SUSE-SA:2006:077: flash-player

The remote host is missing the patch for the advisory SUSE-SA:2006:077 flash-player. This security update brings the Adobe Flash Player to version 7.0.69. The update fixes the following security problem: CVE-2006-5330: CRLF injection vulnerabilities in Adobe Flash Player allows remote attackers t...

SUSE-SA:2006:067: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:067 php4,php5. This update fixes the following security problems in the PHP scripting language: - CVE-2006-5465: Various buffer overflows in htmlentities / htmlspecialchars internal routines could be used to crash the PHP...

SUSE-SA:2007:008: XFree86-server,xorg-x11-server,xloader

The remote host is missing the patch for the advisory SUSE-SA:2007:008 XFree86-server,xorg-x11-server,xloader. This update fixes three memory corruptions within the X server which could be used by local attackers with access to this display to crash the X server and potentially execute code...

SUSE-SA:2006:048: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2006:048 MozillaFirefox,MozillaThunderbird,SeaMonkey. To fix various security problems we released update packages that bring Mozilla Firefox to version 1.5.0.6, MozillaThunderdbird to version 1.5.0.5 and the SeaMonkey Suite to version...

SUSE-SA:2007:007: cacti

The remote host is missing the patch for the advisory SUSE-SA:2007:007 cacti. A command injection in cmd.php in cacti was fixed, which might have allowed remote attackers to inject commands and so execute code. This issue is tracked by the Mitre CVE ID CVE-2006-6799. %NASLMINLEVEL 70300 C Tenable...

SUSE-SA:2006:066: ImageMagick

The remote host is missing the patch for the advisory SUSE-SA:2006:066 ImageMagick. Two security problems were found in the GraphicsMagick tool set which are also present in ImageMagick. CVE-2006-5456: Multiple buffer overflows in ImageMagick allowed user-assisted attackers to cause a denial of...

SUSE-SA:2006:041: acroread

The remote host is missing the patch for the advisory SUSE-SA:2006:041 acroread. Various unspecified security problems have been fixed in Acrobat Reader version 7.0.8. Adobe does not provide detailed information about the nature of the security problems. Therefore, it is necessary to assume that...

SUSE-SA:2006:042: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:042 kernel. The Linux kernel has been updated to fix several security issues. This advisory refers to kernel updates for SUSE Linux 9.1 - 10.1. The SUSE Linux 9.1 kernel update is the final SUSE Linux 9.1 YOU update see separate...

SUSE-SA:2006:079: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:079 kernel. The Linux 2.6 kernel has been updated to fix various security issues. On SUSE Linux Enterprise Server 9 and SUSE Linux Enterprise 10 and their derived products this update also contains various bugfixes. %NASLMINLEVEL...

SUSE-SA:2006:071: phpMyAdmin

The remote host is missing the patch for the advisory SUSE-SA:2006:071 phpMyAdmin. The phpMyAdmin package was upgraded to version 2.9.1.1. While we usually do not do version upgrades, fixing the occurring security problems of phpMyAdmin got too difficult so we decided to go with the current...

SUSE-SA:2006:076: libgsf

The remote host is missing the patch for the advisory SUSE-SA:2006:076 libgsf. The libgsf library is used by various GNOME programs to handle for instance OLE2 data streams. Specially crafted OLE documents enabled attackers to use a heap buffer overflow for potentially executing code. This issue ...

SUSE-SA:2006:073: mono-core

The remote host is missing the patch for the advisory SUSE-SA:2006:073 mono-core. Sebastian Krahmer of SUSE Security found that the Mono System.Xml.Serialization class contained a /tmp race which potentially allows local attackers to execute code as the user using the Serialization method. This i...

SUSE-SA:2007:014: bind

The remote host is missing the patch for the advisory SUSE-SA:2007:014 bind. Two security problems were fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this advisory: CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the...

SUSE-SA:2006:040: OpenOffice_org

The remote host is missing the patch for the advisory SUSE-SA:2006:040 OpenOfficeorg. Following security problems were found and fixed in OpenOfficeorg: - CVE-2006-2198: A security vulnerability in OpenOffice.org may make it possible to inject basic code into documents which is executed upon...

SUSE-SA:2006:068: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2006:068 MozillaFirefox,MozillaThunderbird,SeaMonkey. MozillaFirefox has been updated to the security update release 1.5.0.8, MozillaThunderbird has been updated to 1.5.0.8, and the Mozilla SeaMonkey suite has been updated to 1.0.6 to...

SUSE-SA:2006:051: apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:051 apache2. The web server Apache2 has been updated to fix several security issues: The security fix for CVE-2005-3357 denial of service broke the earlier security fix for SSL verification CVE-2005-2700. This problem has been...

SUSE-SA:2007:009: opera

The remote host is missing the patch for the advisory SUSE-SA:2007:009 opera. This update brings the Opera Web browser to version 9.10, including fixes for the following 2 security problems: - CVE-2007-0126: Opera processes a JPEG DHT marker incorrectly, which can potentially lead to remote code...

SUSE-SA:2007:012: squid

The remote host is missing the patch for the advisory SUSE-SA:2007:012 squid. This update fixes a remotely exploitable denial-of-service bug in squid that can be triggered by using special ftp:// URLs. CVE-2007-0247 Additionally the 10.2 package needed a fix for another DoS bug CVE-2007-0248 and...

SUSE-SA:2007:004: krb5

The remote host is missing the patch for the advisory SUSE-SA:2007:004 krb5. Various bugs in the Kerberos5 libraries and tools were fixed which could be used by remote attackers to crash and potentially execute code in kadmind. - CVE-2006-6144 / MITKRB5-SA-2006-002: the RPC library could call an...

SUSE-SA:2006:052: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:052 php4,php5. Various security problems have been fixed in the PHP script language engine and its modules, versions 4 and 5. The PHP4 updated packages were released on September 12, the PHP5 update packages were released on...