SuSE 11.2 Security Update : compat-openssl097g (SAT Patch Number 6749)

This compat-openssl097g rollup update contains various security fixes : - incorrect integer conversions in OpenSSL could have resulted in memory corruption during buffer management operations. CVE-2012-2131 / CVE-2012-2110 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11.1 Security Update : openssh (SAT Patch Number 6672)

This collective security update of openssh fixes multiple security issues : - memory exhaustion in gssapi due to integer overflow. bnc756370, CVE-2011-5000 - forced command option information leak bnc744643, CVE-2012-0814 Additionally, the following bug has been fixed : - server-side delay upon...

SuSE 11.2 Security Update : libtiff (SAT Patch Number 7216)

Various memory corruption vulnerabilities have been fixed in libtiff. CVE-2012-4447 / CVE-2012-4564 / CVE-2012-5581 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.2 Security Update : hyper-v (SAT Patch Number 6431)

The Hyper-V userland daemon was updated to match the current kernel Hyper-V feature level. It brings key-value-pair storage that can be queried by the kernel via the netlink interface and can pass information out to the Hyper-V hypervisor. The netlink query code was adjusted to only allow the Lin...

SuSE 11 Security Update : GNOME screensaver (SAT Patch Number 2150)

When resuming a system, gnome-screensaver does not lock external displays that got connected while the system was suspended. CVE-2010-0285 - Pressing the 'Return' key repeatedly caused an X error that terminated gnome-screensaver. CVE-2010-0732 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11.1 Security Update : MySQL (SAT Patch Number 6613)

MySQL has been upgraded to version 5.0.96 to fix several vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 6365)

Specially crafted XML could have caused a denial of service via an out-of-bounds write application crash to applications that are linked against libxml2 CVE-2011-3102. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SuSE 11.1 Security Update : libexif (SAT Patch Number 6568)

Various overflows and other security related bugs in libexif were found by the Google Security team and fixed by the libexif developers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 6571)

This update fixes several libxml2 integer overflows which could have been used to crash libxml2 parsers or potentially execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 6301)

A stack overflow in dhcpcd was fixed which could be used by network local attackers to crash the dhcpcd and so causing loss of DHCP functionality. CVE-2012-2152 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 6225)

IBM Java 1.6.0 was updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6252)

This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in PHP5. CVE-2012-1172 - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal apache module mode setup...

SuSE 11.2 Security Update : Xen (SAT Patch Number 6748)

XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed : - xen: hypercall setdebugreg vulnerability XSA-12. CVE-2012-3494 - xen: hypercall physdevgetfreepirq vulnerability XSA-13. CVE-2012-3495 - xen: XENMEMpopulatephysmap DoS vulnerability...

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6634)

Three security bugs have been fixed in PHP5. - php5: potential overflow in phpstreamscandir. CVE-2012-2688 - openbasedir bypass via SQLite extension. CVE-2012-3365 - An out of band read sql denial of service has been fixed bnc769785. CVE-2012-3450 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11.2 Security Update : RPM (SAT Patch Number 6191)

Multiple security vulnerabilities were reported in RPM which could have been exploited via specially crafted RPM files to cause a denial of service application crash or potentially allow attackers to execute arbitrary code. Additionally, a non-security issue has been fixed that could have caused ...

SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 6448)

This update of GnuTLS fixes multiple vulnerabilities : - remote attackers could cause a denial of service heap memory corruption and application crash via an issue in the asn1getlengthder function. CVE-2012-1569 - crafted GenericBlockCipher structures allow remote attackers to cause a denial of...

SuSE 11.2 Security Update : ghostscript (SAT Patch Number 6813)

This update fixes an array index error leading to a heap-based buffer overflow in ghostscript-library. CVE-2012-4405 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.2 Security Update : icu (SAT Patch Number 7204)

This update is rereleased because some architectures were missed on the first try. It fixes the following security issues : - Specially crafted strings could cause a buffer overflow in icu. CVE-2011-4599 - An integer overflow in the getSymbol function could crash applications using icu...

SuSE 11.1 Security Update : bash (SAT Patch Number 6541)

Parsing the /dev/fd prefix could have lead to a stack-based buffer overflow which could have been exploited by attackers to bypass security restrictions. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 6381)

This version upgrade of wireshark fixes multiple denial of service flaws : - denial of service via memory alignment flaw. CVE-2012-2394 - DIAMETER memory allocation flaw. CVE-2012-2393 - denial of service in multiple dissectors / parsers Additionally, various other non-security bug fixes were...