SuSE 11 / 11.1 Security Update : freetype2 (SAT Patch Numbers 2914 / 2919)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...

SuSE 11 Security Update : NetworkManager (SAT Patch Number 3094)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11 Security Update : libtheora (SAT Patch Number 2067)

An integer overflow was fixed in libtheora. It could be exploited remotely to execute arbitrary code. CVE-2009-3389: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Numeric Errors. CWE-189 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 /...

SuSE 11 Security Update : glib2 (SAT Patch Number 1831)

When copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This has been fixed. This update also fixes a problem where glib2...

SuSE 11 Security Update : krb5 (SAT Patch Number 2437)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

SuSE 11 Security Update : okular. (SAT Patch Number 3064)

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. CVE-2010-2575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11 Security Update : kdm (SAT Patch Number 2136)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11 / 11.1 Security Update : mipv6d (SAT Patch Numbers 3048 / 3049)

The following issues have been fixed : - the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages. CVE-2010-2522 - remote attackers could cause buffer overflows in mipv6d. CVE-2010-2523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : fuse (SAT Patch Number 2078)

A race condition in fusermount allows non-privileged users to umount any file system. CVE-2010-0789 Note: this is a re-release of the previous update with a better patch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11 / 11.1 Security Update : OpenSSL (SAT Patch Numbers 3208 / 3209)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : puppet (SAT Patch Number 2113)

pupped created temporary files with fixed names. Local attacks could exploit that to install symlinks that overwrite files of the victim. CVE-2010-0156 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 / 11.1 Security Update : clamav (SAT Patch Numbers 2479 / 2480)

This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - A off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs CVE-2010-1639 / CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3268 / 3270)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...

SuSE 11 Security Update : TeX (SAT Patch Number 2393)

Specially crafted dvi files could cause buffer overflows in dvips and dvipng CVE-2010-0827 / CVE-2010-0829 / CVE-2010-0739 / CVE-2010-1440. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11 Security Update : libvirt (SAT Patch Number 2787)

Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host. CVE-2010-2242 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 / 11.1 Security Update : w3m (SAT Patch Numbers 2560 / 2563)

w3m does not handle embedded NUL characters in the common name and in subject alternative names of X.509 certificates CVE-2010-2074. This update fixes the issue and also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11 / 11.1 Security Update : ncpfs (SAT Patch Numbers 2396 / 2456)

This update fixes three security issues in ncpfs : - Fixed a information leakage on mount. CVE-2010-0790 / bnc583536 - Fixed a mtab locking problem. CVE-2010-0791 / bnc583536 - Fixed a race condition in ncpfs mounts CVE-2010-0788 / bnc550004 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

SuSE 11 / 11.1 Security Update : postgresql (SAT Patch Numbers 2457 / 2458)

This update of postgresql fixes several minor security vulnerabilities : - Postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. CVE-2010-1975 - The PL/Tcl implementation in postgresql loa...

SuSE 11 / 11.1 Security Update : libpng (SAT Patch Numbers 3045 / 3046)

Specially crafted png files could cause crashes or even execution of arbitrary code in applications using libpng to process such files. CVE-2010-1205 / CVE-2010-2249 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuS...