SuSE 11.1 Security Update : perf (SAT Patch Number 5417)

The following perf tool bugs have been fixed : - it was issuing excessive number of gettimeofday calls creating noise when trying to measure performance. bnc607339 - it would consider a file named 'config' in the current-working-directory as containing perf configuration data, this fact could be...

SuSE 11.1 Security Update : MySQL (SAT Patch Number 5285)

This MySQL version update to 5.0.94 update fixes the following security issues : - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information...

SuSE 11.1 Security Update : openssl-certs (SAT Patch Number 5085)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.1 Security Update : CUPS (SAT Patch Number 5180)

This update fixes the following security issues : - 601830: CSRF via admin web interface. CVE-2010-0540 - 680210: users in group 'lp' can overwrite arbitrary files. CVE-2010-2431 - 680212: denial of service via cupsDoAuthentication. CVE-2010-2432 - 711490: heap overflow in gif decoder...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 5381)

NetworkManager did not pin a certificate's subject to an ESSID. A rogue access point could therefore be used to conduct MITM attacks by using any other valid certificate issued by same CA as used in the original network CVE-2006-7246. This has been fixed. Please note that existing WPA2 Enterprise...

SuSE 11.1 Security Update : puppet (SAT Patch Number 5421)

The following security issues have been fixed : - Puppet's certificate authority issued Puppet agent certificates capable of impersonating the Puppet master. Compromised or rogue puppet agents could therefore use their certificates for MITM attacks. CVE-2011-3872 Note: If you've set the...

SuSE 11.1 Security Update : popt (SAT Patch Number 5256)

Specially crafted RPM packages could have caused memory corruption in rpm when verifying signatures CVE-2011-3378. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : pam (SAT Patch Number 5342)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)

This update fixes the following security issues : - 604225: MSN emoticon DoS. CVE-2010-1624 - 648273: multiple NULL pointer dereference weaknesses. CVE-2010-3711 - 722199: vulnerability in SILC protocol handling CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 5381)

NetworkManager did not pin a certificate's subject to an ESSID. A rogue access point could therefore be used to conduct MITM attacks by using any other valid certificate issued by same CA as used in the original network CVE-2006-7246. This has been fixed. Please note that existing WPA2 Enterprise...

SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 5412)

acrobat reader was updated to version 9.4.6 to fix several security issues. CVE-2011-1353 / CVE-2011-2431 / CVE-2011-2432 / CVE-2011-2433 / CVE-2011-2434 / CVE-2011-2435 / CVE-2011-2436 / CVE-2011-2437 / CVE-2011-2438 / CVE-2011-2439 / CVE-2011-2440 / CVE-2011-2441 / CVE-2011-2442 %NASLMINLEVEL...

SuSE 11.1 Security Update : openswan (SAT Patch Number 5424)

openswan's crypto helper was prone to an use-after-free flaw which could potentially allow remote attackers to cause a Denial of Service CVE-2011-4073, bnc727002. Additionally, the following issues have been fixed : - AH handshake problems bnc713986, - potential dereference of no longer valid...

SuSE 11.1 Security Update : vpnc (SAT Patch Number 5027)

This update of vpnc fixes a flaw in the modifyresolvconfsuse script that could potentially allow remote attackers to inject commands through specially crafted DNS domains. CVE-2011-2660 Also a rekeying during reconnect was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.1 Security Update : ClamAV (SAT Patch Number 4942)

New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : libpng (SAT Patch Number 4948)

This update of libpng12-0 fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - unknown unknown. CVE-2009-5063: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Desig...

SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 4956)

This update of ecryptfs-utils fixes several security problems : - Race condition when checking mountpoint during mount. CVE-2011-1831 - Race condition when checking mountpoint during unmount. CVE-2011-1832 - Race condition when checking source during mount. CVE-2011-1833 - Improper mtab handling...

SuSE 11.1 Security Update : foomatic-filters (SAT Patch Number 4966)

The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. - CVE-2011-2697: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P : Input Validati...

SuSE 11.1 Security Update : libwebkit (SAT Patch Number 4917)

This update of libwebkit fixes : - XSLT file creation allowed webpages evaluating XSLT code to create files. CVE-2011-1774 - ZDI-11-139 Webkit Anonymous Frame remote code exec %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4921)

This update fixes length checks in psaux/psobjs.c. This issue was used in one of the last jailbreakme exploits for Apple iPhone/iPad products. CVE-2011-0226 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 upda...

SuSE 11.1 Security Update : compat-openssl097g (SAT Patch Number 4913)

This update adds openssl patches since 2007 for : - CVE-2009-0590 - CVE-2008-5077 - CVE-2009-0789 - CVE-2009-3555 - CVE-2010-4180 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...