SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 6301)

A stack overflow in dhcpcd was fixed which could be used by network local attackers to crash the dhcpcd and so causing loss of DHCP functionality. CVE-2012-2152 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.1 / 11.2 Security Update : bind (SAT Patch Numbers 6604 / 6605)

The bind nameserver was updated to fix a crash denial of service that might have happened during high DNSSEC validation load. CVE-2012-3817 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 6678)

This update of flash-player fixes a security issue that could allow attackers to execute arbitrary code remotely. CVE-2012-1535 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6252)

This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in PHP5. CVE-2012-1172 - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal apache module mode setup...

SuSE 11.1 Security Update : pidgin, finch and libpurple (SAT Patch Number 6534)

This update of pidgin fixes a stack-based buffer overflow in the MXit protocol which could have potentially been exploited by remote attackers to execute arbitrary code in the context of the user running pidgin. CVE-2012-3374 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 6225)

IBM Java 1.6.0 was updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.2 Security Update : compat-openssl097g (SAT Patch Number 6749)

This compat-openssl097g rollup update contains various security fixes : - incorrect integer conversions in OpenSSL could have resulted in memory corruption during buffer management operations. CVE-2012-2131 / CVE-2012-2110 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11.2 Security Update : IBM Java 1.6.0 (SAT Patch Number 7095)

IBM Java 1.6.0 has been updated to SR12 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3159 / CVE-2012-3216 / CVE-2012-5068 / CVE-2012-3143 / CVE-2012-5073 / CVE-2012-5075 / CVE-2012-5083 /...

SuSE 11.1 Security Update : openssl (SAT Patch Number 6350)

This update of openssl fixes the following denial of service vulnerabilities : - Denial of Service via CBC mode handling. CVE-2012-2333 - A deadlock condition introduced by the previous memory leak fix due to entering a lock twice. This would only happen in multithreaded programs. In addition,...

SuSE 11.1 Security Update : IBM Java (SAT Patch Number 6360)

IBM Java 1.4.2 SR13 FP12 has been released which fixes various bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ has more informations. CVEs addressed: CVE-2011-3563 / CVE-2012-0499 / CVE-2012-0502 / CVE-2012-0503 / CVE-2012-0505 / CVE-2012-0506 %NASLMINLEVEL 70300 C...

SuSE 11.2 Security Update : IBM Java (SAT Patch Number 6791)

IBM Java 1.4.2 was updated to SR13-FP13 that fixes bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ Also one bug has been fixed : - fix bnc771808: create symlink /usr/bin/javaws properly %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.2 Security Update : OpenJDK (SAT Patch Number 6772)

The following security issues have been fixed : - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder - S7163201, CVE-2012-0547: Simplify toolkit internals references %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.2 Security Update : IBM Java (SAT Patch Number 6793)

IBM Java 1.5.0 was updated to SR11 which fixes bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ Also three bugs have been fixed : - fix bnc771808: create symlink /usr/bin/javaws properly - fix bnc666744: mark all configuration files as %confignoreplace - fix bnc773021:...

SuSE 11.1 Security Update : boost (SAT Patch Number 6507)

The following issue has been fixed : - boost::pool's orderedmalloc could have overflowed when calculating the allocation size. CVE-2012-2677 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.2 Security Update : dbus-1 (SAT Patch Number 6733)

This update fixes a vulnerability in the DBUS auto-launching feature that allowed local users to execute arbitrary programs as root. CVE-2012-3524 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : taglib (SAT Patch Number 6179)

The following issue has been fixed : - specially crafted ogg files could have crashed taglib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11.1 Security Update : clamav (SAT Patch Number 6474)

The following issue has been fixed : - Viruses contained in specially crafted tar or CHM files could have evaded detection by clamav. CVE-2012-1457 / CVE-2012-1458 / CVE-2012-1459 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.2 Security Update : libotr (SAT Patch Number 7076)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.1 Security Update : expat (SAT Patch Number 6200)

This update of expat fixes the following bugs : - hash collision attack that could lead to exessive CPU usage. CVE-2012-0876 - expat didn't close file descriptors in some cases. CVE-2012-1147 - specially crafted xml files could lead to a memory leak CVE-2012-1148 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.1 Security Update : php5 (SAT Patch Number 6627)

This update fixes two security issues of PHP5 : - Potential overflow in phpstreamscandir. CVE-2012-2688 - openbasedir bypass via SQLite extension. CVE-2012-3365 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...