openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5825)

This update brings the Mozilla Thunderbird E-Mail program to version 2.0.0.18. It fixes following security problems : CVE-2008-5012 / MFSA 2008-48: Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when...

openSUSE 10 Security Update : acroread (acroread-5749)

The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992, CVE-2008-2549, CVE-2008-4812, CVE-2008-4813, CVE-2008-4817, CVE-2008-4816, CVE-2008-4814, CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE 10 Security Update : imp (imp-5798)

This update fixes a XSS vulnerability in imp. CVE-2008-4182 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update imp-5798. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : lighttpd (lighttpd-5785)

Various issues have been fixed in lighttpd. CVE-2008-4298, CVE-2008-4359 and CVE-2008-4360 have been assigned to thess issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-5785. Th...

openSUSE 10 Security Update : apache2 (apache2-5648)

Missing sanity checks of FTP URLs allowed cross site scripting XSS attacks via the modproxyftp module CVE-2008-2939. Missing precautions allowed cross site request forgery CSRF via the modproxybalancer interface CVE-2007-6420. A memory leak in the ssl module could crash apache CVE-2008-1678...

openSUSE 10 Security Update : openldap2 (openldap2-5509)

This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5680)

This patch backports security fixes found in MozillaThunderbird 2.0.0.17 back to the 1.5 Thunderbird used in openSUSE 10.2. MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The...

openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5656)

This update brings mozilla-xulrunner181 to security fix version 1.8.1.17. It contains the following security fixes: MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters...

openSUSE 10 Security Update : seamonkey (seamonkey-5657)

This patch updates SeaMonkey to version 1.1.12, fixing security and other bugs : MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters stripped from JavaScript before...

openSUSE 10 Security Update : cups (cups-5652)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5640)

This update brings MozillaFirefox to version 2.0.0.17 to fix bugs and security issues : MFSA 2008-45 / CVE-2008-4069: XBM image uninitialized memory reading MFSA 2008-44 / CVE-2008-4067 / CVE-2008-4068: resource: traversal vulnerabilities MFSA 2008-43: BOM characters stripped from JavaScript befo...

openSUSE 10 Security Update : uvcvideo-kmp-bigsmp (uvcvideo-kmp-bigsmp-5513)

The kernel driver uvcvideo was vulnerable to a buffer overflow in format descriptor parsing. CVE-2008-3496 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update uvcvideo-kmp-bigsmp-5513. The text...

openSUSE 10 Security Update : finch (finch-5592)

specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. - overly long file names in MSN file transfers could crash pidgin CVE-2008-2955. - SSL certifcates were not verfied. Therefore piding...

openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-5430)

Sun Java was updated to 1.4.2u18 to fix following security vulnerabilities : CVE-2008-3114: Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensiti...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-5341)

The database server MySQL was updated to fix a security problem : CVE-2008-2079: MySQL allowed local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory, whic...

openSUSE 10 Security Update : moodle (moodle-5488)

Moodle was prone to a Cross-Site scripting flaw which could potentially be exploited to compromise arbitrary accounts CVE-2008-3326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-5488...

openSUSE 10 Security Update : xscreensaver (xscreensaver-5333)

Following security problem is fixed by this patch : CVE-2008-1683: When getpwuid fails due to dropped network on NIS accounts fail instead of silently disabling locking and just blanking. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE 10 Security Update : freetype2 (freetype2-5351)

This update of freetype2 fixes several potential vulnerabilities reported by iDefense. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freetype2-5351. The text description of this plugin is C...

openSUSE 10 Security Update : tomcat55 (tomcat55-5385)

This update of tomcat fixes a cross-site-scripting vulnerabilitiy in the host-manager. CVE-2008-1947 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tomcat55-5385. The text description of this...

openSUSE 10 Security Update : mtr (mtr-5289)

This update fixes a stack based buffer overflow which could potentially be exploited by a remote attacker to execute arbitrary code CVE-2008-2357. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...