SuSE 10 Security Update : clamav (ZYPP Patch Number 7274)

This is an update of clamav to version 0.96.5 to fix : - Denial of service bugs while parsing PDFs. CVE-2010-4260 - Memory corruption due to an off-by-one error within the iconcb function. CVE-2010-4261 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 11 Security Update : Python (SAT Patch Number 3491)

The following issues have been fixed : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop module. CVE-2010-2089 / CVE-2010-1634 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : kdegraphics (ZYPP Patch Number 7235)

Various pointer dereferencing vulnerabilities in kdegraphics3's KSVG have been fixed. CVE-2009-1709 / CVE-2009-0945 have been assigned to this issue. Also specially crafted PDF files could crash kpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 /...

SuSE 11 Security Update : kdelibs (SAT Patch Number 3450)

An invalid character reference causing a buffer overflow in khtml has been fixed in the kdelibs package. CVE-2009-1725 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7221)

The following issues have been fixed : - Insufficient handling of certain character sequences in the utf8decode function could be leveraged to conduct cross-site scripting XSS attacks. CVE-2010-3870 - php5 could also consume large amounts of memory and crash if a long mail address was passed to...

SuSE 11 Security Update : Xen (SAT Patch Number 2230)

Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...

SuSE 11 Security Update : libtheora (SAT Patch Number 2067)

An integer overflow was fixed in libtheora. It could be exploited remotely to execute arbitrary code. CVE-2009-3389: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Numeric Errors. CWE-189 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

SuSE 11 Security Update : NetworkManager (SAT Patch Number 3094)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11 Security Update : Apache 2 (SAT Patch Number 2293)

The following bugs have been fixed : - When using a multithreaded MPM Apache could leak memory of requests handled by a different thread when processing subrequests. CVE-2010-0434 - Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11 Security Update : puppet (SAT Patch Number 2113)

pupped created temporary files with fixed names. Local attacks could exploit that to install symlinks that overwrite files of the victim. CVE-2010-0156 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 Security Update : fuse (SAT Patch Number 2078)

A race condition in fusermount allows non-privileged users to umount any file system. CVE-2010-0789 Note: this is a re-release of the previous update with a better patch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11 Security Update : MySQL (SAT Patch Number 2317)

Updated MySQL packages fix the following bugs : - upstream 47320 - checking server certificates. CVE-2009-4028 - upstream 48291 - error handling in subqueries. CVE-2009-4019 - upstream 47780 - preserving nullvalue flag in GeomFromWKB. CVE-2009-4019 - upstream 39277 - symlink behaviour fixed...

SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 /...

SuSE 11 Security Update : kdm (SAT Patch Number 2136)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11 Security Update : okular. (SAT Patch Number 3064)

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. CVE-2010-2575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11 Security Update : glib2 (SAT Patch Number 1831)

When copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This has been fixed. This update also fixes a problem where glib2...

SuSE 11 Security Update : krb5 (SAT Patch Number 2437)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

SuSE 11 Security Update : lvm2, lvm2-clvm, lvm2-clvm-debuginfo, lvm2-clvm-debugsource, etc (SAT Patch Number 2849)

clvmd, when running, allowed unprivileged local users to issue arbitrary lvm commands CVE-2010-2526 via incorrect permissions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 2340)

Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities CVE-2010-0887. Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11 Security Update : libvirt (SAT Patch Number 2787)

Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host. CVE-2010-2242 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...