766 matches found
SuSE 11.3 Security Update : elfutils (SAT Patch Number 10328)
elfutils has been updated to fix one security issue : - Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allowed remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated...
SuSE 11.3 Security Update : glibc (SAT Patch Number 10357)
glibc has ben updated to fix three security issues : - wordexp failed to honour WRDENOCMD bsc906371. CVE-2014-7817 - Fixed invalid file descriptor reuse while sending DNS query bsc915526. CVE-2013-7423 - Fixed buffer overflow in wscanf bsc916222 These non-security issues have been fixed:...
SuSE 11.3 Security Update : PHP 5.3 (SAT Patch Number 10370)
php5 has been updated to fix two security issues : - Out of bounds read in mconvert. bnc917150. CVE-2014-9652 - Use after free vulnerability in unserialize with DateTimeZone. bnc918768. CVE-2015-0273 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10372)
vsftpd has been updated to fix one security issue : - Config option denyfile was not handled correctly bnc915522, bnc900326. CVE-2015-1419 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. Th...
SuSE 11.3 Security Update : xorg-x11-Xvnc (SAT Patch Number 10298)
xorg-x11-server has been updated to fix one security issue : - Check string lenghts in XkbSetGeometry request bnc915810 This non-security issue has been fixed :. CVE-2015-0255 - Option '-showopts' now works with all drivers bnc883051 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)
This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)
This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
SuSE 11.3 Security Update : Samba (SAT Patch Number 10321)
Samba has been updated to fix one security issue : - Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed :. CVE-2015-0240 - Realign the winbind request structure following requiremembershipof field expansion. bnc913001 - Reuse...
SuSE 11.3 Security Update : java-1_7_0-ibm (SAT Patch Number 10300)
java-170-ibm was updated to fix two security issues : - Unspecified vulnerability. CVE-2014-8891 - Unspecified vulnerability. CVE-2014-8892 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...
SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 10286)
java-170-openjdk was updated to fix 19 security issues. Details are available at http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tmlAppendixJAVA %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
SuSE 11.3 Security Update : libmpfr (SAT Patch Number 10212)
This update for libmpfr fixes a buffer overflow in mpfrstrtofr. CVE-2014-9474 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...
SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10225)
Mozilla Firefox has been updated to the 31.4.0ESR release, fixing bugs and security issues. Mozilla NSS has been updated to 3.17.3, fixing a security issue and updating the root certificate list. For more information, please see https://www.mozilla.org/en-US/security/advisories/ %NASLMINLEVEL 703...
SuSE 11.3 Security Update : curl (SAT Patch Number 10166)
This update fixes the following security issues : - URL request injection bnc911363 When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. CVE-2014-8150 If the given URL contains line feeds and carriage returns those will be sent alo...
SuSE 11.3 Security Update : flash-player (SAT Patch Number 10226)
Adobe Flash Player was updated to version 11.2.202.440 bsc914463, APSA15-01, CVE-2015-0311. More information can be found at https://helpx.adobe.com/security/products/flash-player/apsa15-01.html . An update of flashplayer executable binary for i386 is currently not available and was thus disabled...
SuSE 11.3 Security Update : Ruby (SAT Patch Number 10126)
The Ruby script interpreter has been updated to fix two denial of service attacks when expanding XML. CVE-2014-8080 / CVE-2014-8090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
SuSE 11 Security Update : glibc (SAT Patch Numbers 10202,10204,10206)
This update for glibc fixes the following security issue : - A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that can lead to a local or remote buffer overflow. bsc913646. CVE-2015-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10161)
The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
SuSE 11.3 Security Update : unzip (SAT Patch Number 10159)
This update fixes the following security issues : - heap overflow condition in the CRC32 verification. CVE-2014-8139 - write error 8349 shows a problem in extract.c:testcompreb. CVE-2014-8140 - read errors 6430, 3422 show problems in process.c:getZip64Data. CVE-2014-8141 %NASLMINLEVEL 70300 C...
SuSE 11.3 Security Update : bind (SAT Patch Number 10100)
bind has been updated to version 9.9.6P1, fixing the following security issue : - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow default 7, and the number of...
SuSE 11.3 Security Update : popt (SAT Patch Number 10097)
This rpm update fixes the following security and non security issues. - check for bad invalid name sizes. CVE-2014-8118. bnc908128 - create files with mode 0. CVE-2013-6435. bnc906803 - honor --noglob in install mode. bnc892431 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...