SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5235)

This kernel update fixes the following security problems : - tunneled ipv6 packets SIT could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. CVE-2008-2136 Additionally the following bugfixes have been included for all platforms : -...

SuSE9 Security Update : Apache 2 (YOU Patch Number 12000)

Apache2 contains a copy of the pcre library. Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code...

SuSE 11 Security Update : gstreamer (SAT Patch Number 742)

Specially crafted cover art tags in vorbis files could trigger a heap overflow in the base64 decoder. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-0586 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 6337)

This update of libtiff fixes a buffer underflow in LZWDecodeCompat. CVE-2009-2285 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41552; scriptversion"1.11";...

SuSE 11 Security Update : Perl (SAT Patch Number 994)

A Buffer overflow in perl, in the base Compress::Raw::Zlib perl module has been fixed. CVE-2009-1391 Additionaly three non security bugs were fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 Security Update : Xerces-j2 (SAT Patch Number 1235)

The xerces-j2 package was vulnerable to various bugs while parsing XML.CVE-2009-2625 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 Security Update : perl-IO-Socket-SSL (SAT Patch Number 1265)

This update of perl-IO-Socket-SSL improves the hostname checking of the SSL certificate. CVE-2009-3024 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE9 Security Update : sendmail (YOU Patch Number 11200)

Without this update sendmail may crash when finishing a mail due to referencing an already freed variable. CVE-2006-4434 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 11 Security Update : strongswan (SAT Patch Number 677)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon. CVE-2009-0790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 6073)

The previous security fix for gnutls CVE-2008-4989 introduced a regression in the X.509 validation code for self-signed certificates. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : tar (YOU Patch Number 11723)

This update fixes a directory traversal bug in tar. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41149; scriptversion"1.7";...

SuSE 10 Security Update : pam_mount (ZYPP Patch Number 5911)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 11 Security Update : PostgreSQL (SAT Patch Number 674)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

SuSE9 Security Update : the webdav apache module (YOU Patch Number 9363)

A vulnerability in the WebDAV module has been fixed. A remote attacker could crash a server process, leading to a Denial of Service scenario. Only installations configured for WebDAV access were affected. See http://nagoya.apache.org/bugzilla/showbug.cgi?id=31183. CVE-2004-0809 has been assigned ...

SuSE 10 Security Update : xntp (ZYPP Patch Number 6072)

ntp didn't properly check the return value of the openssl function EVPVerifyFinal. CVE-2009-0021 Additionally a problem where ntpd refused to use keys from /etc/ntp.keys has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : qpopper (YOU Patch Number 10045)

Qpopper was handling user files while running as root. Qpopper could also be tricked into overwriting system files. CVE-2005-1151 and CVE-2005-1152 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11 Security Update : CUPS (SAT Patch Number 790)

Specially crafted tiff files could cause an integer overflow in the 'imagetops' filter. CVE-2009-0163 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 10 Security Update : CUPS (ZYPP Patch Number 6174)

Specially crafted tiff files could cause an integer overflow in the 'imagetops' filter. CVE-2009-0163 Specially crafted pdf files could cause overflows in the 'pdftops' filter. CVE-2009-0165 / CVE-2009-0166 / CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 /...

SuSE 10 Security Update : OpenLDAP2 (ZYPP Patch Number 6485)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11 Security Update : flash-player (SAT Patch Number 1149)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-1862 / CVE-2009-0901 / CVE-2009-2395 / CVE-2009-2493 / CVE-2009-1863 / CVE-2009-1864 / CVE-2009-1865 / CVE-2009-1866 / CVE-2009-1867 /...