SuSE 11.1 Security Update : Mozillla Firefox (SAT Patch Number 4104)

Mozilla Firefox has been updated to version 3.6.15, fixing the following security issues : - Several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products have been identified and fixed. Some of these bugs showed evidence of memory corruption under certain...

SuSE 11.1 Security Update : gimp (SAT Patch Number 4107)

Several gimp plugins were prone to buffer overflows. CVE-2010-4540 / CVE-2010-4541 / CVE-2010-4542 / CVE-2010-4543 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...

SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4024)

IBM Java 1.4.2 SR13 was updated to FP8 to fix various bugs and security issues. The following security issues were fixed : - The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4039 / 4042 / 4043)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.29 and fixes various bugs and security issues. - The ax25getname function in net/ax25/afax25.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information...

SuSE 11.1 Security Update : acroread (SAT Patch Number 4057)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

SuSE 11.1 Security Update : acroread_ja (SAT Patch Number 4058)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

SuSE 11.1 Security Update : t1lib (SAT Patch Number 3789)

A heap overflow in the AFM font parser of DVI files has been fixed in t1lib. CVE-2010-2642 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

SuSE 11.1 Security Update : xpdf-tools (SAT Patch Number 3857)

This update of xpdf fixes an out-of-bounds write in CharCodeToUnicode.cc and a bad instruction pointer while parsing malformed PDF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : Sun Java 1.6 (SAT Patch Number 3976)

Sun Java 1.6 was updated to Update 24 fixing various bugs and security issues. The update is rated critical by Sun. The following CVEs were addressed : CVE-2010-4452 / CVE-2010-4454 / CVE-2010-4462 / CVE-2010-4463 / CVE-2010-4465 / CVE-2010-4467 / CVE-2010-4469 / CVE-2010-4473 / CVE-2010-4422 /...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 3926)

The Adobe Flash Player was updated to the 10.2.152.26 release, fixing lots of bugs and security issues. The update is rated critical by Adobe, although details have not been published. CVEs addressed: CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 /...

SuSE 11.1 Security Update : krb5 (SAT Patch Number 3839)

Multiple KDC DoS vulnerabilities if used with LDAP backends have been fixed in krb5. CVE-2011-0281 / CVE-2011-0282 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The te...

SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 3724)

IBM Java 6 SR9 was released which fixes a lot of security issues. IBM JDK Alerts can also be found on this page: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE ...

SuSE 11.1 Security Update : hplip (SAT Patch Number 3735)

Specially crafted SNMP replies could cause a buffer overflow in hplip's sane backend CVE-2010-4267. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.1 Security Update : moonlight (SAT Patch Number 3728)

Untrusted Moonlight apps could bypass constraints on methods which potentially allowed attackers to execute arbitrary code. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : openSLP (SAT Patch Number 3312)

The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration...

SuSE 11.1 Security Update : OpenOffice_org (SAT Patch Number 2586)

This update of OpenOfficeorg fixes the following security issue : - Arbitrary macros written in Python can be executed by bypassing macro security permissions. CVE-2010-0395 It also provides the maintenance update to OpenOffice.org-3.2.1. Details about all upstream changes can be found at...

SuSE 11.1 Security Update : libopenssl (SAT Patch Number 3661)

Malicious clients could downgrade a connection to a low strength cipher suite on session resumption if the server offers such ciphers. CVE-2010-4180 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : iSCSI (SAT Patch Number 2879)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

SuSE 11.1 Security Update : perl (SAT Patch Number 3804)

Multiple header injection problems in the CGI module of perl have been fixed. They allowed to inject HTTP headers in responses. CVE-2010-2761 / CVE-2010-4410 / CVE-2010-4411 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.1 Security Update : Linux Kernel (SAT Patch Numbers 2760 / 2763 / 2764)

This SUSE Linux Enterprise 11 Service Pack 1 kernel contains various security fixes and other bugfixes. Notable larger bug fixes and changes : - A deadlock in virtual interface handling in XEN introduced by the last update has been fixed. - The btrfs file system received backports of lots of fixe...