SuSE 11.2 / 11.3 Security Update : ruby (SAT Patch Numbers 8578 / 8579)

The following security issue has been fixed : - heap overflow in float point parsing. CVE-2013-4164 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8503 / 8504)

Wireshark has been updated to version 1.8.11 to fix bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.2 Security Update : openvpn (SAT Patch Number 8496)

OpenVPN used a non-constant-time memcmp in HMAC comparison in openvpndecrypt that might have allowed remote attackers to gain knowledge of plaintext data. CVE-2013-2061 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.3 Security Update : openvpn (SAT Patch Number 8493)

OpenVPN used a non-constant-time memcmp in HMAC comparison in openvpndecrypt that might have allowed remote attackers to gain knowledge of plaintext data. CVE-2013-2061 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.2 / 11.3 Security Update : lcms (SAT Patch Numbers 8424 / 8425)

The lcms userland utilities were updated to fix stack overflows. - Multiple stack-based buffer overflows in LittleCMS allowed remote attackers to cause a denial of service crash via a crafted 1 ICC color profile to the icctrans utility or 2 TIFF image to the tiffdiff utility. CVE-2013-4276...

SuSE 11.2 / 11.3 Security Update : Xen (SAT Patch Numbers 8478 / 8479)

XEN has been updated to version 4.2.3 c/s 26170, fixing various bugs and security issues. - XSA-72: Fixed ocaml xenstored that mishandled oversized message replies. CVE-2013-4416 - XSA-63: Fixed information leaks through I/O instruction emulation. CVE-2013-4355 - XSA-66: Fixed information leak...

SuSE 11.2 / 11.3 Security Update : IBM Java 6 (SAT Patch Numbers 8549 / 8550)

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 1...

SuSE 11.2 / 11.3 Security Update : xorg-x11-server (SAT Patch Numbers 8463 / 8464)

xorg-x11-server was updated to fix the following security issue : - Fixed a security issue in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption. CVE-2013-4396, bnc843652 A non-security issues was also fixe...

SuSE 11.2 / 11.3 Security Update : jakarta-commons-fileupload (SAT Patch Numbers 8445 / 8446)

jakarta-commons-fileupload received a security fix : - A poison null byte flaw was found in the implementation of the DiskFileItem class. A remote attacker could able to supply a serialized instance of the DiskFileItem class, which would be deserialized on a server, could use this flaw to write...

SuSE 11.2 / 11.3 Security Update : libxslt (SAT Patch Numbers 8500 / 8501)

libxslt received a security update to fix a security issue : - The XSL implementation in libxslt allowed remote attackers to cause a denial of service crash via an invalid DTD. addendum due to incomplete fix for CVE-2012-2825. CVE-2013-4520 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 / 11.3 Security Update : CUPS (SAT Patch Numbers 8436 / 8437)

The following security issue has been fixed in the CUPS print daemon CVE-2012-5519: The patch adds better default protection against misuse of privileges by normal users who have been specifically allowed by root to do cupsd configuration changes The new ConfigurationChangeRestriction cupsd.conf...

SuSE 11.2 / 11.3 Security Update : libtiff (SAT Patch Numbers 8384 / 8385)

This tiff update fixes several security issues. - tiff: buffer overflows/use after free problem. bnc834477: CVE-2013-4232 / CVE-2013-4231 - libtiff gif2tiff: heap-based buffer overflow in readgifimage. bnc834779: CVE-2013-4243 - libtiff gif2tiff: OOB Write in LZW decompressor. bnc834788:...

SuSE 11.2 / 11.3 Security Update : fastjar (SAT Patch Numbers 8376 / 8377)

This fastjar update fixes a directory traversal issue. bnc607043 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 11.3 Security Update : guestfs (SAT Patch Number 8465)

A predictable socketname in the guestfish commandline tool could be used by a local attacker to gain access to guestfish sessions of other users on the same system. CVE-2013-4419 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.2 / 11.3 Security Update : Python (SAT Patch Numbers 8404 / 8405)

This python update fixes a certificate hostname issue. - python: SSL module does not handle certificates that contain hostnames with NULL bytes. bnc834601: CVE-2013-4238 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.2 / 11.3 Security Update : kdelibs4 (SAT Patch Numbers 8401 / 8402)

This kdelibs4 update fixes several security issues related to khtml/konqueror. - Fix security issues and NULL pointer references in khtml/konqueror bnc787520 CVE-2012-4512 / CVE-2012-4513 / CVE-2012-4515 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

SuSE 11.2 / 11.3 Security Update : gpg2 (SAT Patch Numbers 8426 / 8427)

This GnuPG update fixes two security issues : - GnuPG treated no-usage-permitted keys as all-usages-permitted. CVE-2013-4351 - An infinite recursion in the compressed packet parser was fixed. CVE-2013-4402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

SuSE 11.2 / 11.3 Security Update : icedtea-web (SAT Patch Numbers 8357 / 8358)

This icedtea-web update adds a missing fix for an off-by-one heap-based buffer overflow. - icedtea-web 1.4.1 fixes the missing patch for CVE-2012-4540. bnc840572: CVE-2013-4349 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8330 / 8331)

Adobe flash-player has been updated to version 11.2.202.310 ABSP13-21 which fixes several bugs and security issues. SUSE bnc839897 These updates resolve memory corruption vulnerabilities that could have lead to code execution. CVE-2013-3361 / CVE-2013-3362 / CVE-2013-3363 / CVE-2013-5324 Official...

SuSE 11.2 / 11.3 Security Update : wireshark (SAT Patch Numbers 8318 / 8319)

This wireshark version update from 1.8.8 to 1.8.9 includes several security and general bug fixes. bnc831718 http://www.wireshark.org/docs/relnotes/wireshark-1.8.9.html - The Bluetooth SDP dissector could go into a large loop CVE-2013-4927 wnpa-sec-2013-45 - The DIS dissector could go into a larg...