SuSE 11.3 Security Update : MySQL (SAT Patch Number 9624)

This MySQL update provides the following : - upgrade to version 5.5.39, bnc887580 - CVE's fixed: CVE-2014-2484 / CVE-2014-4258 / CVE-2014-4260 / CVE-2014-2494 / CVE-2014-4238 / CVE-2014-4207 / CVE-2014-4233 / CVE-2014-4240 / CVE-2014-4214 / CVE-2014-4243 See also:...

SuSE 11.3 Security Update : gpgme (SAT Patch Number 9644)

This gpgme update fixes the following security issue : - Fix possible overflow in gpgsm and uiserver engines CVE-2014-3564. bnc890123 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9606)

This MIT krb5 update fixes a buffer overrun problem in kadmind : - buffer overrun in kadmind with LDAP back end MITKRB5-SA-2014-001 CVE-2014-4345 MIT krb5 Security Advisory 2014-001. bnc891082 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-0 01.txt %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : CUPS (SAT Patch Number 9561)

This update fixes various issues in CUPS. - Various insufficient symbolic link checking could have lead to privilege escalation from the lp user to root. CVE-2014-3537 / CVE-2014-5029 / CVE-2014-5030 / CVE-2014-5031 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : tomcat6 (SAT Patch Number 9487)

Tomcat has been updated to version 6.0.41, which brings security and bug fixes. The following security fixes have been fixed : - A XXE vulnerability via user-supplied XSLTs. CVE-2014-0096 - Request smuggling via malicious content length header. CVE-2014-0099 - A XML parser hijack by malicious web...

SuSE 11.3 Security Update : pulseaudio (SAT Patch Number 9568)

The following security issue is fixed in this update : - Fixed a remote denial of service attack in module-rtp-recv. CVE-2014-3970 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : Python (SAT Patch Number 9581)

This update for Python provides fixes for the following issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters. CVE-2014-4650 - The 'urlparse' module has been updated to correctly parse IPv6 addresses. bnc872848 - Correctly enable IPv6 support. %NASLMINLEV...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9564)

The following security issues have been fixed in kerberos 5 : - Two denial of service flaws when handling RFC 1964 tokens. CVE-2014-4341 / CVE-2014-4342 - Multiple flaws in SPNEGO. CVE-2014-4343 / CVE-2014-4344 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.3 Security Update : apache2-mod_security2 (SAT Patch Number 9585)

This apache2-modsecurity2 update fixes the following security issue : - bypass of intended rules via chunked requests CVE-2013-5705. bnc871309 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.3 Security Update : openjdk (SAT Patch Number 9543)

This Critical Patch Update contains 20 new security fixes for Oracle Java SE. All of these vulnerabilities could have been remotely exploitable without authentication, i.e., could be exploited over a network without the need for a username and password. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 9569)

Mozilla Firefox has been updated to the 24.7ESR security release. Security issues fixed in this release : - https://www.mozilla.org/security/announce/2014/mfsa2014- 63.html. CVE-2014-1544 - https://www.mozilla.org/security/announce/2014/mfsa2014- 56.html. CVE-2014-1548 -...

SuSE 11.3 Security Update : kdirstat (SAT Patch Number 9515)

The following security issue has been fixed : - 868682: CVE-2014-2527 / CVE-2014-2528: kdirstat: command injection in kcleanup %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 11.3 Security Update : libtasn1 (SAT Patch Number 9528)

libtasn1 has been updated to fix three security issues : - asn1getbitder could have returned negative bit length. CVE-2014-3468 - Multiple boundary check issues could have allowed DoS. CVE-2014-3467 - Possible DoS by NULL pointer dereference in asn1readvaluetype CVE-2014-3469 %NASLMINLEVEL 70300 ...

SuSE 11.3 Security Update : glibc (SAT Patch Number 9477)

glibc has been updated to fix one security issue that could have resulted in free-after-use situations. More information can be found at http://seclists.org/oss-sec/2014/q2/519 This security issue has been fixed : - posixspawnfileactionsaddopen fails to copy the path argument CVE-2014-4043 Also a...

SuSE 11.3 Security Update : lzo (SAT Patch Number 9506)

lzo was updated to fix a potential denial of service issue or possible remote code execution by allowing an attacker, if the LZO decompression algorithm is used in a threaded or kernel context, to corrupt memory structures that control the flow of execution in other contexts. CVE-2014-4607...

SuSE 11.3 Security Update : Samba (SAT Patch Number 9451)

"Samba has been updated to fix two security issues and one non-security issue. These security issues have been fixed : - Fix segmentation fault in smbdmarshaldirentry's SMBFINDFILEUNIXhandler. CVE-2014-3493 - Fix nmbd denial of service. CVE-2014-0244 - Fix malformed FSCTLSRVENUMERATESNAPSHOTS...

SuSE 11.3 Security Update : kdebase4-workspace (SAT Patch Number 9467)

This kdebase4-workspace update fixes two security issues : - NULL pointer dereference in KDM and KCheckPass. CVE-2013-4132 - Memory leak that could lead to a denial of service. CVE-2013-4133 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

SuSE 11.3 Security Update : puppet (SAT Patch Number 9472)

Puppet was updated to fix the following security issues : - Unsafe use of temporary files. CVE-2013-4969 - Arbitrary code execution with required social engineering. CVE-2014-3248 / CVE-2014-3250 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11.3 Security Update : xalan-j2 (SAT Patch Number 9426)

xalan-j2 has been updated to ensure that secure processing can't be circumvented. CVE-2014-0107 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. i...

SuSE 11.3 Security Update : sendmail (SAT Patch Number 9345)

sendmail has been updated to fix the following security issue : - Not properly closing file descriptors before executing programs. CVE-2014-3956 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...