SuSE 10 Security Update : compat-curl2 (ZYPP Patch Number 8621)

This update of compat-curl2 fixes a security vulnerability : - libcurl URL decode buffer boundary flaw bnc824517 / CVE-2013-2174 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : openswan (ZYPP Patch Number 8627)

This openswan update fixes a remote buffer overflow issue. bnc824316 / CVE-2013-2053 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67199; scriptversion"1.5";...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 8576)

This update for gpg2 provides the following fixes : - Set proper file permissions when en/de-crypting files. bnc780943 - Fix an issue that could cause corruption of the public keys database. CVE-2012-6085, 798465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : gpg (ZYPP Patch Number 8575)

This update for gpg provides the following fixes : - Set proper file permissions when en/de-crypting files. bnc780943 - Fix an issue that could cause corruption of the public keys database. CVE-2012-6085, bnc798465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 8601)

IBM Java 1.4.2 has been updated to SR13-FP17 fixing bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Java 1.5.0 (ZYPP Patch Number 8593)

IBM Java 1.5.0 has been updated to SR13-FP2 which fixes several bugs and security issues. For more details see : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : xorg-x11-server (ZYPP Patch Number 8561)

In some cases, input events are sent to X servers not currently the VT owner, allowing a user to capture passwords. This update fixes this issue. CVE-2013-1940 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, In...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8570)

Adobe flash-player has been updated to 11.2.202.285 security update, which fixes various remote code execution problems and other security issues. Some more details can be found on: https://www.adobe.com/support/security/bulletins/apsb13-14.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 8564)

This update fixes two buffer overflow security issues with libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid66465; scriptversion"1.4";...

SuSE 10 Security Update : sudo (ZYPP Patch Number 8562)

This update fixes the following security issues which allowed to bypass the sudo authentication: CVE-2013-1775 / CVE-2013-1776 / CVE-2013-2776 / CVE-2013-2777. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : compat-curl2 (ZYPP Patch Number 8557)

This update of compat-curl2 fixes several security issues. - fixes for the cookie domain tailmatch vulnerability. bnc814655 - updated curl CA-Cert Bundle. bnc810010 - fixes for a potential BEAST attack bnc742306 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : curl, curl (ZYPP Patch Number 8550)

This update fixes the cookie domain tailmatch vulnerability in curl. CVE-2013-1944 has been assigned to this issue. Also the CA-Cert Bundle has been updated to the current state. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 8513)

libxml2 has been updated to fix entity expansion problems : - Internal entity expansion within XML was not bounded, leading to simple small XML files being able to cause 'out of memory' denial of service conditions. CVE-2013-0338 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : java-1_6_0-ibm (ZYPP Patch Number 8544)

IBM Java 6 was updated to SR13 FP1, fixing bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ and on : http://www.ibm.com/developerworks/java/jdk/aix/j664/Java664.fixes.htm lSR13FP1 Security issues: - CVE-2013-0485- CVE-2013-0809 -...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8542)

IBM Java 5 has been updated to SR16 FP1 which bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ and on : http://www.ibm.com/developerworks/java/jdk/aix/j564/fixes.htmlSR16FP1 CVEs fixed: CVE-2013-0485 / CVE-2013-0809 / CVE-2013-1493...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8543)

IBM Java 1.4.2 has been updated to SR13 FP16 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ and on : https://www.ibm.com/developerworks/java/jdk/aix/14264/fixes.htmlSR13 FP16 CVEs fixed: CVE-2013-0485 / CVE-2013-0809 /...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8539)

Adobe Flash Player has been updated to 11.2.202.280 to fix various bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-11.html - APSB13-11, CVE-2013-1378 / CVE-2013-1379 / CVE-2013-1380 / CVE-2013-2555 %NASLMINLEVEL 70300 C Tenable...

SuSE 10 Security Update : Apache (ZYPP Patch Number 8530)

Apache2 has been updated to fix multiple XSS flaws. - Multiple cross-site scripting XSS vulnerabilities in the balancerhandler function in the manager interface in modproxybalancer.c in the modproxybalancer module in the Apache HTTP Server potentially allowed remote attackers to inject arbitrary...

SuSE 10 Security Update : ClamAV (ZYPP Patch Number 8526)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid65798;...

SuSE 10 Security Update : poppler (ZYPP Patch Number 8523)

This update of poppler fixes the following vulnerabilities : - Various invalid memory issues could be used by attackers supplying PDFs to crash the PDF viewer or potentially execute code. CVE-2013-1788 - A crash in poppler could be used by attackers providing PDFs to crash the PDF viewer...