SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5239)

This kernel update fixes the following security problems : - tunneled ipv6 packets SIT could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. CVE-2008-2136 Additionally the following bugfixes have been included for all platforms : -...

SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 6236)

The Linux kernel on SUSE Linux Enterprise 10 Service Pack 2 was updated to fix various security issues and several bugs. The following security issues were fixed: CVE-2009-0834: The auditsyscallentry function in the Linux kernel on the x8664 platform did not properly handle 1 a 32-bit process...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6460)

This update fixes a single critical security issues in the SUSE Linux Enterprise 10 SP 2 kernel. - A missing check in the MSGPROBE handling can be used to execute privileges to root. CVE-2009-2698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8100)

IBM Java 1.5.0 has been updated to SR13-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8094)

IBM Java 1.6.0 has been updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8114)

This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in php5. CVE-2012-1172 - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal Apache module mode setup...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8116)

Flash Player was updated to version 11.2.202.233, fixing a critical security problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid59054; scriptversion"1.6";...

SuSE 11.2 Security Update : cifs-utils (SAT Patch Number 6196)

The following issue has been fixed : - Don't allow unprivileged users to mount onto dirs to which they can't chdir. CVE-2012-1586 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 8085)

This version upgrade of wireshark fixes the following security vulnerabilities : - The ANSI A dissector could dereference a NULL pointer and crash. CVE-2012-1593 - The pcap and pcap-ng file parsers could crash trying to read ERF data. CVE-2012-1595 - The MP2T dissector could try to allocate too...

SuSE 10 Security Update : Python (ZYPP Patch Number 8080) (BEAST)

The following issues have been fixed in this update : - hash randomization issues CVE-2012-115 see below - SimpleHTTPServer XSS. CVE-2011-1015 - SSL BEAST vulnerability CVE-2011-3389 The hash randomization fix is by default disabled to keep compatibility with existing python code when it extracts...

SuSE9 Security Update : unace (YOU Patch Number 10239)

This update fixes several buffer overflows while extracting, testing, or listing an archive file CVE-2005-0160 as well as a buffer overflow while handling long command-line options. CVE-2005-0161 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell,...

SuSE 11.1 Security Update : libtiff (SAT Patch Number 6106)

This update of tiff fixes an issue where specially crafted tiff files could have triggered an integer overflow which would have lead to a heap-based buffer overflow. CVE-2012-1173 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8077)

The Acrobat Reader has been updated to version 9.5.1 to fix the following issues : - crafted fonts inside PDFs could allow attackers to cause an integer overflow, resulting in the possibility of arbitrary code execution. CVE-2012-0774 - an issue in acroread's JavaScript API could allowattackers t...

SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 6138)

Specially crafted PDF files could have caused a denial of service or have lead to the execution of arbitrary code in the context of the user running acroread : - crafted fonts inside PDFs could allow attackers to cause an integer overflow, resulting in the possibility of arbitrary code execution...

SuSE 10 Security Update : tiff (ZYPP Patch Number 8055)

This update of tiff fixes an issue where specially crafted tiff files could trigger an integer overflow which leads to a heap-based buffer overflow. CVE-2012-1173 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Samba (ZYPP Patch Number 8058)

A remote code execution flaw in Samba has been fixed : - PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size. CVE-2012-1182 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8039)

Specially crafted font files could have caused buffer overflows in freetype. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

SuSE 11.1 Security Update : freetype2 (SAT Patch Number 6052)

Specially crafted font files could have caused buffer overflows in freetype. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 10 Security Update : libxslt (ZYPP Patch Number 8019)

libxslt was prone to an out-of-bounds read flaw when parsing certain patterns CVE-2011-3970. This could have lead to a denial of service and is fixed with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11.1 Security Update : libxslt (SAT Patch Number 5810)

libxslt was prone to an out-of-bounds read flaw when parsing certain patterns CVE-2011-3970. This could have lead to a Denial of Service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...