SuSE 11 Security Update : mutt (SAT Patch Number 1601)

This update improves the handling of SSL certificates and fixes a minor usability bug introduced with the last security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

SuSE 11 Security Update : IBM Java 1.4.2 (SAT Patch Number 1525)

IBM Java 1.4.2 was updated to Service Refresh 13 Fixpack 2 At least following security issues are fixed by this update: CVE-2009-1100: A vulnerability in the Java Runtime Environment JRE with storing temporary font files might allow an untrusted applet or application to consume a disproportionate...

SuSE 11 Security Update : expat (SAT Patch Number 1487)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat. CVE-2009-3720 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The te...

SuSE 11 Security Update : OpenSSL (SAT Patch Number 1544)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SuSE 11 Security Update : libopenssl (SAT Patch Number 1540)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

SuSE 11 Security Update : libqt4 (SAT Patch Number 1522)

This update fixes the handling of the subjectAltName field in SSL certificates. CVE-2009-2700 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : Cyrus IMAPD (SAT Patch Number 1335)

This update fixes another buffer overflow in the Sieve code CVE-2009-3235. This can be exploited by users allowed to use their own sieve scripts to execute arbitrary code remotely. Additionally the handling of long headers was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)

Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...

SuSE 11 Security Update : Samba (SAT Patch Number 1352)

samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition. CVE-2009-290...

SuSE 11 Security Update : PHP5 (SAT Patch Number 1339)

Multiple issues have been fixed in php5 : - phpopensslapplyverificationpolicy fails to verify certificate. CVE-2009-3291 - 'missing sainity checks around exif'. CVE-2009-3292 - unspecified vulnerability in the imagecolortransparent. CVE-2009-3293 - denial of service in exif module CVE-2009-2687...

SuSE 11 Security Update : libssh (SAT Patch Number 1326)

Various overflow conditions have been fixed in libssh. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 1163)

The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. - The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java...

SuSE 11 Security Update : strongswan (SAT Patch Number 677)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon. CVE-2009-0790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 11 Security Update : Xerces-j2 (SAT Patch Number 1235)

The xerces-j2 package was vulnerable to various bugs while parsing XML.CVE-2009-2625 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 Security Update : Evolution (SAT Patch Number 778)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets. CVE-2009-0582 This update also includes the following non-security fixes : - Fixes a critical crasher in mailer component. - Fixes creation of recurrence monthly items in GroupWis...

SuSE 11 Security Update : libsndfile (SAT Patch Number 637)

Specially crafted CAF files could cause an integer overflow in libsndfile. CVE-2009-0186 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : libapr-util1 (SAT Patch Number 969)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

SuSE 11 Security Update : Mozilla (SAT Patch Number 834)

Firefox version upgrade to 3.0.9 to fix various security bugs. CVE-2009-1302 / CVE-2009-1303 / CVE-2009-1304 / CVE-2009-1305,CVE -2009-1306,CVE-2009-1307 / CVE-2009-1308 / CVE-2009-1309,CVE-200 9-1310,CVE-2009-1311 / CVE-2009-1312 / CVE-2009-0652 %NASLMINLEVEL 70300 C Tenable Network Security, In...

SuSE 11 Security Update : libtiff3 (SAT Patch Number 1069)

This update of libtiff fixes a buffer underflow in LZWDecodeCompat. CVE-2009-2285 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : curl (SAT Patch Number 634)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...