SuSE 11 Security Update : libpoppler4 (SAT Patch Number 1034)

This update of poppler: fix various security bugs that occur while decoding JBIG2. CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0165 / CVE-2009-0166 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 / CVE-2009-1180 / CVE-2009-1181 / CVE-2009-1182 / CVE-2009-1183 Further a denial of service bug in...

SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1199)

The Mozilla NSS security framework was updated to version 3.12.3.1. - Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services NSS before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger AIM, allows remote SSL...

SuSE 11 Security Update : libtiff (SAT Patch Number 1172)

This update of the tiff package fixes various integer overflows in the tools. CVE-2009-2347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : ipsec-tools (SAT Patch Number 998)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11 Security Update : clamav, clamav-db, clamav-debuginfo, clamav-debugsource (SAT Patch Number 795)

This clamav version upgrade to 0.95.1 fixes a buffer overflow error in the cliurlcanon function and a denial of service condition occuring while parsing malformed UPack archives. cve ids missing still %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

SuSE 11 Security Update : XEmacs (SAT Patch Number 1183)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xeamcs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11 Security Update : udev (SAT Patch Number 766)

This update fixes a local privilege escalation in udev. - udev did not check the origin of the netlink messages. A local attacker could fake device create events and so gain root privileges. CVE-2009-1185 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

SuSE 11 Security Update : ClamAV (SAT Patch Number 1009)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : gstreamer (SAT Patch Number 742)

Specially crafted cover art tags in vorbis files could trigger a heap overflow in the base64 decoder. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-0586 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit...

SuSE 11 Security Update : nagios (SAT Patch Number 1105)

A shell injection bug in nagios' statuswml.cgi CGI script has been fixed. CVE-2009-2288 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 Security Update : OpenSSL (SAT Patch Number 789)

This update of openssl fixes the following problems : - ASN1STRINGprintex function allows remote denial of service. CVE-2009-0590 - denial of service due to malformed ASN.1 structures. CVE-2009-0789 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

SuSE 11 Security Update : libwmf (SAT Patch Number 822)

A specially crafted WMF files could crash libwmf. CVE-2009-1364 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11 Security Update : Xine (SAT Patch Number 643)

Specially crafted 4x movie files could cause an integer overflow in xine-lib. CVE-2009-0698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : Perl (SAT Patch Number 994)

A Buffer overflow in perl, in the base Compress::Raw::Zlib perl module has been fixed. CVE-2009-1391 Additionaly three non security bugs were fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 Security Update : openswan (SAT Patch Number 678)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon. CVE-2009-0790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 904)

This update of acroread fixes two vulnerabilities in the JavaScript API that allow attackers to execute arbitrary code with a malformed PDF file. CVE-2009-1492 / CVE-2009-1493 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

SuSE 11 Security Update : PostgreSQL (SAT Patch Number 674)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

SuSE 11 Security Update : CUPS (SAT Patch Number 790)

Specially crafted tiff files could cause an integer overflow in the 'imagetops' filter. CVE-2009-0163 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11 Security Update : ClamAV (SAT Patch Number 749)

ClamAV update to version 0.95. This also fix some potential security bugs. CVE-2009-1241 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : PHP5 (SAT Patch Number 1015)

This update fixes the JSON parser CVE-2009-1271 and the zip packer code CVE-2009-1272 in php5. Both bugs can lead to a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...