SuSE 11.3 Security Update : wireshark (SAT Patch Number 9060)

Wireshark was updated to version 1.8.13 to fix security and stability issues. The following security vulnerabilities have been fixed : - The NFS dissector could crash. CVE-2014-2281 - The RLC dissector could crash. CVE-2014-2283 - The MPEG file parser could overflow a buffer. For more information...

SuSE 11.3 Security Update : sudo (SAT Patch Number 9044)

This collective update for sudo provides fixes for the following issues : - Security policy bypass when envreset is disabled. CVE-2014-0106, bnc866503 - Regression in the previous update that causes a segmentation fault when running 'sudo -s'. bnc868444 - Command 'who -m' prints no output when...

SuSE 11.3 Security Update : mutt (SAT Patch Number 9023)

The mailreader mutt was updated to fix a security issue in displaying mail headers, where a crafted e-mail could cause a heap overflow, which in turn might be used by attackers to crash mutt or potentially even execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

SuSE 11.3 Security Update : xinetd (SAT Patch Number 9021)

The multiplexing system xinetd was updated to fix security issues and a bug. Security issues fixed : - xinetd ignores user and group directives for tcpmux services. CVE-2013-4342 - xinetd enables all services when tcp multiplexing is used. Bug fixed:. CVE-2012-0862 - Services started by xinetd we...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 8977)

This update fixes a security problem in the BSSGP network protocol dissector that could crash wireshark. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novel...

SuSE 11.3 Security Update : libssh2 (SAT Patch Number 8982)

This update of libssh fixes the following security issue : - When libssh operates in server mode, the randomness pool was not switched on fork, so two pools could operate on the same randomness and could generate the same keys. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 8974)

The OpenJDK Java Plugin IcedTea Web was released to fix a temporary file access problem. Changes : - Dialogs center on screen before becoming visible. - Support for u45 new manifest attributes Application-Name. - Custom applet permission policies panel in itweb-settings control panel. - Plugin...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 9012)

Adobe Flash Player was updated to version 11.2.202.346 to fix security issues : - A vulnerability that could be used to bypass the same origin policy was fixed. CVE-2014-0503 - A vulnerability that could be used to read the contents of the clipboard was fixed. More information can be found on:...

SuSE 11.3 Security Update : ImageMagick (SAT Patch Number 8978)

The image converter program and library set of ImageMagick received an update that fixes a buffer overflow when handling PSD images. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : gnutls (SAT Patch Number 8949)

The GnuTLS library received a critical security fix and other updates : - The X.509 certificate verification had incorrect error handling, which could lead to broken certificates marked as being valid. CVE-2014-0092 - A verification problem in handling V1 certificates could also lead to V1...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 8922)

This update of Adobe Flash Player fixes the following issues : - A stack overflow vulnerability that could have resulted in arbitrary code execution. CVE-2014-0498 - A memory leak vulnerability that could have been used to defeat memory address layout randomization. CVE-2014-0499 - A double free...

SuSE 11.3 Security Update : libQt (SAT Patch Number 8907)

The Qt library was updated to fix a XML entity expansion attack XXE. CVE-2013-4549 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL...

SuSE 11.3 Security Update : IBM Java (SAT Patch Number 8878)

This update contains the Oracle January 14 2014 CPU for java-170-ibm. Find more information at: http://www.ibm.com/developerworks/java/jdk/alerts/OracleJanuary142 014CPU %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.3 Security Update : pwlib (SAT Patch Number 8838)

This update fixes a XML DoS vulnerability in pwlib. CVE-2013-1864 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 8865 / 8868 / 8875)

The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update : - scsidhalua: Incorrect reference counting in the SCSI ALUA initialization code lead to system crashes on boot bnc858831. As the update introducing the regression was marked...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8876 / 8880)

This update resolves an integer underflow vulnerability that could have been exploited to execute arbitrary code on the affected system. CVE-2014-0497 More information: http://helpx.adobe.com/security/products/flash-player/apsb14-04.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 / 11.3 Security Update : xorg-x11 (SAT Patch Numbers 8723 / 8724)

This update fixes a stack-based buffer overflow in xorg-x11 in the function bdfReadCharacters. CVE-2013-6462 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.3 Security Update : gimp (SAT Patch Number 8856)

This update fixes the following security issues with gimp : - XWD plugin gnew integer overflow. CVE-2013-1913. bnc853423 - XWD plugin color map heap-based buffer overflow. CVE-2013-1978. bnc853425 - memory corruption via XWD files CVE-2012-5576. bnc791372 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.2 / 11.3 Security Update : hplip (SAT Patch Numbers 8775 / 8777)

hplip was updated to fix three security issues : - Some local file overwrite problems via predictable /tmp filenames were fixed. CVE-2013-0200 - hplip used an insecure polkit DBUS API polkit-process subject race condition which could lead to local privilege escalation. CVE-2013-4325 - hplip uses...

SuSE 11.2 / 11.3 Security Update : curl (SAT Patch Numbers 8796 / 8797)

This update fixes the re-use of wrong HTTP NTLM connections in libcurl. CVE-2014-0015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVE...