openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5379)

This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE 10 Security Update : kernel (kernel-5336)

This kernel update fixes the following security problems : CVE-2008-1615: On x8664 a denial of service attack could be used by local attackers to immediately panic / crash the machine. CVE-2008-2358: A security problem in DCCP was fixed, which could be used by remote attackers to crash the machin...

openSUSE 10 Security Update : opera (opera-5354)

This patch brings Opera to security update level 9.50 Following security problems were fixed: CVE-2008-2714: Opera before 9.26 allows remote attackers to misrepresent web page addresses using 'certain characters' that 'cause the page address text to be misplaced.' CVE-2008-2715: Unspecified...

openSUSE 10 Security Update : courier-authlib (courier-authlib-5352)

This update of courier-authlib fixes a bug that allowed SQL injections. CVE-2008-2667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update courier-authlib-5352. The text description of this plugin ...

openSUSE 10 Security Update : libxslt (libxslt-5263)

A libxslt XSL-match processing overflow has been fixed. CVE-2008-1767 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxslt-5263. The text description of thi...

openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)

This update fixes multiple vulnerabilities reported by iDefense : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read - CVE-2008-1377 - RECORD and...

openSUSE 10 Security Update : qemu (qemu-5270)

Local attackers could use raw formatted disk images to access the hosting environment. CVE-2008-2004 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update qemu-5270...

openSUSE 10 Security Update : xscreensaver (xscreensaver-5156)

This patch fixes problem with popup windows usually from instant messaging applications, which may appear on top of xscreensaver while the screen is locked. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : pdns (pdns-5242)

pdns used predictable random numbers for DNS responses. Therfore attackers could generate spoofed DNS responses CVE-2008-1637. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pdns-5242. The te...

openSUSE 10 Security Update : sarg (sarg-5226)

Multiple stack-based buffer overflows have been fixed in sarg. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update sarg-5226. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : kdelibs4 (kdelibs4-5220)

A heap overflow in the PNG loader of KHTML has been fixed. CVE-2008-1670 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdelibs4-5220. The text description of...

openSUSE 10 Security Update : lighttpd (lighttpd-5216)

An error in one SSL connection could lead to termination of all SSL connections CVE-2008-1531 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-5216. The text description of this plugin...

openSUSE 10 Security Update : licq (licq-5214)

By starting more than 1024 connections against a remote licq client, attackers could cause licq to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update licq-5214. The text description of thi...

openSUSE 10 Security Update : openldap2 (openldap2-4999)

Authenticated users could crash the LDAP server 'slapd' via the 'NOOP' command CVE-2007-6698,CVE-2008-0658 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openldap2-4999. The text description ...

openSUSE 10 Security Update : seamonkey (seamonkey-5167)

This update brings Mozilla SeaMonkey to the level of seamonkey security update version 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port...

openSUSE 10 Security Update : flash-player (flash-player-5161)

This flash player update to version 9.0.124.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-5275, CVE-2007-6243, CVE-2007-6637, CVE-2007-6019, CVE-2007-0071, CVE-2008-1655,...

openSUSE 10 Security Update : opera (opera-5154)

A flaw when processing images could crash opera. Attackers could potentially even exploit that to execute code. This update upgrades opera to version 9.27 to fix the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE 10 Security Update : openssh (openssh-5148)

A flaw in the X forwarding code of openssh allowed malicious users to steal the X access credentials of other users CVE-2008-1483. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openssh-5148...

openSUSE 10 Security Update : xine-devel (xine-devel-5137)

Specially crafted files could cause integer overflows in the xine library. Attackers could potentially exploit that to execute arbitrary code with the privileges of the user who opened such a file CVE-2008-1482. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE 10 Security Update : apache2 (apache2-5125)

This update fixes multiple bugs in apache : - cross site scripting problem in modimap CVE-2007-5000 - cross site scripting problem in modstatus CVE-2007-6388 - cross site scripting problem in the ftp proxy module CVE-2008-0005 - cross site scripting problem in the error page for status code 413...