SuSE 11.3 Security Update : kvm (SAT Patch Number 9739)

kvm has been updated to fix issues in the embedded qemu : - An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could have used this flaw to corrupt QEMU process memory on the host, which coul...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 9745)

The wireshark package was upgraded to 1.10.10 from 1.8.x as 1.8 was discontinued. This update fixes vulnerabilities that could allow an attacker to crash Wireshark or make it become unresponsive by sending specific packets onto the network or have them loaded via a capture file while the dissecto...

SuSE 11.3 Security Update : bash (SAT Patch Number 9780)

The command-line shell 'bash' evaluates environment variables, which allows the injection of characters and might be used to access files on the system in some circumstances. CVE-2014-7169 Please note that this issue is different from a previously fixed vulnerability tracked under CVE-2014-6271 a...

SuSE 11.3 Security Update : bash (SAT Patch Number 9740)

bash has been updated to fix a critical security issue. In some circumstances, the shell would evaluate shellcode in environment variables passed at startup time. This allowed code execution by local or remote attackers who could pass environment variables to bash scripts. CVE-2014-6271...

SuSE 11.3 Security Update : dbus-1 (SAT Patch Number 9733)

Various denial of service issues were fixed in the DBUS service. - dbus-daemon tracks whether method call messages expect a reply, so that unsolicited replies can be dropped. As currently implemented, if there are n parallel method calls in progress, each method reply takes On CPU time. A malicio...

SuSE 11.3 Security Update : php53 (SAT Patch Number 9718)

This php53 update fixes the following security issues : - Insecure temporary file used for cache data was fixed by switching to a different root only directory /var/cache/php-pear. CVE-2014-5459 - An incomplete fix for CVE-2014-4049. CVE-2014-3597 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11.3 Security Update : procmail (SAT Patch Number 9689)

procmail was updated to fix a security issue in its formail helper. - When formail processed specially crafted e-mail headers a heap corruption could be triggered, which would lead to a crash of formail. CVE-2014-3618 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : kdelibs4 (SAT Patch Number 9676)

This update of the kdelibs4 KSSL interface makes it select a set of default ciphers that is recommended for current usage. This update is needed for Konqueror to restrict its cipher set when using https. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

SuSE 11.3 Security Update : libqt4 (SAT Patch Number 9683)

This update of the QT4 QSSL interface makes it select a set of default ciphers that is recommended for current usage. This update is needed for Konqueror to restrict its cipher set when using https. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

SuSE 11.3 Security Update : MozillaFirefox (SAT Patch Number 9687)

Mozilla Firefox was updated to the 24.8.0ESR release, fixing security issues and bugs. Only some of the published security advisories affect the Mozilla Firefox 24ESR codestream : - Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layou...

SuSE 11.3 Security Update : ppp (SAT Patch Number 9648)

This ppp update fixes a potential security issue that an unprivileged attacker could access privileged options : - integer overflow in option parsing CVE-2014-3158, bnc891489 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

SuSE 11.3 Security Update : libgcrypt (SAT Patch Number 9646)

This libgcrypt update fixes the following security issue : - Side-channel attack on Elgamal encryption subkeys. CVE-2014-5270. bnc892464 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.3 Security Update : gpgme (SAT Patch Number 9644)

This gpgme update fixes the following security issue : - Fix possible overflow in gpgsm and uiserver engines CVE-2014-3564. bnc890123 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

SuSE 11.3 Security Update : MySQL (SAT Patch Number 9624)

This MySQL update provides the following : - upgrade to version 5.5.39, bnc887580 - CVE's fixed: CVE-2014-2484 / CVE-2014-4258 / CVE-2014-4260 / CVE-2014-2494 / CVE-2014-4238 / CVE-2014-4207 / CVE-2014-4233 / CVE-2014-4240 / CVE-2014-4214 / CVE-2014-4243 See also:...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9606)

This MIT krb5 update fixes a buffer overrun problem in kadmind : - buffer overrun in kadmind with LDAP back end MITKRB5-SA-2014-001 CVE-2014-4345 MIT krb5 Security Advisory 2014-001. bnc891082 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-0 01.txt %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : CUPS (SAT Patch Number 9561)

This update fixes various issues in CUPS. - Various insufficient symbolic link checking could have lead to privilege escalation from the lp user to root. CVE-2014-3537 / CVE-2014-5029 / CVE-2014-5030 / CVE-2014-5031 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : tomcat6 (SAT Patch Number 9487)

Tomcat has been updated to version 6.0.41, which brings security and bug fixes. The following security fixes have been fixed : - A XXE vulnerability via user-supplied XSLTs. CVE-2014-0096 - Request smuggling via malicious content length header. CVE-2014-0099 - A XML parser hijack by malicious web...

SuSE 11.3 Security Update : pulseaudio (SAT Patch Number 9568)

The following security issue is fixed in this update : - Fixed a remote denial of service attack in module-rtp-recv. CVE-2014-3970 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : Python (SAT Patch Number 9581)

This update for Python provides fixes for the following issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters. CVE-2014-4650 - The 'urlparse' module has been updated to correctly parse IPv6 addresses. bnc872848 - Correctly enable IPv6 support. %NASLMINLEV...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9564)

The following security issues have been fixed in kerberos 5 : - Two denial of service flaws when handling RFC 1964 tokens. CVE-2014-4341 / CVE-2014-4342 - Multiple flaws in SPNEGO. CVE-2014-4343 / CVE-2014-4344 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...