openSUSE Security Update : libudev-devel (libudev-devel-768)

This update fixes a local privilege escalation in udev. CVE-2009-1185: udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

openSUSE Security Update : ghostscript-devel (ghostscript-devel-877)

Specially crafted file could cause a heap-overflow in JBIG2 decoder CVE-2009-0196, an integer overflow in ICC library CVE-2009-0792, a buffer overflow in BaseFont writer module CVE-2008-6679 or crash the CCITTFax decoder CVE-2007-6725. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : ghostscript-devel (ghostscript-devel-592)

Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files CVE-2009-0583, CVE-2009-0584. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : libQtWebKit-devel (libQtWebKit-devel-216)

A flaw in the CSS loader of the WebKit engine could crash programs and potentially allows execution of arbitrary code CVE-2008-3632. This update also fixes unrelated problems with printing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : libxine-devel (libxine-devel-582)

Specially crafted 4x movie files could cause an integer overflow in xine-lib CVE-2009-0698. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxine-devel-582. The text description of this plug...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

openSUSE Security Update : libmysqlclient-devel (libmysqlclient-devel-210)

Empty bit-strings in a query could crash the MySQL server CVE-2008-3963. Due to another flaw users could access tables of other users CVE-2008-4097, CVE-2008-4098. This update also fixes problems with the 'ORDER BY' query %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-461)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : libudev-devel (libudev-devel-768)

This update fixes a local privilege escalation in udev. CVE-2009-1185: udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

openSUSE Security Update : libpng-devel (libpng-devel-455)

This update of libpng fixes the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0. CVE-2008-5907 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : lcms (lcms-581)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code CVE-2009-0723, CVE-2009-0581, CVE-2009-0733. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-974)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libtiff-devel (libtiff-devel-507)

specially crafted tiff images could lead to allocating large amounts of memory therefore crashing applications that process such files CVE-2008-1586. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libwsman-devel (libwsman-devel-157)

This update of openwsman fixes several security vulnerabilities found by the SuSE Security-Team : - remote buffer overflows while decoding the HTTP basic authentication header CVE-2008-2234 - a possible SSL session replay attack affecting the client depending on the configuration CVE-2008-2233...

openSUSE Security Update : nagios (nagios-531)

A CSRF bug in nagios' cmd.cgi CVE-2008-5028 has been fixed as well as an authentication bypass CVE-2008-5027. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-531. The text description o...

openSUSE Security Update : ghostscript-devel (ghostscript-devel-877)

Specially crafted file could cause a heap-overflow in JBIG2 decoder CVE-2009-0196, an integer overflow in ICC library CVE-2009-0792, a buffer overflow in BaseFont writer module CVE-2008-6679 or crash the CCITTFax decoder CVE-2007-6725. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : libtiff-devel (libtiff-devel-507)

specially crafted tiff images could lead to allocating large amounts of memory therefore crashing applications that process such files CVE-2008-1586. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : xine-devel (xine-devel-483)

This update of xine fixes multiple buffer overflows while parsing files : - CVE-2008-3231 - CVE-2008-5233 - CVE-2008-5234 - CVE-2008-5235 - CVE-2008-5236 - CVE-2008-5237 - CVE-2008-5238 - CVE-2008-5239 - CVE-2008-5240 - CVE-2008-5241 - CVE-2008-5242 - CVE-2008-5243 - CVE-2008-5244 - CVE-2008-5245...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-786)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0591: CMSverify function allows signatures to look valid - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable...