROL message dat...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 9203)

libvirt has been patched to fix two security issues. Further information is available at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0179 and http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6456 These security issues have been fixed : - Unsafe parsing of XML documents allows...

openSUSE Security Update : Kernel (openSUSE-SU-2010:0592-1)

This update of the openSUSE 11.3 kernel brings the kernel to version 2.6.34.4 and contains a lot of bug and security fixes CVE-2010-3110: Missing bounds checks in several ioctls of the Novell Client novfs /proc interface allowed unprivileged local users to crash the kernel or even execute code in...

openSUSE Security Update : ruby (openSUSE-SU-2011:0561-1)

Ruby was prone to several security issues : - a race condition allowed local users to delete arbitrary files CVE-2011-1004 - exception methods could bypass safe mode CVE-2011-1005 - webrick cross site scripting issue CVE-2010-0541 - memory corruption in the BigDecimal class CVE-2011-0188...

SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 9272)

xorg-x11-libs was patched to fix the following security issues : - Integer overflow of allocations in font metadata file parsing. CVE-2014-0209 - libxfont not validating length fields when parsing xfs protocol replies. CVE-2014-0210 - Integer overflows causing miscalculating memory needs for xfs...

SuSE 11.3 Security Update : MySQL (SAT Patch Number 9303)

MySQL was updated to version 5.5.37 to address various security issues. More information is available at http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tmlAppendixMSQL and http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.h tmlAppendixMSQL . %NASLMINLEVE...

SuSE 11.3 Security Update : glibc (SAT Patch Number 9262)

This update for the GNU Lib C fixes security issues, some bugs and introduces one new feature. The following security issues have been fixed : - Various potential stack overflows in getaddrinfo and others were fixed. bnc844309. CVE-2013-4357 - A stack frame overflow in getaddrinfo when called wit...

SuSE 11.3 Security Update : IBM Java 6 (SAT Patch Number 9256)

BM Java 6 was updated to version 6 SR16 to fix several security issues and various other bugs. More information can be found at: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.3 Security Update : IBM Java 7 (SAT Patch Number 9263)

IBM Java 7 was updated to version SR7, which received security and bug fixes. More information is available at: http://www.ibm.com/developerworks/java/jdk/aix/j764/Java764.fixes.htm lSR7 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

SuSE 11.3 Security Update : finch (SAT Patch Number 9213)

The pidgin Instant Messenger has been updated to fix various security issues : - Remotely triggerable crash in IRC argument parsing. CVE-2014-0020 - Buffer overflow in SIMPLE header parsing. CVE-2013-6490 - Buffer overflow in MXit emoticon parsing. CVE-2013-6489 - Buffer overflow in Gadu-Gadu HTT...