SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)

This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11.3 Security Update : Samba (SAT Patch Number 10321)

Samba has been updated to fix one security issue : - Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed :. CVE-2015-0240 - Realign the winbind request structure following requiremembershipof field expansion. bnc913001 - Reuse...

SuSE 11.3 Security Update : java-1_7_0-ibm (SAT Patch Number 10300)

java-170-ibm was updated to fix two security issues : - Unspecified vulnerability. CVE-2014-8891 - Unspecified vulnerability. CVE-2014-8892 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 10286)

java-170-openjdk was updated to fix 19 security issues. Details are available at http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tmlAppendixJAVA %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.3 Security Update : libmpfr (SAT Patch Number 10212)

This update for libmpfr fixes a buffer overflow in mpfrstrtofr. CVE-2014-9474 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10225)

Mozilla Firefox has been updated to the 31.4.0ESR release, fixing bugs and security issues. Mozilla NSS has been updated to 3.17.3, fixing a security issue and updating the root certificate list. For more information, please see https://www.mozilla.org/en-US/security/advisories/ %NASLMINLEVEL 703...

SuSE 11.3 Security Update : curl (SAT Patch Number 10166)

This update fixes the following security issues : - URL request injection bnc911363 When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. CVE-2014-8150 If the given URL contains line feeds and carriage returns those will be sent alo...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10226)

Adobe Flash Player was updated to version 11.2.202.440 bsc914463, APSA15-01, CVE-2015-0311. More information can be found at https://helpx.adobe.com/security/products/flash-player/apsa15-01.html . An update of flashplayer executable binary for i386 is currently not available and was thus disabled...

SuSE 11.3 Security Update : Ruby (SAT Patch Number 10126)

The Ruby script interpreter has been updated to fix two denial of service attacks when expanding XML. CVE-2014-8080 / CVE-2014-8090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11 Security Update : glibc (SAT Patch Numbers 10202,10204,10206)

This update for glibc fixes the following security issue : - A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that can lead to a local or remote buffer overflow. bsc913646. CVE-2015-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10161)

The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10159)

This update fixes the following security issues : - heap overflow condition in the CRC32 verification. CVE-2014-8139 - write error 8349 shows a problem in extract.c:testcompreb. CVE-2014-8140 - read errors 6430, 3422 show problems in process.c:getZip64Data. CVE-2014-8141 %NASLMINLEVEL 70300 C...

SuSE 11.3 Security Update : bind (SAT Patch Number 10100)

bind has been updated to version 9.9.6P1, fixing the following security issue : - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow default 7, and the number of...

SuSE 11.3 Security Update : popt (SAT Patch Number 10097)

This rpm update fixes the following security and non security issues. - check for bad invalid name sizes. CVE-2014-8118. bnc908128 - create files with mode 0. CVE-2013-6435. bnc906803 - honor --noglob in install mode. bnc892431 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.3 Security Update : tcpdump (SAT Patch Number 10093)

tcpdump has been updated to fix two security issues : - Unreliable output using malformed AOVD payload. CVE-2014-8769. bnc905872 - Denial of service in verbose mode using malformed OLSR payload. CVE-2014-8767. bnc905870 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : mailx (SAT Patch Number 10096)

This mailx update fixes the following security issues : - Shell command injection via crafted email addresses. CVE-2004-2771 / CVE-2014-7844. bnc909208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.3 Security Update : libksba (SAT Patch Number 10087)

This libksba update fixes the following security issue : - buffer overflow in ksbaoidtostr CVE-2014-9087. bnc907074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10090)

This flash-player security update fixes the following issues : - Security update to 11.2.202.425 bnc909219 : - APSB14-27, CVE-2014-0580 / CVE-2014-0587 / CVE-2014-8443 / CVE-2014-9162 / CVE-2014-9163 / CVE-2014-9164 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : Image Magick (SAT Patch Number 9976)

ImageMagick has been updated to fix four security issues : - Crafted jpeg file could have lead to a Denial of Service. CVE-2014-8716 - Out-of-bounds memory access in resize code. CVE-2014-8354 - Out-of-bounds memory access in PCX parser. CVE-2014-8355 - Out-of-bounds memory error in DCM decode...

SuSE 11.3 Security Update : pidgin (SAT Patch Number 10078)

This pidgin update fixes the following security issues : - remote information leak via crafted XMPP message. CVE-2014-3698. bnc902408 - denial of service parsing Groupwise server message. CVE-2014-3696. bnc902410 - crash in MXit protocol plug-in CVE-2014-3695. bnc902409 %NASLMINLEVEL 70300 C...