SuSE 10 Security Update : iscsitarget (ZYPP Patch Number 7109)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

SuSE 10 Security Update : perl-HTML-Parser (ZYPP Patch Number 6622)

Specially crafted HTML documents could cause perl-HTML-Parser to run into an endless loop. CVE-2009-3627 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49915;...

SuSE 10 Security Update : Cyrus IMAPD (ZYPP Patch Number 6521)

This update fixes another buffer overflow in the Sieve code CVE-2009-3235. This can be exploited by users allowed to use their own sieve scripts to execute arbitrary code remotely. Additionally the handling of long headers was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

SuSE 10 Security Update : avahi (ZYPP Patch Number 6790)

The avahi-daemon reflector could cause packet storms when reflecting legacy unicast mDNS traffic CVE-2009-0758. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : Tomcat (YOU Patch Number 12625)

This update of tomcat fixes a denial of service vulnerability and two information disclosure flaws which could potentially be exploited by remote attackers to crash tomcat or to obtain sensitive information. CVE-2010-2227, CVE-2010-1157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

SuSE9 Security Update : libpng (YOU Patch Number 12642)

Specially crafted png files could cause crashes or even execution of arbitrary code in applications using libpng to process such files. CVE-2010-1205, CVE-2010-2249 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : Perl (YOU Patch Number 12628)

perl Safe.pm module was affected by two problems where attackers could break out of such a safed execution CVE-2010-1447, CVE-2010-1168. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : XFree86 (YOU Patch Number 12612)

X clients could cause a memory corruption in the X Render extension which crashes the X server CVE-2010-1166. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : Apache 2 (YOU Patch Number 12613)

The following bugs have been fixed : - Integer overflows in libapr could potentially be exploited to execute arbitrary code. CVE-2009-2412 - Specially crafted XML documents cause apache to consume large amounts of memory. CVE-2009-1955 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : pango (ZYPP Patch Number 6894)

This update of pango fixes a memory corruption bug that can possibly be exploited to execute arbitrary code remotely. This bug could occur while processing fonts from untrusted sources. CVE-2010-0421 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 6977)

Mozilla NSS was updated to version 3.12.6. This fixes all currently known issues in mozilla-nss, and also implements the new TLS/SSL renegotiation handling. CVE-2009-3555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6943)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : squid (YOU Patch Number 12597)

The following vulnerabilities have been fixed in squid : - DoS via special crafted auth header. CVE-2009-2855 - DoS via invalid DoS header. CVE-2010-0308 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : MySQL (ZYPP Patch Number 6897)

This update fixes various security issues bnc557669 : upstream 47320 - checking server certificates CVE-2009-4028 upstream 48291 - error handling in subqueries CVE-2009-4019 upstream 47780 - preserving nullvalue flag in GeomFromWKB CVE-2009-4019 upstream 39277 - symlink behaviour fixed...

SuSE 11 Security Update : CUPS (SAT Patch Number 2108)

lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings. CVE-2010-0393 The previous fix for a use-after-free vulnerability CVE-2009-3553 was...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 6889)

This update of ethereal fixes : - Several buffer overflows in the LWRES dissector. CVE-2010-0304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid45078;...

SuSE 11 Security Update : evolution-data-server (SAT Patch Number 1944)

This update fixes the following vulnerability : evolution considered S/MIME signatures to be valid even for modified mails. CVE-2009-0547: CVSS v2 Base Score: 5.0 Additionally the following bug has been fixed : - A POP3 server sending overly long lines could crash evolution. %NASLMINLEVEL 70300 C...

SuSE 10 Security Update : sudo (ZYPP Patch Number 6891)

This update fixes the following security issue : - A privilege escalation flaw was found in the way sudo used to check file paths for pseudocommands. If local, unprivileged user was authorized by sudoers file to edit one or more files, it could lead to execution of arbitrary code, with the...

SuSE 11 Security Update : libnetpbm (SAT Patch Number 1999)

This update of netpbm fxes a stack-based buffer overflow that could be triggered while processing the contents of XPM headers in image files. CVE-2009-4274: CVSS v2 Base Score: 5.8 moderate AV:N/AC:M/Au:N/C:N/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 10 Security Update : netpbm (ZYPP Patch Number 6851)

This update of netpbm fxes a stack-based buffer overflow that could be triggered while processing the contents of XPM headers in image files. CVE-2009-4274: CVSS v2 Base Score: 5.8 moderate AV:N/AC:M/Au:N/C:N/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...