SuSE 11.1 Security Update : evince (SAT Patch Number 3769)

Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : libpng12-0 (SAT Patch Number 2473)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 10 Security Update : cvs (ZYPP Patch Number 7302)

cvs fails with 'invalid pathname' error when using relative paths. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51638; scriptversion"1.7...

SuSE 11.1 Security Update : Python (SAT Patch Number 3493)

The following issues have been fixed : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop module. CVE-2010-2089 / CVE-2010-1634 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : libpoppler (SAT Patch Number 3338)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.1 Security Update : IBM Java 1.4.2 (SAT Patch Number 3528)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.1 Security Update : xpdf (SAT Patch Number 3377)

A specially crafted PDF files could crash xpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 10 Security Update : Python (ZYPP Patch Number 7314)

With this update of Python : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop and rgbimg modules. CVE-2010-2089 / CVE-2010-1634 / CVE-2009-4134 / CVE-2010-1449 /...

SuSE 11.1 Security Update : opensc (SAT Patch Number 3729)

Specially crafted smart cards could cause a buffer overflow in opensc. CVE-2010-4523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL...

SuSE 11.1 Security Update : LVM2 (SAT Patch Number 2982)

clvmd, when running, allowed unprivileged local users to issue arbitrary lvm commands CVE-2010-2526 via incorrect permissions. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : moonlight-plugin (SAT Patch Number 3606)

This update of moonlight does not allow abuse of mutable Strings to execute arbitrary code anymore. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrigh...

SuSE 10 Security Update : ed (ZYPP Patch Number 7301)

This update fixes a heap-based buffer overflow in ed which can be exploited remotely only with user-assistance. CVE-2008-3916: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors. CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin i...

SuSE 11.1 Security Update : ed (SAT Patch Number 3792)

This update fixes a heap-based buffer overflow in ed which can be exploited remotely only with user-assistance. CVE-2008-3916: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors. CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

SuSE 10 Security Update : Perl (ZYPP Patch Number 7316)

Multiple header injection problems in the CGI module of perl have been fixed. They allowed to inject HTTP headers in responses. - have been assigned to this issue. CVE-2010-2761 / CVE-2010-4410 / CVE-2010-4411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugi...

SuSE 11.1 Security Update : pcsc-lite (SAT Patch Number 2670)

This update of pcsc-lite fixes a local vulnerability stack overflow which allowed every user with write-access to '/var/run/pcscd/pcscd.comm' to gain root privileges. CVE-2010-0407 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

SuSE 11.1 Security Update : vte, vte-debuginfo, vte-debugsource, vte-devel, vte-doc, vte-lang (SAT Patch Number 2718)

This update fixes a vulnerability of VTE to an old title set and query attack which could be used by remote attackers to execute arbitrary code. CVE-2010-2713 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 10 Security Update : supportutils (ZYPP Patch Number 7215)

The supportconfig script did not disguise passwords in the config files it collected. CVE-2010-3912 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51447;...

SuSE 10 Security Update : xpdf (ZYPP Patch Number 7190)

A specially crafted PDF files could crash xpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : kdenetwork (ZYPP Patch Number 7245)

This update of kdenetwork fixes several bugs, the security related issues are : - CWE-119 The included libgadu version allowed remote servers to cause a denial of service crash via a buffer over-read. CVE-2008-4776: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Non-security issues : - kopete...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 7231)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51339;...