SuSE 10 Security Update : ClamAV (ZYPP Patch Number 8526)

ClamAV has been updated to the 0.97.7 release that contains various security related hardening fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid65798;...

SuSE 10 Security Update : poppler (ZYPP Patch Number 8523)

This update of poppler fixes the following vulnerabilities : - Various invalid memory issues could be used by attackers supplying PDFs to crash the PDF viewer or potentially execute code. CVE-2013-1788 - A crash in poppler could be used by attackers providing PDFs to crash the PDF viewer...

SuSE 10 Security Update : Java (ZYPP Patch Number 8481)

IBM Java 1.4.2 has been updated to SR13-FP15 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information : http://www.ibm.com/developerworks/java/jdk/alerts/ Security issues fixed : - / CVE-2013-0443. CVE-2013-1478 / CVE-2013-1480 / CVE-2013-1476 ...

SuSE 10 Security Update : Perl (ZYPP Patch Number 8479)

This update of Perl 5 fixes the following security issues : - fix rehash DoS bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - fix glob denial of service bnc796014 CVE-2011-2728 - sanitize input in Maketext.pm bnc797060 CVE-2012-6329 - make getgrent work with long grou...

SuSE 10 Security Update : apache2 (ZYPP Patch Number 8443)

This update fixes the following security issues with apache2 httpd : - Improper LDLIBRARYPATH handling. CVE-2012-0883 - Filename escaping problem CVE-2012-2687 Additionally, some non-security bugs have been fixed as enumerated in the changelog of the RPM. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 8475)

pidgin was updated to fix 4 security issues : - Fixed a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274, bnc804742 - Fixed a crash in Sametime protocol when a malicious server sends us an abnormally long user ID. CVE-2013-0273, bnc804742 - Fixed a bug where the MXit...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8476)

flash-player has been updated to 11.2.202.273 security update, which fixes several critical security bugs that could have been used by remote attackers to execute code. CVE-2013-0504 / CVE-2013-0643 / CVE-2013-0648 More information can be found on :...

SuSE 10 Security Update : nagios (ZYPP Patch Number 8460)

This update fixes a stack overflow in the nagios web interface. CVE-2012-6096 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid64927;...

SuSE 10 Security Update : inkscape (ZYPP Patch Number 8471)

inkscape has been updated to fix a XXE Xml eXternal Entity attack during rasterization of SVG images. CVE-2012-5656, where the rendering of malicious SVG images could have connected from inkscape to internal hosts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : acroread (ZYPP Patch Number 8474)

Acrobat Reader was updated to 9.5.4 which fixes two critical security issues where attackers supplying PDFs could have caused code execution with acrobat. CVE-2013-0640 / CVE-2013-0641 More information can be found on : https://www.adobe.com/support/security/bulletins/apsb13-07.html %NASLMINLEVEL...

SuSE 10 Security Update : squid (ZYPP Patch Number 8464)

A denial of service problem in Squid via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8458)

Adobe Flash Player was updated to release 11.2.202.262, fixing bugs and security issues. CVE-2013-0633 / CVE-2013-0634 More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-04.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 8397)

This update of tomcat5 fixed the following security issues : - tomcat: cnonce tracking weakness. CVE-2012-5885 - tomcat: stale nonce weakness. CVE-2012-5887 - tomcat: authentication caching weakness. CVE-2012-5886 - tomcat: affected by slowloris DoS. CVE-2012-5568 - tomcat: Bypass of security...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 8419)

Various memory corruption vulnerabilities have been fixed in libtiff. CVE-2012-4447 / CVE-2012-4564 / CVE-2012-5581 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8431)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 / CVE-2013-0601 / CVE-2013-0602 / CVE-2013-0603 / CVE-2013-0604 / CVE-2013-06...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8417)

flash player was updated to 11.2.202.261. More details can be found on https://www.adobe.com/support/security/bulletins/apsb13-01.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

SuSE 10 Security Update : ofed (ZYPP Patch Number 8386)

This update of ofed fixed multiple issues including security related flaws : - sdp: move histogram allocation from stack to heap. bnc706175 - cma: Fix crash in request handlers. bnc678795, CVE-2011-0695 - rds: set correct msgnamelen. bnc773383, CVE-2012-3430 - cm: Bump reference count on cmid...

SuSE 10 Security Update : glibc (ZYPP Patch Number 8387)

This update for GNU C library glibc fixes multiple integer overflows in strtod and related functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid63295;...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 8392)

A heap-based buffer underflow in the entity decoding of libxml2 could have caused a Denial of Service or potentially allowed the execution of arbitrary code. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : libotr (ZYPP Patch Number 8377)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid63072;...