SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7585)

This update to version 9.1.9 fixes : - Fix insecure parsing of server command-line switches. CVE-2013-1899 - Reset OpenSSL randomness state in each postmaster child process. CVE-2013-1900 - Make REPLICATION privilege checks test current user not authenticated user. CVE-2013-1901 %NASLMINLEVEL 703...

SuSE 11.2 Security Update : jakarta (SAT Patch Number 7574)

The following issue has been fixed : - SSL certificate hostname verification was not done and is fixed by this update. CVE-2012-5783 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

SuSE 11.2 Security Update : ClamAV (SAT Patch Number 7557)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.2 Security Update : PostgreSQL (SAT Patch Number 7340)

PostgreSQL has been updated to version 8.3.23 which fixes various bugs and one security issue. The security issue fixed in this release, CVE-2013-0255, allowed a previously authenticated user to crash the server by calling an internal function with invalid arguments. This issue was discovered by...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7464)

Mozilla Firefox has been updated to the 17.0.4ESR release which fixes one important security issue : - VUPEN Security, via TippingPoint's Zero Day Initiative, reported a use-after-free within the HTML editor when content script is run by the document.execCommand function while internal editor...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7491)

Adobe Flash Player has been updated to security release 11.2.202.275 APSB13-09, fixing severe security issues. CVE-2013-0646 / CVE-2013-0650 / CVE-2013-1371 / CVE-2013-1375 More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-09.html %NASLMINLEVEL 70300 C...

SuSE 11.2 Security Update : Java (SAT Patch Number 7450)

IBM Java 1.4.2 has been updated to SR13-FP15 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2013-0443. CVE-2013-1478 / CVE-2013-1480 / CVE-2013-1476 ...

SuSE 11.2 Security Update : Java (SAT Patch Number 7454)

IBM Java 7 was updated to SR4, fixing various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2012-3174. CVE-2013-1487 / CVE-2013-1486 / CVE-2013-1478 / CVE-2013-0445 /...

SuSE 11.2 Security Update : Perl (SAT Patch Number 7439)

This update of Perl 5 fixes the following security issues : - fix rehash DoS bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - fix glob denial of service bnc796014 CVE-2011-2728 - sanitize input in Maketext.pm bnc797060 CVE-2012-6329 %NASLMINLEVEL 70300 C Tenable Netwo...

SuSE 11.2 Security Update : ruby (SAT Patch Number 7386)

The ruby interpreter received a fix for a security issue : - Ruby's $SAFE mechanism enables untrusted user codes to run in $SAFE = 4 mode. This is a kind of sandboxing so some operations are restricted in that mode to protect other data outside the sandbox. CVE-2012-4466 The problem found was...

SuSE 11.2 Security Update : Java (SAT Patch Number 7457)

This release of Icedtea6-1.12.4 fixes the following two issues that allowed a remote attacker to execute arbitrary code remotely by providing crafted images to the affected code. - CVE-2013-0809: CVSS v2 Base Score: 6.8 critical AV:N/AC:M/Au:N/C:P/I:P/A:P: Insufficient Information CWE-noinfo -...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7447)

Mozilla Firefox has been updated to the 17.0.3ESR release. Important: due to compatibility issues, the Beagle plug-in for MozillaFirefox is temporarily disabled by this update. Besides the major version update from the 10ESR stable release line to the 17ESR stable release line, this update brings...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7431)

flash-player has been updated to 11.2.202.273 security update, which fixes several critical security bugs that could have been used by remote attackers to execute code. CVE-2013-0504 / CVE-2013-0643 / CVE-2013-0648 More information can be found on :...

SuSE 11.2 Security Update : inkscape (SAT Patch Number 7380)

inkscape was updated to fix a XXE Xml eXternal Entity attack during rasterization of SVG images CVE-2012-5656, where the rendering of malicious SVG images could have connected from inkscape to internal hosts. Also inkscape would have loaded .EPS files from untrusted /tmp occasionaly instead from...

SuSE 11.2 Security Update : squid3 (SAT Patch Number 7336)

A denial of service problem in Squid3 initiated via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 Also a logrotate permission issue has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.2 Security Update : libvirt (SAT Patch Number 7310)

libvirt was updated to fix the following security issue : - A flaw was found in the way message freeing on connection cleanup was handled under certain error conditions. A remote user able to issue commands to libvirt daemon could use this flaw to crash libvirtd or, potentially, escalate their...

SuSE 11.2 Security Update : Java 1.6.0 (SAT Patch Number 7332)

java-160-openjdk based on Icedtea6-1.12.2 was released, fixing various security issues : New in release 1.12.2 2012-02-03 : - Security fixes - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name ...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7326)

Adobe Flash Player was updated to release 11.2.202.262, fixing bugs and security issues. CVE-2013-0633 / CVE-2013-0634 More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-04.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.2 Security Update : MySQL (SAT Patch Number 7251)

A stack-based buffer overflow in MySQL has been fixed that could have caused a Denial of Service or potentially allowed the execution of arbitrary code. CVE-2012-5611 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Su...