SuSE 11.3 Security Update : php53 (SAT Patch Number 9450)

php53 was updated to fix the following security vulnerabilities : - Heap-based buffer overflow in DNS TXT record parsing. CVE-2014-4049 - Denial of service in Fileinfo component. CVE-2014-0238 - Performance degradation by too many fileprintf calls. CVE-2014-0237 - NULL pointer dereference in GD X...

SuSE 11.3 Security Update : dbus-1 (SAT Patch Number 9349)

dbus-1 was patched to prevent a possible denial of service issue in dbus-daemon. CVE-2014-3477 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11.3 Security Update : KVM (SAT Patch Number 9302)

Several security issues in KVM have been fixed. Some issues could have resulted in arbitrary code execution or crash of the kvm host. - virtio-net: buffer overflow in virtionethandlemac function. CVE-2014-0150 - Fixed out of bounds buffer accesses, guest triggerable via IDE SMART. CVE-2014-2894 -...

SuSE 11.3 Security Update : openssl-certs (SAT Patch Number 9341)

openssl-certs has been updated to include four new and remove two certificates : - new: AtosTrustedRoot2011:2.8.92.51.203.98.44.95.179.50.crt - new: E-TugraCertificationAuthority:2.8.106.104.62.156.81.15 5.203.83.crt - new: TeliaSoneraRootCAv1:2.17.0.149.190.22.160.247.46.70.2...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 9203)

libvirt has been patched to fix two security issues. Further information is available at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0179 and http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6456 These security issues have been fixed : - Unsafe parsing of XML documents allows...

SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 9272)

xorg-x11-libs was patched to fix the following security issues : - Integer overflow of allocations in font metadata file parsing. CVE-2014-0209 - libxfont not validating length fields when parsing xfs protocol replies. CVE-2014-0210 - Integer overflows causing miscalculating memory needs for xfs...

SuSE 11.3 Security Update : IBM Java 6 (SAT Patch Number 9256)

BM Java 6 was updated to version 6 SR16 to fix several security issues and various other bugs. More information can be found at: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.3 Security Update : IBM Java 7 (SAT Patch Number 9263)

IBM Java 7 was updated to version SR7, which received security and bug fixes. More information is available at: http://www.ibm.com/developerworks/java/jdk/aix/j764/Java764.fixes.htm lSR7 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

SuSE 11.3 Security Update : libpng (SAT Patch Number 9170)

This libpng update fixes the following two overflow security issues. - Fixed integer overflow that could have lead to a heap-based buffer overflow in pngsetsPLT and pngsettext2. CVE-2013-7354. bnc873123 - Fixed integer overflow that could have lead to a heap-based buffer overflow in...

SuSE 11.3 Security Update : nagios-nrpe, nagios-nrpe-debuginfo, nagios-nrpe-debugsource, etc (SAT Patch Number 9204)

nagios-nrpe has been updated to prevent possible remote command execution when command arguments are enabled. This issue affects versions 2.15 and older. Further information is available at http://seclists.org/fulldisclosure/2014/Apr/240 These security issues have been fixed : - Remote command...

SuSE 11.3 Security Update : Ruby (SAT Patch Number 9136)

This Ruby update fixes the following security issue : - Fixed entity expansion DoS vulnerability in REXML. CVE-2013-1821. bnc808137 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : curl (SAT Patch Number 9133)

This curl update fixes the following security issues : - wrong re-use of connections. CVE-2014-0138. bnc868627 - IP address wildcard certificate validation. CVE-2014-0139. bnc868629 - --insecure option inappropriately enforcing security safeguard. bnc870444 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.3 Security Update : nagios-nrpe, nagios-nrpe-debuginfo, nagios-nrpe-debugsource, etc (SAT Patch Number 9204)

nagios-nrpe has been updated to prevent possible remote command execution when command arguments are enabled. This issue affects versions 2.15 and older. Further information is available at http://seclists.org/fulldisclosure/2014/Apr/240 These security issues have been fixed : - Remote command...

SuSE 11.3 Security Update : lxc (SAT Patch Number 9084)

The container framework LXC has been updated to fix various bugs and a security issue : - The sshd template allowed privilege escalation on the host. CVE-2013-6441 - SLES container time not aligned with host time. bnc839653 - SLES container boot takes ages. bnc839663 - lxc mounts /dev/pts with...

SuSE 11.3 Security Update : OpenJDK (SAT Patch Number 9209)

This java-170-openjdk update to version 2.4.7 fixes the following security and non-security issues : - Security fixes - S8023046: Enhance splashscreen support - S8025005: Enhance CORBA initializations - S8025010, CVE-2014-2412: Enhance AWT contexts - S8025030, CVE-2014-2414: Enhance stream handli...

SuSE 11.3 Security Update : kvm (SAT Patch Number 9142)

The QEMU embedded within KVM received various security fixes. Various issues in the block layer have been fixed : - A virtio security issue in config io space handling. CVE-2013-2016 - A SCSI report LUNs buffer overflow. CVE-2013-4344 - A buffer overflow in the QEMU USB stack. CVE-2013-4541...

SuSE 11.3 Security Update : squid3 (SAT Patch Number 9138)

A remote DoS attack in the Squid web proxy has been fixed. Due to incorrect state management, Squid was vulnerable to a denial of service attack when processing certain HTTPS requests. CVE-2014-0128 For more information see http://www.squid-cache.org/Advisories/SQUID-20141.txt . Additionally, a b...

SuSE 11.3 Security Update : nagios (SAT Patch Number 9071)

The monitoring service Nagios has been updated to fix potential buffer overflows in its CGI scripts. CVE-2014-1878 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...

SuSE 11.3 Security Update : strongswan (SAT Patch Number 9089)

The following security issue is fixed by this update : - strongswan has been updated to fix an authentication problem where attackers could have bypassed the IKEv2 authentication. CVE-2014-2338. bnc870572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

SuSE 11.3 Security Update : python-setuptools (SAT Patch Number 9116)

python-setuptools so far used only HTTP to retrieve packages, which could have lead to man in the middle attacks on newly installed python code. This update adjusts it to use HTTPS, guaranteeing better connection integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...