openSUSE 10 Security Update : dbus-1 (dbus-1-5683)

This update fixes a denial of service bug in dbus. CVE-2008-3834 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-5683. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : bluez-audio (bluez-audio-5441)

Missing length checks in bluez-libs could cause a buffer overflow in Bluetooth applications. Malicious bluetooth devices could potentially exploit that to execute arbitrary code CVE-2008-2374. Note: The source code of each application that uses vulnerable functions of bluez-libs needs to be adapt...

openSUSE 10 Security Update : pam_mount (pam_mount-5598)

pammount allowed users to mount arbitrary devices to any directory when the 'luserconf' configuration directive was set CVE-2008-3970. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : claws-mail (claws-mail-5611)

clamav has been updated due to security problems. The version number of the clamav library has been changed with that update. Therefore programs like claws-mail that are linked against libclamav need to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE 10 Security Update : tomcat55 (tomcat55-5547)

This update of tomcat fixes another directory traversal bug which occurs when allowLinking and UTF-8 are enabled. CVE-2008-2938 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tomcat55-5547. T...

openSUSE 10 Security Update : clamav (clamav-5578)

This version update to 0.94 fixes numerous problems including some security relevant ones CVE-2008-3912, CVE-2008-1389, CVE-2008-3913, CVE-2008-3914. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE 10 Security Update : opera (opera-5537)

This is a version upgrade for opera to version 9.52 to fix possible security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5537. The text description of this plugin is...

openSUSE 10 Security Update : python (python-5491)

This update of python fixes several security vulnerabilities. CVE-2008-1679,CVE-2008-1887, CVE-2008-3143, CVE-2008-3142, CVE-2008-3144, CVE-2008-2315, CVE-2008-2316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE 10 Security Update : rdesktop (rdesktop-5271)

Multiple problems have been fixed in rdesktop. CVE-2008-1801, CVE-2008-1802 and CVE-2008-1803 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rdesktop-5271. T...

openSUSE 10 Security Update : pdns (pdns-5510)

This update of pdns offers better spoofing resistance by not ignoring invalid queries. CVE-2008-3337 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pdns-5510. The text description of this...

Design/Logic Flaw

zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of service package data corruption via a spoofed key...

CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...

CVE-2008-2667

SQL injection vulnerability in the Courier Authentication Library aka courier-authlib before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified...

CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...

CVE-2008-3067

CVE-2008-3067 affects sudo in SUSE/openSUSE 10.3 . The issue is that the process does not clear the standard input buffer when password entry times out, which could allow a local user to obtain the password by reading stdin from the parent process after the sudo child process exits. The provided ...

CVE-2008-3067

sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...

CVE-2008-2667

SQL injection vulnerability in the Courier Authentication Library aka courier-authlib before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified...

openSUSE 10 Security Update : epiphany (epiphany-5293)

mozilla-xulrunner181 was updated to version 1.8.1.14, fixing various bugs including 1 security bug : + MFSA 2008-20/CVE-2008-1380: Crash in JavaScript garbage collector %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE 10 Security Update : dbus-1 (dbus-1-5049)

This update of dbus-1 fixes a vulnerability caused by applying the policies incorrectly. CVE-2008-0595 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-5049. The text description of this...

openSUSE 10 Security Update : kdelibs3 (kdelibs3-4863)

This update is necessary to support the new FlashPlayer version, which required XEmbed support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdelibs3-4863. The text description of this plug...