SuSE 11.1 Security Update : libtiff (SAT Patch Number 6475)

The following issue has been fixed : - Specially crafted tiff files could have caused overflows in libtiff. CVE-2012-2088 / CVE-2012-2113 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : expat (SAT Patch Number 6200)

This update of expat fixes the following bugs : - hash collision attack that could lead to exessive CPU usage. CVE-2012-0876 - expat didn't close file descriptors in some cases. CVE-2012-1147 - specially crafted xml files could lead to a memory leak CVE-2012-1148 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.1 Security Update : taglib (SAT Patch Number 6179)

The following issue has been fixed : - specially crafted ogg files could have crashed taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11.2 Security Update : Qt4 (SAT Patch Number 6935)

libqt4 has been updated to fix the 'CRIME' attack where compression using SSL connections have side-channel attacks to leak plaintext or cryptographic keys. Compression has been disabled to mitigate the CRIME attack. CVE-2012-4929 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

SuSE 11.1 Security Update : clamav (SAT Patch Number 6474)

The following issue has been fixed : - Viruses contained in specially crafted tar or CHM files could have evaded detection by clamav. CVE-2012-1457 / CVE-2012-1458 / CVE-2012-1459 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.2 Security Update : dbus-1 (SAT Patch Number 6733)

This update fixes a vulnerability in the DBUS auto-launching feature that allowed local users to execute arbitrary programs as root. CVE-2012-3524 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.2 Security Update : libotr (SAT Patch Number 7076)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.1 Security Update : boost (SAT Patch Number 6507)

The following issue has been fixed : - boost::pool's orderedmalloc could have overflowed when calculating the allocation size. CVE-2012-2677 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.2 Security Update : Mono (SAT Patch Number 6543)

Mono was updated to fix a cross-site scripting attack in the System.Web class 'forbidden extensions' filtering has been fixed. CVE-2012-3382 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.2 Security Update : kvm (SAT Patch Number 6755)

The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. CVE-2012-3515 aka XSA-17. Also the following non security bugs have been fixed : - permit qemu-kvm -device '?' even when no /dev/kvm. bnc772586 - SLES11SP2...

SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 6187)

ecryptfs-utils was updated to fix a security issue and some bugs. Security issue fixed: mount.ecryptfsprivate did not set correct group ownerships when it modifies mtab. CVE-2011-3145 Also some bugs that made this set of tools non-working were fixed. You need to manually hand setuid root...

SuSE 11.1 Security Update : libpng (SAT Patch Number 6596)

An integer overflow has been fixed in libpng. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11.2 Security Update : Xen and libvirt (SAT Patch Number 6640)

Xen was updated to fix several security issues : - A xen HVM guest destroy p2m teardown host DoS vulnerability was fixed, where malicious guest could lock/crash the host. CVE-2012-3433 - A xen HVM guest user mode MMIO emulation DoS was fixed. CVE-2012-3432 - The xen pv bootloader doesn't check th...

SuSE 11.2 Security Update : libvirt (SAT Patch Number 7015)

libvirt received security and bugfixes : - Fixed a libvirt remote denial of service crash problem. The following bugs have been fixed :. CVE-2012-4423 - qemu: Fix probing for guest capabilities - xen-xm: Generate UUID if not specified - xenParseXM: don't dereference NULL pointer when script is...

SuSE 11.2 Security Update : libsoup (SAT Patch Number 6520)

libsoup without ca path added, accepted all SSL certificats as trusted. This has been fixed. CVE-2012-2132 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

SuSE 11.2 Security Update : bind (SAT Patch Number 6944)

The following issue has been fixed : - Specially crafted RDATA could have caused bind to lockup. This is a different flaw than CVE-2012-4244. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.1 Security Update : RPM (SAT Patch Number 6186)

Multiple security vulnerabilities were reported in RPM which could be exploited via specially crafted RPM files to cause a denial of service application crash or potentially allow attackers to execute arbitrary code. Additionally, a non-security issue was fixed that could cause a division by zero...

SuSE 11.2 Security Update : Xen (SAT Patch Number 6748)

XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed : - xen: hypercall setdebugreg vulnerability XSA-12. CVE-2012-3494 - xen: hypercall physdevgetfreepirq vulnerability XSA-13. CVE-2012-3495 - xen: XENMEMpopulatephysmap DoS vulnerability...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 6937)

flash player was updated to version 11.2.202.243, fixing a lot of security issues : CVE-2012-5248 / CVE-2012-5249 / CVE-2012-5250 / CVE-2012-5251 / CVE-2012-5252 / CVE-2012-5253 / CVE-2012-5254 / CVE-2012-5255 / CVE-2012-5256 / CVE-2012-5257 / CVE-2012-5258 / CVE-2012-5259 / CVE-2012-5260 /...

SuSE 11.1 Security Update : socat (SAT Patch Number 6407)

This update fixes two small security issues in socat : - Fixed a stack overflow in commandline parsing bnc627475 / CVE-2010-2799 Only exploitable if an attacker can control the commandline parameters. - Fixed heap overflow in READLINE output mode bnc759859 / CVE-2012-0219 %NASLMINLEVEL 70300 C...