SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2023:3249-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3249-1 advisory. - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2022:3249-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3249-1 advisory. clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical...

SUSE SLES15: freeradius-server / freeradius-server-devel / etc (SUSE-SU-2021:2147-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:2147-1 advisory. - Fixed plaintext password entries in logfiles bsc1184016. Tenable has extracted the preceding description block directly from the SUSE security...

Novell SUSE Linux Enterprise Server and Linux Enterprise Desktop Arbitrary Code Execution Vulnerability

Novell SuSE Linux Enterprise Server is an enterprise server version of the Linux operating system from Novell, Inc. Linux Enterprise Desktop is a desktop version of the Linux system. A security vulnerability exists in Novell SUSE Linux Enterprise Server version 12-SP1 and Linux Enterprise Desktop...

Novell SUSE Linux Enterprise Server Remote Manager Heap Overflow (CVE-2005-3655)

The SUSE Enterprise Linux Server is an operating system designed for medium to large organizations. It contains numerous server components which are operational in default installation of the system. The server may optionally be controlled remotely through a web interface provided by the Novell...

fetchmail -- potential crash in -v -v verbose mode

Matthias Andree reports: Gunter Nau reported fetchmail crashing on some messages; further debugging by Petr Uzel and Petr Cerny at Novell/SUSE Czech Republic dug up that this happened when fetchmail was trying to print, in -v -v verbose level, headers exceeding 2048 bytes. In this situation,...

SUSE Linux ISC BIND “named” GSS-TSIG请求远程拒绝服务漏洞

BUGTRAQ ID: 26076 SuSE Linux Enterprise Server是在企业环境中使用的开放源码计算平台。 GSS-TSIG是Microsoft Windows系统用于动态请求DNS更新的机制。当named接收到GSS-TSIG请求时，需要加载libgssapi库负责安全密钥交换。如果libgssapi无法正确初始化的话，就会终止正在运行的named进程。尤其是当在chroot环境中运行named的时候，libgssapi就会终止进程，因为无法访问机制配置文件。 Novell SUSE Linux Enterprise Server 10 Service Pack...

Novell SUSE Linux Enterprise Server Remote Manager buffer overflow

Integer overflow on negative HTTP POST Content-Length: paramters leads to 4-bytes heap overflow...