SuSE 11.3 Security Update : IBM Java (SAT Patch Number 9615)

java-160-ibm has been updated to fix ten security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 11.3 Security Update : IBM Java 1.7.0 (SAT Patch Number 9616)

IBM Java 1.7.0 has been updated to fix 14 security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 11.3 Security Update : glibc (SAT Patch Number 9477)

glibc has been updated to fix one security issue that could have resulted in free-after-use situations. More information can be found at http://seclists.org/oss-sec/2014/q2/519 This security issue has been fixed : - posixspawnfileactionsaddopen fails to copy the path argument CVE-2014-4043 Also a...

SuSE 11.3 Security Update : sendmail (SAT Patch Number 9345)

sendmail has been updated to fix the following security issue : - Not properly closing file descriptors before executing programs. CVE-2014-3956 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.3 Security Update : rxvt-unicode (SAT Patch Number 9421)

rxvt-unicode was updated to ensure that window property values can not be queried in secure mode. CVE-2014-3121 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright ...

SuSE 11.3 Security Update : libgadu (SAT Patch Number 9277)

A memory corruption vulnerability has been fixed in libgadu. CVE-2013-6487 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 11.3 Security Update : OpenSSL (SAT Patch Number 9326)

OpenSSL was updated to fix several vulnerabilities : - SSL/TLS MITM vulnerability. CVE-2014-0224 - DTLS recursion flaw. CVE-2014-0221 - Anonymous ECDH denial of service. CVE-2014-3470 Further information can be found at https://www.openssl.org/news/secadv/20140605.txt . %NASLMINLEVEL 70300 C...

SuSE 11.3 Security Update : libpng (SAT Patch Number 9170)

This libpng update fixes the following two overflow security issues. - Fixed integer overflow that could have lead to a heap-based buffer overflow in pngsetsPLT and pngsettext2. CVE-2013-7354. bnc873123 - Fixed integer overflow that could have lead to a heap-based buffer overflow in...

SuSE 11.3 Security Update : a2ps (SAT Patch Number 9064)

The text to postscript converter a2ps received a security update. The fixps script did not call ghostscript with the -DSAFER option, allowing command execution by attacker supplied postscript files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

SuSE 11.3 Security Update : freeradius (SAT Patch Number 8968)

This update fixes a denial of service crash security issue rlmpap hash processing in FreeRadius, which could have been caused by special passwords fed into the RLM-PAP password checking method via LDAP by remote attackers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11.3 Security Update : python-setuptools (SAT Patch Number 9116)

python-setuptools so far used only HTTP to retrieve packages, which could have lead to man in the middle attacks on newly installed python code. This update adjusts it to use HTTPS, guaranteeing better connection integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11.3 Security Update : mutt (SAT Patch Number 9023)

The mailreader mutt was updated to fix a security issue in displaying mail headers, where a crafted e-mail could cause a heap overflow, which in turn might be used by attackers to crash mutt or potentially even execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 8922)

This update of Adobe Flash Player fixes the following issues : - A stack overflow vulnerability that could have resulted in arbitrary code execution. CVE-2014-0498 - A memory leak vulnerability that could have been used to defeat memory address layout randomization. CVE-2014-0499 - A double free...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8876 / 8880)

This update resolves an integer underflow vulnerability that could have been exploited to execute arbitrary code on the affected system. CVE-2014-0497 More information: http://helpx.adobe.com/security/products/flash-player/apsb14-04.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.2 / 11.3 Security Update : curl (SAT Patch Numbers 8796 / 8797)

This update fixes the re-use of wrong HTTP NTLM connections in libcurl. CVE-2014-0015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.2 Security Update : openswan (SAT Patch Number 8815)

This update fixes a Denial of Service DoS vulnerability via IKEv2 I1 notifications in openswan. CVE-2013-7294 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.2 / 11.3 Security Update : nagios (SAT Patch Numbers 8726 / 8727)

This update fixes a DoS vulnerability in processcgivars of the nagios package. CVE-2013-7108 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8639 / 8640)

This update fixes the following security issues with flash-player : - flash-plugin: multiple code execution flaws APSB13-28. bnc854881 - These updates resolve a type confusion vulnerability that could lead to code execution. CVE-2013-5331 - These updates resolve a memory corruption vulnerability...

SuSE 11.2 / 11.3 Security Update : strongswan (SAT Patch Numbers 8488 / 8489)

This strongswan update fixes security issues and bugs : - Specially crafted XAuth usernames and EAP identities could cause a crash in strongswan. CVE-2013-5018 - A crafted ID packet can be used by remote attackers to crash the server or potentially gain authentication privileges under certain...

SuSE 11.2 / 11.3 Security Update : ruby (SAT Patch Numbers 8578 / 8579)

The following security issue has been fixed : - heap overflow in float point parsing. CVE-2013-4164 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...