SuSE 11.2 Security Update : sudo (SAT Patch Number 7705)

This update fixes the following security issues which allowed to bypass the sudo authentication: CVE-2013-1775 / CVE-2013-1776 / CVE-2013-2776 / CVE-2013-2777. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.2 Security Update : curl (SAT Patch Number 7633)

This update fixes the cookie domain tailmatch vulnerability in curl. CVE-2013-1944 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.2 Security Update : ImageMagick (SAT Patch Number 7520)

ImageMagick has been updated to fix an integer overflow. CVE-2012-3438 Also a slowness in 'convert' when resizing JPEG images has been addressed. bnc754481 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 updat...

SuSE 11.2 Security Update : libxslt (SAT Patch Number 7569)

libxslt has been updated to fix two denial of service issues via crashes by NULL pointer dereference on attacker supplied XSLT scripts. CVE-2012-6139 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.2 Security Update : IBM Java (SAT Patch Number 7618)

IBM Java 1.4.2 has been updated to SR13 FP16 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ and on : https://www.ibm.com/developerworks/java/jdk/aix/14264/fixes.htmlSR13 FP16 CVEs fixed: CVE-2013-0485 / CVE-2013-0809 /...

SuSE 11.2 Security Update : java-1_7_0-ibm (SAT Patch Number 7623)

IBM Java 7 was updated to SR4-FP1, fixing bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ and on : http://www.ibm.com/developerworks/java/jdk/aix/j764/Java764.fixes.htm lSR4FP1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 Security Update : dhcp (SAT Patch Number 7571)

The ISC DHCP server had a denial of service issue in handling specific DDNS requests which could cause a out of memory usage situation. CVE-2013-2266 This update also adds a dhcp6-server service template for SuSEfirewall2. bnc783002 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 Security Update : telepathy-gabble (SAT Patch Number 7506)

telepathy-gabble was updated to fix several remotely-triggerable NULL crashes. CVE-2013-1769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.2 Security Update : systemtap (SAT Patch Number 7444)

This collective update for systemtap provides the following fixes : - Change how systemtap looks for tracepoint header files. bnc796574 - Systemtap manually loads libebl backends. Add libebl1 dependency. bnc800335 - Fix kernel panic when processing malformed DWARF unwind data. bnc748564,...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7613)

Adobe Flash Player has been updated to 11.2.202.280 to fix various bugs and security issues. More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-11.html - APSB13-11, CVE-2013-1378 / CVE-2013-1379 / CVE-2013-1380 / CVE-2013-2555 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7585)

This update to version 9.1.9 fixes : - Fix insecure parsing of server command-line switches. CVE-2013-1899 - Reset OpenSSL randomness state in each postmaster child process. CVE-2013-1900 - Make REPLICATION privilege checks test current user not authenticated user. CVE-2013-1901 %NASLMINLEVEL 703...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

SuSE 11.2 Security Update : jakarta (SAT Patch Number 7574)

The following issue has been fixed : - SSL certificate hostname verification was not done and is fixed by this update. CVE-2012-5783 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.2 Security Update : ClamAV (SAT Patch Number 7557)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7340)

PostgreSQL has been updated to version 8.3.23 which fixes various bugs and one security issue. The security issue fixed in this release, CVE-2013-0255, allowed a previously authenticated user to crash the server by calling an internal function with invalid arguments. This issue was discovered by...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7464)

Mozilla Firefox has been updated to the 17.0.4ESR release which fixes one important security issue : - VUPEN Security, via TippingPoint's Zero Day Initiative, reported a use-after-free within the HTML editor when content script is run by the document.execCommand function while internal editor...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7491)

Adobe Flash Player has been updated to security release 11.2.202.275 APSB13-09, fixing severe security issues. CVE-2013-0646 / CVE-2013-0650 / CVE-2013-1371 / CVE-2013-1375 More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-09.html %NASLMINLEVEL 70300 C...

SuSE 11.2 Security Update : Java (SAT Patch Number 7450)

IBM Java 1.4.2 has been updated to SR13-FP15 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2013-0443. CVE-2013-1478 / CVE-2013-1480 / CVE-2013-1476 ...

SuSE 11.2 Security Update : Java (SAT Patch Number 7454)

IBM Java 7 was updated to SR4, fixing various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2012-3174. CVE-2013-1487 / CVE-2013-1486 / CVE-2013-1478 / CVE-2013-0445 /...

SuSE 11.2 Security Update : Java (SAT Patch Number 7457)

This release of Icedtea6-1.12.4 fixes the following two issues that allowed a remote attacker to execute arbitrary code remotely by providing crafted images to the affected code. - CVE-2013-0809: CVSS v2 Base Score: 6.8 critical AV:N/AC:M/Au:N/C:P/I:P/A:P: Insufficient Information CWE-noinfo -...