SuSE 11.2 Security Update : telepathy-gabble (SAT Patch Number 7506)

telepathy-gabble was updated to fix several remotely-triggerable NULL crashes. CVE-2013-1769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.2 Security Update : dhcp (SAT Patch Number 7571)

The ISC DHCP server had a denial of service issue in handling specific DDNS requests which could cause a out of memory usage situation. CVE-2013-2266 This update also adds a dhcp6-server service template for SuSEfirewall2. bnc783002 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7613)

Adobe Flash Player has been updated to 11.2.202.280 to fix various bugs and security issues. More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-11.html - APSB13-11, CVE-2013-1378 / CVE-2013-1379 / CVE-2013-1380 / CVE-2013-2555 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.2 Security Update : systemtap (SAT Patch Number 7444)

This collective update for systemtap provides the following fixes : - Change how systemtap looks for tracepoint header files. bnc796574 - Systemtap manually loads libebl backends. Add libebl1 dependency. bnc800335 - Fix kernel panic when processing malformed DWARF unwind data. bnc748564,...

SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7585)

This update to version 9.1.9 fixes : - Fix insecure parsing of server command-line switches. CVE-2013-1899 - Reset OpenSSL randomness state in each postmaster child process. CVE-2013-1900 - Make REPLICATION privilege checks test current user not authenticated user. CVE-2013-1901 %NASLMINLEVEL 703...

SuSE 10 Security Update : ClamAV (ZYPP Patch Number 8526)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid65798;...

SuSE 11.2 Security Update : jakarta (SAT Patch Number 7574)

The following issue has been fixed : - SSL certificate hostname verification was not done and is fixed by this update. CVE-2012-5783 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.2 Security Update : ClamAV (SAT Patch Number 7557)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7340)

PostgreSQL has been updated to version 8.3.23 which fixes various bugs and one security issue. The security issue fixed in this release, CVE-2013-0255, allowed a previously authenticated user to crash the server by calling an internal function with invalid arguments. This issue was discovered by...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7464)

Mozilla Firefox has been updated to the 17.0.4ESR release which fixes one important security issue : - VUPEN Security, via TippingPoint's Zero Day Initiative, reported a use-after-free within the HTML editor when content script is run by the document.execCommand function while internal editor...

SuSE 10 Security Update : Java (ZYPP Patch Number 8495)

IBM Java 6 has been updated to SR13 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2013-0443. CVE-2013-1487 / CVE-2013-1486 / CVE-2013-1478 /...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7491)

Adobe Flash Player has been updated to security release 11.2.202.275 APSB13-09, fixing severe security issues. CVE-2013-0646 / CVE-2013-0650 / CVE-2013-1371 / CVE-2013-1375 More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-09.html %NASLMINLEVEL 70300 C...

SuSE 11.2 Security Update : Java (SAT Patch Number 7450)

IBM Java 1.4.2 has been updated to SR13-FP15 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2013-0443. CVE-2013-1478 / CVE-2013-1480 / CVE-2013-1476 ...

SuSE 11.2 Security Update : Java (SAT Patch Number 7457)

This release of Icedtea6-1.12.4 fixes the following two issues that allowed a remote attacker to execute arbitrary code remotely by providing crafted images to the affected code. - CVE-2013-0809: CVSS v2 Base Score: 6.8 critical AV:N/AC:M/Au:N/C:P/I:P/A:P: Insufficient Information CWE-noinfo -...

SuSE 11.2 Security Update : Perl (SAT Patch Number 7439)

This update of Perl 5 fixes the following security issues : - fix rehash DoS bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - fix glob denial of service bnc796014 CVE-2011-2728 - sanitize input in Maketext.pm bnc797060 CVE-2012-6329 %NASLMINLEVEL 70300 C Tenable Netwo...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 8475)

pidgin was updated to fix 4 security issues : - Fixed a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274, bnc804742 - Fixed a crash in Sametime protocol when a malicious server sends us an abnormally long user ID. CVE-2013-0273, bnc804742 - Fixed a bug where the MXit...

SuSE 10 Security Update : apache2 (ZYPP Patch Number 8443)

This update fixes the following security issues with apache2 httpd : - Improper LDLIBRARYPATH handling. CVE-2012-0883 - Filename escaping problem CVE-2012-2687 Additionally, some non-security bugs have been fixed as enumerated in the changelog of the RPM. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8476)

flash-player has been updated to 11.2.202.273 security update, which fixes several critical security bugs that could have been used by remote attackers to execute code. CVE-2013-0504 / CVE-2013-0643 / CVE-2013-0648 More information can be found on :...

SuSE 10 Security Update : nagios (ZYPP Patch Number 8460)

This update fixes a stack overflow in the nagios web interface. CVE-2012-6096 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid64927;...