SuSE 11.2 Security Update : libssh2 (SAT Patch Number 7073)

This update of libssh fixes multiple integer overflows. CVE-2012-4562 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 6187)

ecryptfs-utils was updated to fix a security issue and some bugs. Security issue fixed: mount.ecryptfsprivate did not set correct group ownerships when it modifies mtab. CVE-2011-3145 Also some bugs that made this set of tools non-working were fixed. You need to manually hand setuid root...

SuSE 11.1 Security Update : MySQL (SAT Patch Number 6613)

MySQL has been upgraded to version 5.0.96 to fix several vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0...

SuSE 11.2 Security Update : Xen and libvirt (SAT Patch Number 6640)

Xen was updated to fix several security issues : - A xen HVM guest destroy p2m teardown host DoS vulnerability was fixed, where malicious guest could lock/crash the host. CVE-2012-3433 - A xen HVM guest user mode MMIO emulation DoS was fixed. CVE-2012-3432 - The xen pv bootloader doesn't check th...

SuSE 11 Security Update : GNOME screensaver (SAT Patch Number 2150)

When resuming a system, gnome-screensaver does not lock external displays that got connected while the system was suspended. CVE-2010-0285 - Pressing the 'Return' key repeatedly caused an X error that terminated gnome-screensaver. CVE-2010-0732 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11.2 Security Update : bogofilter (SAT Patch Number 7135)

A heap corruption in bogofilter's base64 decoding function, caused by incomplete multibyte characters, could have resulted in a Denial of Service App. crash or potentially allowed the execution of arbitrary code. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.1 Security Update : libopenssl (SAT Patch Number 6521)

This update adds libopenssl098-hmac packages, that, when installed, will enforce FIPS 140-2 self-test being run upon first use of the library. If FIPS mode is enforced, these new packages are required in order to enable FIPS mode successfully. The update also imposes limits on the parameters of a...

SuSE 11.2 Security Update : Mono (SAT Patch Number 6543)

Mono was updated to fix a cross-site scripting attack in the System.Web class 'forbidden extensions' filtering has been fixed. CVE-2012-3382 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.1 Security Update : openssh (SAT Patch Number 6672)

This collective security update of openssh fixes multiple security issues : - memory exhaustion in gssapi due to integer overflow. bnc756370, CVE-2011-5000 - forced command option information leak bnc744643, CVE-2012-0814 Additionally, the following bug has been fixed : - server-side delay upon...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 6571)

This update fixes several libxml2 integer overflows which could have been used to crash libxml2 parsers or potentially execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.2 Security Update : libsoup (SAT Patch Number 6520)

libsoup without ca path added, accepted all SSL certificats as trusted. This has been fixed. CVE-2012-2132 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. T...

SuSE 11.2 Security Update : IBM Java (SAT Patch Number 6793)

IBM Java 1.5.0 was updated to SR11 which fixes bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ Also three bugs have been fixed : - fix bnc771808: create symlink /usr/bin/javaws properly - fix bnc666744: mark all configuration files as %confignoreplace - fix bnc773021:...

SuSE 11.1 Security Update : gimp (SAT Patch Number 6712)

This update of The Gimp fixes a heap overflow that could have been exploited by attackers to cause a Denial of Service application crash or to potentially execute arbitrary code. CVE-2012-3481 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11.1 Security Update : openssl (SAT Patch Number 6245)

This update of openssl fixes an integer conversation issue which could cause a heap-based memory corruption. CVE-2012-2110 Additionally, a check for negative buffer length values was added CVE-2012-2131 and the stack made non-executable by marking the enhanced Intel SSSE3 assembler code as not...

SuSE 11.2 Security Update : dhcp (SAT Patch Number 6606)

This update provides dhcp 4.2.4-p1, which fixes the dhcpv6 server crashing while accessing the lease on heap and provides the following additional fixes : - Security fixes : - Previously the server code was relaxed to allow packets with zero length client ids to be processed. Under some situation...

SuSE 11.2 Security Update : dbus-1 (SAT Patch Number 6733)

This update fixes a vulnerability in the DBUS auto-launching feature that allowed local users to execute arbitrary programs as root. CVE-2012-3524 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : clamav (SAT Patch Number 6474)

The following issue has been fixed : - Viruses contained in specially crafted tar or CHM files could have evaded detection by clamav. CVE-2012-1457 / CVE-2012-1458 / CVE-2012-1459 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : boost (SAT Patch Number 6507)

The following issue has been fixed : - boost::pool's orderedmalloc could have overflowed when calculating the allocation size. CVE-2012-2677 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.2 Security Update : libotr (SAT Patch Number 7076)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.2 Security Update : Acrobat Reader (SAT Patch Number 7230)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 / CVE-2013-0601 / CVE-2013-0602 / CVE-2013-0603 / CVE-2013-0604 / CVE-2013-06...