SuSE 11.1 Security Update : Gimp (SAT Patch Number 5193)

Specially crafted gif files could have caused an infinite loop or a heap-based buffer overflow in the gif decoder CVE-2011-2896. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : dhcp (SAT Patch Number 5079)

This update of dhcp fixes two Denial of Service CVE-2011-2748 / CVE-2011-2749 vulnerabilities caused by specially crafted BOOTP packets. Additionally, the alias IP address handling of dhclient-script was fixed to not wipe out iptables connmark when renewing the lease. %NASLMINLEVEL 70300 C Tenabl...

SuSE 11.1 Security Update : radvd (SAT Patch Number 5397)

This update of radvd fixes the following security flaws : - arbitrary file overwrite flaw through unsanitized interface names CVE-2011-3602, - missing return value checks in privsepinit which could cause radvd to keep running with root privileges CVE-2011-3603, - buffer overread flaws in the...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 5433)

This is a wireshark version upgrade to 1.4.10 to fix various security flaws and other non-security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 11.1 Security Update : Samba (SAT Patch Number 5000)

A Cross-Site Request Forgery CSRF and a Cross Site Scripting vulnerability have been fixed in Samba's SWAT. CVE-2011-2522: CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N CVE-2011-2694: CVSS v2 Base Score: 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7872)

This update of freetype2 fixes multiple security flaws that could allow attackers to cause a denial of service or to execute arbitrary code via specially crafted fonts. CVE-2011-3256 / CVE-2011-3439 / CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : mailman (ZYPP Patch Number 7484)

This mailman update fixes several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57225;...

SuSE 11.1 Security Update : xorg-x11-server (SAT Patch Number 5479)

This update fixes two security issues with the X server : - A local attacker could find out if a file exists by exploiting the way that Xorg creates its lock files. CVE-2011-4028 - A non-root local user could set the read permission for all users on any file or directory. CVE-2011-4029...

SuSE 10 Security Update : libgssapi (ZYPP Patch Number 7541)

This update fixes insecure getenv usage, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7398)

The Adobe Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue : - This vulnerability CVE-2011-0609 could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the...

SuSE 11.1 Security Update : librsvg (SAT Patch Number 5166)

Specially crafted SVG files could make librsvg dereference a function pointer which potentially allows to execute arbitrary code. CVE-2011-3146 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update informatio...

SuSE 10 Security Update : popt (ZYPP Patch Number 7792)

Specially crafted RPM packages could have caused memory corruption in rpm when verifying signatures CVE-2011-3378. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

SuSE 11.1 Security Update : squid3 (SAT Patch Number 5095)

This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code. CVE-2011-3205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 7427)

Mozilla XULRunner 1.9.1 was updated to version 1.9.1.18 to fix the following security issue : - Several invalid HTTPS certificates were placed on the certificate blacklist to prevent their misuse. MFSA 2011-11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugi...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7477)

Specially crafted Flash files could be exploited to execute arbitrary code. CVE-2011-0611 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57189;...

SuSE 11.1 Security Update : MySQL (SAT Patch Number 5285)

This MySQL version update to 5.0.94 update fixes the following security issues : - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information...

SuSE 10 Security Update : nbd (ZYPP Patch Number 7450)

Nbd was updated to fix a buffer overflow in the mainloop function of nbd-server.c. This vulnerability can be exploited by remote attackers via long requests to execute arbitrary code. CVE-2011-0530: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7426)

pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch : - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. CVE-2011-0988 %NASLMINLEVEL 70300 ...

SuSE 11.1 Security Update : Xorg X11 (SAT Patch Number 5103)

Specially crafted font files could cause a buffer overflow in applications that use libXfont to load such files. CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 10 Security Update : dhcpcd (ZYPP Patch Number 7433)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 %NASLMINLEVEL 70300 C...