SuSE 11.3 Security Update : libpng (SAT Patch Number 9170)

This libpng update fixes the following two overflow security issues. - Fixed integer overflow that could have lead to a heap-based buffer overflow in pngsetsPLT and pngsettext2. CVE-2013-7354. bnc873123 - Fixed integer overflow that could have lead to a heap-based buffer overflow in...

SuSE 11.3 Security Update : curl (SAT Patch Number 9133)

This curl update fixes the following security issues : - wrong re-use of connections. CVE-2014-0138. bnc868627 - IP address wildcard certificate validation. CVE-2014-0139. bnc868629 - --insecure option inappropriately enforcing security safeguard. bnc870444 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : nagios-nrpe, nagios-nrpe-debuginfo, nagios-nrpe-debugsource, etc (SAT Patch Number 9204)

nagios-nrpe has been updated to prevent possible remote command execution when command arguments are enabled. This issue affects versions 2.15 and older. Further information is available at http://seclists.org/fulldisclosure/2014/Apr/240 These security issues have been fixed : - Remote command...

SuSE 11.3 Security Update : Ruby (SAT Patch Number 9136)

This Ruby update fixes the following security issue : - Fixed entity expansion DoS vulnerability in REXML. CVE-2013-1821. bnc808137 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : nagios-nrpe, nagios-nrpe-debuginfo, nagios-nrpe-debugsource, etc (SAT Patch Number 9204)

nagios-nrpe has been updated to prevent possible remote command execution when command arguments are enabled. This issue affects versions 2.15 and older. Further information is available at http://seclists.org/fulldisclosure/2014/Apr/240 These security issues have been fixed : - Remote command...

SuSE 11.3 Security Update : lxc (SAT Patch Number 9084)

The container framework LXC has been updated to fix various bugs and a security issue : - The sshd template allowed privilege escalation on the host. CVE-2013-6441 - SLES container time not aligned with host time. bnc839653 - SLES container boot takes ages. bnc839663 - lxc mounts /dev/pts with...

SuSE 11.3 Security Update : kvm (SAT Patch Number 9142)

The QEMU embedded within KVM received various security fixes. Various issues in the block layer have been fixed : - A virtio security issue in config io space handling. CVE-2013-2016 - A SCSI report LUNs buffer overflow. CVE-2013-4344 - A buffer overflow in the QEMU USB stack. CVE-2013-4541...

SuSE 11.3 Security Update : nagios (SAT Patch Number 9071)

The monitoring service Nagios has been updated to fix potential buffer overflows in its CGI scripts. CVE-2014-1878 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9138)

A remote DoS attack in the Squid web proxy has been fixed. Due to incorrect state management, Squid was vulnerable to a denial of service attack when processing certain HTTPS requests. CVE-2014-0128 For more information see http://www.squid-cache.org/Advisories/SQUID-20141.txt . Additionally, a b...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9089)

The following security issue is fixed by this update : - strongswan has been updated to fix an authentication problem where attackers could have bypassed the IKEv2 authentication. CVE-2014-2338. bnc870572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

SuSE 11.3 Security Update : net-snmp (SAT Patch Number 9015)

The net-snmp remote service received security and bugfixes : - A remote denial of service flaw in Linux implementation of ICMP-MIB has been fixed. CVE-2014-2284 - snmptrapd could have crashed when using a trap with empty community string. This has been fixed. CVE-2014-2285 - The AgentX subagent o...

SuSE 11.3 Security Update : python-setuptools (SAT Patch Number 9116)

python-setuptools so far used only HTTP to retrieve packages, which could have lead to man in the middle attacks on newly installed python code. This update adjusts it to use HTTPS, guaranteeing better connection integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11.3 Security Update : puppet (SAT Patch Number 9033)

The deployment framework puppet received an update for a security issue in January. The backport of this security issue was however incomplete and broke existing setups. As the scope of the problem is limited to local scenarios where an attacker likely has access already, and backporting is not...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 9060)

Wireshark was updated to version 1.8.13 to fix security and stability issues. The following security vulnerabilities have been fixed : - The NFS dissector could crash. CVE-2014-2281 - The RLC dissector could crash. CVE-2014-2283 - The MPEG file parser could overflow a buffer. For more information...

SuSE 11.3 Security Update : sudo (SAT Patch Number 9044)

This collective update for sudo provides fixes for the following issues : - Security policy bypass when envreset is disabled. CVE-2014-0106, bnc866503 - Regression in the previous update that causes a segmentation fault when running 'sudo -s'. bnc868444 - Command 'who -m' prints no output when...

SuSE 11.3 Security Update : mutt (SAT Patch Number 9023)

The mailreader mutt was updated to fix a security issue in displaying mail headers, where a crafted e-mail could cause a heap overflow, which in turn might be used by attackers to crash mutt or potentially even execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

SuSE 11.3 Security Update : xinetd (SAT Patch Number 9021)

The multiplexing system xinetd was updated to fix security issues and a bug. Security issues fixed : - xinetd ignores user and group directives for tcpmux services. CVE-2013-4342 - xinetd enables all services when tcp multiplexing is used. Bug fixed:. CVE-2012-0862 - Services started by xinetd we...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 8977)

This update fixes a security problem in the BSSGP network protocol dissector that could crash wireshark. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novel...

SuSE 11.3 Security Update : libssh2 (SAT Patch Number 8982)

This update of libssh fixes the following security issue : - When libssh operates in server mode, the randomness pool was not switched on fork, so two pools could operate on the same randomness and could generate the same keys. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 8974)

The OpenJDK Java Plugin IcedTea Web was released to fix a temporary file access problem. Changes : - Dialogs center on screen before becoming visible. - Support for u45 new manifest attributes Application-Name. - Custom applet permission policies panel in itweb-settings control panel. - Plugin...