SuSE 11.3 Security Update : krb5 (SAT Patch Number 9564)

The following security issues have been fixed in kerberos 5 : - Two denial of service flaws when handling RFC 1964 tokens. CVE-2014-4341 / CVE-2014-4342 - Multiple flaws in SPNEGO. CVE-2014-4343 / CVE-2014-4344 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.3 Security Update : openjdk (SAT Patch Number 9543)

This Critical Patch Update contains 20 new security fixes for Oracle Java SE. All of these vulnerabilities could have been remotely exploitable without authentication, i.e., could be exploited over a network without the need for a username and password. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 9569)

Mozilla Firefox has been updated to the 24.7ESR security release. Security issues fixed in this release : - https://www.mozilla.org/security/announce/2014/mfsa2014- 63.html. CVE-2014-1544 - https://www.mozilla.org/security/announce/2014/mfsa2014- 56.html. CVE-2014-1548 -...

SuSE 11.3 Security Update : kdirstat (SAT Patch Number 9515)

The following security issue has been fixed : - 868682: CVE-2014-2527 / CVE-2014-2528: kdirstat: command injection in kcleanup %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 11.3 Security Update : libtasn1 (SAT Patch Number 9528)

libtasn1 has been updated to fix three security issues : - asn1getbitder could have returned negative bit length. CVE-2014-3468 - Multiple boundary check issues could have allowed DoS. CVE-2014-3467 - Possible DoS by NULL pointer dereference in asn1readvaluetype CVE-2014-3469 %NASLMINLEVEL 70300 ...

SuSE 11.3 Security Update : glibc (SAT Patch Number 9477)

glibc has been updated to fix one security issue that could have resulted in free-after-use situations. More information can be found at http://seclists.org/oss-sec/2014/q2/519 This security issue has been fixed : - posixspawnfileactionsaddopen fails to copy the path argument CVE-2014-4043 Also a...

SuSE 11.3 Security Update : lzo (SAT Patch Number 9506)

lzo was updated to fix a potential denial of service issue or possible remote code execution by allowing an attacker, if the LZO decompression algorithm is used in a threaded or kernel context, to corrupt memory structures that control the flow of execution in other contexts. CVE-2014-4607...

SuSE 11.3 Security Update : kdebase4-workspace (SAT Patch Number 9467)

This kdebase4-workspace update fixes two security issues : - NULL pointer dereference in KDM and KCheckPass. CVE-2013-4132 - Memory leak that could lead to a denial of service. CVE-2013-4133 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

SuSE 11.3 Security Update : cabextract (SAT Patch Number 9437)

cabextract was updated to fix two security issues : - A potential endless loop in decoding files. CVE-2010-2800 - Memory corruption due to integer overflows in buffer read handling. CVE-2010-2801 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11.3 Security Update : puppet (SAT Patch Number 9472)

Puppet was updated to fix the following security issues : - Unsafe use of temporary files. CVE-2013-4969 - Arbitrary code execution with required social engineering. CVE-2014-3248 / CVE-2014-3250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11.3 Security Update : xalan-j2 (SAT Patch Number 9426)

xalan-j2 has been updated to ensure that secure processing can't be circumvented. CVE-2014-0107 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. i...

SuSE 11.3 Security Update : sendmail (SAT Patch Number 9345)

sendmail has been updated to fix the following security issue : - Not properly closing file descriptors before executing programs. CVE-2014-3956 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.3 Security Update : php53 (SAT Patch Number 9450)

php53 was updated to fix the following security vulnerabilities : - Heap-based buffer overflow in DNS TXT record parsing. CVE-2014-4049 - Denial of service in Fileinfo component. CVE-2014-0238 - Performance degradation by too many fileprintf calls. CVE-2014-0237 - NULL pointer dereference in GD X...

SuSE 11.3 Security Update : dbus-1 (SAT Patch Number 9349)

dbus-1 was patched to prevent a possible denial of service issue in dbus-daemon. CVE-2014-3477 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11.3 Security Update : openssl-certs (SAT Patch Number 9341)

openssl-certs has been updated to include four new and remove two certificates : - new: AtosTrustedRoot2011:2.8.92.51.203.98.44.95.179.50.crt - new: E-TugraCertificationAuthority:2.8.106.104.62.156.81.15 5.203.83.crt - new: TeliaSoneraRootCAv1:2.17.0.149.190.22.160.247.46.70.2...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 9203)

libvirt has been patched to fix two security issues. Further information is available at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0179 and http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6456 These security issues have been fixed : - Unsafe parsing of XML documents allows...

SuSE 11.3 Security Update : IBM Java 6 (SAT Patch Number 9256)

BM Java 6 was updated to version 6 SR16 to fix several security issues and various other bugs. More information can be found at: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.3 Security Update : IBM Java 7 (SAT Patch Number 9263)

IBM Java 7 was updated to version SR7, which received security and bug fixes. More information is available at: http://www.ibm.com/developerworks/java/jdk/aix/j764/Java764.fixes.htm lSR7 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

SuSE 11.3 Security Update : libpng (SAT Patch Number 9170)

This libpng update fixes the following two overflow security issues. - Fixed integer overflow that could have lead to a heap-based buffer overflow in pngsetsPLT and pngsettext2. CVE-2013-7354. bnc873123 - Fixed integer overflow that could have lead to a heap-based buffer overflow in...

SuSE 11.3 Security Update : curl (SAT Patch Number 9133)

This curl update fixes the following security issues : - wrong re-use of connections. CVE-2014-0138. bnc868627 - IP address wildcard certificate validation. CVE-2014-0139. bnc868629 - --insecure option inappropriately enforcing security safeguard. bnc870444 %NASLMINLEVEL 70300 C Tenable Network...