SuSE 11.1 Security Update : gimp (SAT Patch Number 4107)

Several gimp plugins were prone to buffer overflows. CVE-2010-4540 / CVE-2010-4541 / CVE-2010-4542 / CVE-2010-4543 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...

SuSE 11.1 Security Update : acroread (SAT Patch Number 4057)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

SuSE 11.1 Security Update : t1lib (SAT Patch Number 3789)

A heap overflow in the AFM font parser of DVI files has been fixed in t1lib. CVE-2010-2642 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

SuSE 11.1 Security Update : xpdf-tools (SAT Patch Number 3857)

This update of xpdf fixes an out-of-bounds write in CharCodeToUnicode.cc and a bad instruction pointer while parsing malformed PDF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : dbus (SAT Patch Number 3941)

Local users could crash the D-Bus daemon by sending a specially crafted message. CVE-2010-4352 Also RPM requirements were adjusted to make appliance installations work better. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 3926)

The Adobe Flash Player was updated to the 10.2.152.26 release, fixing lots of bugs and security issues. The update is rated critical by Adobe, although details have not been published. CVEs addressed: CVE-2011-0558 / CVE-2011-0559 / CVE-2011-0560 / CVE-2011-0561 / CVE-2011-0571 / CVE-2011-0572 /...

SuSE 11.1 Security Update : krb5 (SAT Patch Number 3839)

Multiple KDC DoS vulnerabilities if used with LDAP backends have been fixed in krb5. CVE-2011-0281 / CVE-2011-0282 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The te...

SuSE 11.1 Security Update : pcsc-lite (SAT Patch Number 3889)

An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 / CVE-2010-4531 have been assigned to these issues. Additionally a new device ID for card readers was added. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 3724)

IBM Java 6 SR9 was released which fixes a lot of security issues. IBM JDK Alerts can also be found on this page: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE ...

SuSE 11.1 Security Update : moonlight (SAT Patch Number 3728)

Untrusted Moonlight apps could bypass constraints on methods which potentially allowed attackers to execute arbitrary code. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 3103)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.1 Security Update : iSCSI (SAT Patch Number 2879)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3276 / 3280 / 3284)

This SUSE Linux Enterprise 11 Service Pack 1 kernel contains various security fixes and lots of other bugfixes. The following security issues were fixed : - local users could crash the system by causing a NULL deref in the keyctlsessiontoparent function. CVE-2010-2960 - local users could crash th...

SuSE 11.1 Security Update : perl (SAT Patch Number 3804)

Multiple header injection problems in the CGI module of perl have been fixed. They allowed to inject HTTP headers in responses. CVE-2010-2761 / CVE-2010-4410 / CVE-2010-4411 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.1 Security Update : IBM Java 1.4.2 (SAT Patch Number 3528)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.1 Security Update : libpng12-0 (SAT Patch Number 2473)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.1 Security Update : libpoppler (SAT Patch Number 3338)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11 Security Update : wireshark (SAT Patch Number 2082)

This update of wireshark fixes : - Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. CVE-2009-4376 - Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. CVE-2009-4377 - Unspecified vulnerability in the Infiniband dissect...

SuSE 11.1 Security Update : evince (SAT Patch Number 3769)

Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : Python (SAT Patch Number 3493)

The following issues have been fixed : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop module. CVE-2010-2089 / CVE-2010-1634 %NASLMINLEVEL 70300 C Tenable Network...