SuSE 10 Security Update : ImageMagick.rpm (ZYPP Patch Number 6284)

This update of ImageMagick fixes an integer overflow in the XMakeImage function that allowed remote attackers to cause a denial-of-service and possibly the execution of arbitrary code via a crafted TIFF file. CVE-2009-1882 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SuSE 10 Security Update : avahi (ZYPP Patch Number 6787)

The avahi-daemon reflector could cause packet storms when reflecting legacy unicast mDNS traffic CVE-2009-0758. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 6769)

Specially crafted Flash SWF files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-3794 / CVE-2009-3796 / CVE-2009-3797 / CVE-2009-3798 / CVE-2009-3799 / CVE-2009-3800 / CVE-2009-3951 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : Xine (ZYPP Patch Number 6229)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6161)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...

SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 Acrobat reader was updated to version 9.3 to fix thos...

SuSE 10 Security Update : Realplayer and banshee (ZYPP Patch Number 7122)

The security support of Real Player 10 was discontinued a while ago by Real Networks. As there are known critical security problems in Real Player 10 and we are unable to fix them nor update to Real Player 11, we are disabling this player. The media player of SUSE Linux Enterprise Desktop 10, Hel...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6331)

This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...

SuSE 10 Security Update : IBM Java 6 SR9 (ZYPP Patch Number 7312)

IBM Java 6 SR9 was released, fixing a lot of security issues. IBM JDK Alerts can also be found on this page: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : gaim (ZYPP Patch Number 6350)

malformed responses to file transfers could cause a buffer overflow in pidgin. CVE-2009-1373 - the fix against integer overflows in the msn protocol handling was incomplete. CVE-2009-1376 - certain ICQ message types could crash pidgin. CVE-2009-1889 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6710)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6585)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...

SuSE 10 Security Update : gimp (ZYPP Patch Number 6880)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...

SuSE 10 Security Update : libwmf (ZYPP Patch Number 6213)

A specially crafted WMF files could crash libwmf. CVE-2009-1364 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51755; scriptversion"1.6";...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6463)

This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6398)

This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...

SuSE 10 Security Update : Novell ipsec tools (ZYPP Patch Number 6306)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : subversion (ZYPP Patch Number 6423)

This update of subversion fixes some buffer overflows in the client and server code that can occur while parsing binary diffs. CVE-2009-2411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Xine (ZYPP Patch Number 6050)

Specially crafted 4x movie files could cause an integer overflow in xine-lib. CVE-2009-0698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51769;...