SuSE 11.3 Security Update : freetype2 (SAT Patch Number 10386)

The font rendering library freetype2 has been updated to fix various security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVE...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10373)

Mozilla Firefox has been updated to version 31.5.0 ESR to fix five security issues. These security issues have been fixed : - Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.5 allowed remote attackers to cause a denial of service memory corruption and...

SuSE 11.3 Security Update : elfutils (SAT Patch Number 10328)

elfutils has been updated to fix one security issue : - Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allowed remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated...

SuSE 11.3 Security Update : glibc (SAT Patch Number 10357)

glibc has ben updated to fix three security issues : - wordexp failed to honour WRDENOCMD bsc906371. CVE-2014-7817 - Fixed invalid file descriptor reuse while sending DNS query bsc915526. CVE-2013-7423 - Fixed buffer overflow in wscanf bsc916222 These non-security issues have been fixed:...

SuSE 11.3 Security Update : PHP 5.3 (SAT Patch Number 10370)

php5 has been updated to fix two security issues : - Out of bounds read in mconvert. bnc917150. CVE-2014-9652 - Use after free vulnerability in unserialize with DateTimeZone. bnc918768. CVE-2015-0273 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

SuSE 11.3 Security Update : xorg-x11-Xvnc (SAT Patch Number 10298)

xorg-x11-server has been updated to fix one security issue : - Check string lenghts in XkbSetGeometry request bnc915810 This non-security issue has been fixed :. CVE-2015-0255 - Option '-showopts' now works with all drivers bnc883051 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10372)

vsftpd has been updated to fix one security issue : - Config option denyfile was not handled correctly bnc915522, bnc900326. CVE-2015-1419 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. Th...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)

This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)

This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11.3 Security Update : Samba (SAT Patch Number 10321)

Samba has been updated to fix one security issue : - Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed :. CVE-2015-0240 - Realign the winbind request structure following requiremembershipof field expansion. bnc913001 - Reuse...

SuSE 11.3 Security Update : java-1_7_0-ibm (SAT Patch Number 10300)

java-170-ibm was updated to fix two security issues : - Unspecified vulnerability. CVE-2014-8891 - Unspecified vulnerability. CVE-2014-8892 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 10286)

java-170-openjdk was updated to fix 19 security issues. Details are available at http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tmlAppendixJAVA %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.3 Security Update : libmpfr (SAT Patch Number 10212)

This update for libmpfr fixes a buffer overflow in mpfrstrtofr. CVE-2014-9474 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.3 Security Update : curl (SAT Patch Number 10166)

This update fixes the following security issues : - URL request injection bnc911363 When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. CVE-2014-8150 If the given URL contains line feeds and carriage returns those will be sent alo...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10225)

Mozilla Firefox has been updated to the 31.4.0ESR release, fixing bugs and security issues. Mozilla NSS has been updated to 3.17.3, fixing a security issue and updating the root certificate list. For more information, please see https://www.mozilla.org/en-US/security/advisories/ %NASLMINLEVEL 703...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10226)

Adobe Flash Player was updated to version 11.2.202.440 bsc914463, APSA15-01, CVE-2015-0311. More information can be found at https://helpx.adobe.com/security/products/flash-player/apsa15-01.html . An update of flashplayer executable binary for i386 is currently not available and was thus disabled...

SuSE 11 Security Update : glibc (SAT Patch Numbers 10202,10204,10206)

This update for glibc fixes the following security issue : - A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that can lead to a local or remote buffer overflow. bsc913646. CVE-2015-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.3 Security Update : Ruby (SAT Patch Number 10126)

The Ruby script interpreter has been updated to fix two denial of service attacks when expanding XML. CVE-2014-8080 / CVE-2014-8090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10161)

The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10159)

This update fixes the following security issues : - heap overflow condition in the CRC32 verification. CVE-2014-8139 - write error 8349 shows a problem in extract.c:testcompreb. CVE-2014-8140 - read errors 6430, 3422 show problems in process.c:getZip64Data. CVE-2014-8141 %NASLMINLEVEL 70300 C...