SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)

This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...

SuSE 11 / 11.1 Security Update : krb5 (SAT Patch Numbers 3547 / 3549)

Multiple remote vulnerabilities in the MIT krb5 package have been fixed. They affect client as well as server software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 / 11.1 Security Update : PHP5 (SAT Patch Numbers 3489 / 3490)

The following issues have been fixed : - Insufficient handling of certain character sequences in the utf8decode function could be leveraged to conduct cross-site scripting XSS attacks. CVE-2010-3870 - php5 could also consume large amounts of memory and crash if a long mail address was passed to...

SuSE 11 Security Update : Apache 2 (SAT Patch Number 2293)

The following bugs have been fixed : - When using a multithreaded MPM Apache could leak memory of requests handled by a different thread when processing subrequests. CVE-2010-0434 - Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11 / 11.1 Security Update : freetype2 (SAT Patch Numbers 2914 / 2919)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...

SuSE 11 / 11.1 Security Update : Samba (SAT Patch Numbers 3099 / 3100)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code. CVE-2010-3069 Additionally the update also contains fixes for the following non-security issues : - Failed to join ADS Domain. bnc567013 - Samba 3.0 / 3.2 doesn't work...

SuSE 11 Security Update : systemtap (SAT Patch Number 2579)

This update of systemtab fixes a shell meta character injection vulnerability that allows remote users to execute arbitrary commands with the privileges of the stap-server. CVE-2009-4273 Additionally, a remote denial of service bug in the getargv function has been fixed. CVE-2010-0411 %NASLMINLEV...

SuSE 11 Security Update : okular. (SAT Patch Number 3064)

This update fixes a heap-based overflow in okular. The RLE decompression in the TranscribePalmImageToJPEG function can be exploited to execute arbitrary code with user privileges by providing a crafted PDF file. CVE-2010-2575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11 / 11.1 Security Update : libvorbis (SAT Patch Numbers 2486 / 2487)

This update of libvorbis fixes a memory corruption while parsing OGG files. The bug is exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. The issue has been tracked as CVE-2009-2663. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11 Security Update : puppet (SAT Patch Number 2113)

pupped created temporary files with fixed names. Local attacks could exploit that to install symlinks that overwrite files of the victim. CVE-2010-0156 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 Security Update : fuse (SAT Patch Number 2078)

A race condition in fusermount allows non-privileged users to umount any file system. CVE-2010-0789 Note: this is a re-release of the previous update with a better patch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3155 / 3157)

Flash Player was updated to version 10.1.85.3 to fix a critical security issue. CVE-2010-2884 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 /...

SuSE 11 Security Update : NetworkManager (SAT Patch Number 3094)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11 Security Update : kdm (SAT Patch Number 2136)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11 / 11.1 Security Update : mipv6d (SAT Patch Numbers 3048 / 3049)

The following issues have been fixed : - the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages. CVE-2010-2522 - remote attackers could cause buffer overflows in mipv6d. CVE-2010-2523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : pcsc-lite (SAT Patch Number 2645)

This update of pcsc-lite fixes a local vulnerability stack overflow which allowed every user with write-access to '/var/run/pcscd/pcscd.comm' to gain root privileges. CVE-2010-0407 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

SuSE 11 / 11.1 Security Update : OpenSSL (SAT Patch Numbers 3208 / 3209)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 2322)

Specially crafted PDF documents could crash acroread or even lead to execution of arbitrary code. CVE-2010-0190 / CVE-2010-0191 / CVE-2010-0192 / CVE-2010-0193 / CVE-2010-0194 / CVE-2010-0195 / CVE-2010-0196 / CVE-2010-0197 / CVE-2010-0198 / CVE-2010-0199 / CVE-2010-0201 / CVE-2010-0202 /...

SuSE 11 Security Update : OpenSSL (SAT Patch Number 2214)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 Installation notes This update is provided as RPM packages that can easily be installed onto a running system by...