SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 2900 / 2901)

Flash Player was updated to version 10.1.82.76 fixing several critical security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

SuSE 11 / 11.1 Security Update : freetype2 (SAT Patch Numbers 3202 / 3203)

When loading specially crafted font files applications linked against freetype2 could crash or potentially even execute arbitrary code CVE-2010-3311 / CVE-2010-3053 / CVE-2010-3054. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

SuSE 11 / 11.1 Security Update : bogofilter (SAT Patch Numbers 2665 / 2666)

This update of bogofilter/bogolexer fixes a heap-based buffer underflow vulnerability which could be exploited to cause a denial of service or potentially execute arbitrary code. CVE-2010-2494 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 11 / 11.1 Security Update : Perl (SAT Patch Numbers 2833 / 2834)

perl Safe.pm module was affected by two problems where attackers could break out of such a safed execution CVE-2010-1447 / CVE-2010-1168. This update fixes this problem. It also fixes the following bugs : - fix tell cornercase bnc596167 - fix regex memory leak bnc557636 - also run h2ph on...

SuSE 11 Security Update : krb5 (SAT Patch Number 2235)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 / 11.1 Security Update : acroread (SAT Patch Numbers 2637 / 2641)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...

SuSE 11 Security Update : gimp (SAT Patch Number 2155)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. CVE-2009-1570 / CVE-2009-3909 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11 / 11.1 Security Update : quagga (SAT Patch Numbers 3535 / 3536)

This update of quagga fixes two security issues : - Stack-based buffer overflow while processing malformed Route-Refresh messages. CVE-2010-2948: CVSS v2 Base Score: 6.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P - Denial of service while processing malformed BGP update AS path messages. CVE-2010-2949: CV...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 3358 / 3361 / 3362)

This security update of the SUSE Linux Enterprise 11 GA kernel updates the kernel to 2.6.27.54 and fixes various security issues and other bugs. The following security issues were fixed : - Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel allowed local users to cause a...

SuSE 11 Security Update : Mozilla (SAT Patch Number 2239)

Mozilla NSS was updated to version 3.12.6. This fixes all currently known issues in mozilla-nss, and also implements the new TLS/SSL renegotiation handling. CVE-2009-3555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11 Security Update : GDM (SAT Patch Number 3255)

This update provides the following fix : - 627893: Fix that upon relogin gdm displays the Windows domain, but tries to authenticate locally. In addition this update was rebuilt against the latest dbus-glib bindings to avoid that local users can write properties that were exported read-only via...

SuSE 11 Security Update : Xen (SAT Patch Number 2230)

Collective Xen/201004 Update, containing fixes for the following issues : - pygrub, reiserfs: Fix on-disk structure definition bnc537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc561912 - xend leaks memory bnc564750 - Keyboard Caps Lock key works abnormal under SLES11 xen...

SuSE 11 / 11.1 Security Update : mono-core / Mono (SAT Patch Numbers 2326 / 2474)

Mono's ASP.NET implementation did not set the 'EnableViewStateMac' property by default. Attackers could exploit that to conduct cross-site scripting XSS attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3004 / 3005)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...

SuSE 11 / 11.1 Security Update : libHX13 (SAT Patch Numbers 2979 / 2980)

This update fixes a heap-based buffer overflow in HXsplit of libHX. CVE-2010-2947 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 30...

SuSE 11 / 11.1 Security Update : Mozilla (SAT Patch Numbers 3339 / 3340)

The Mozilla NSS Library was updated to version 3.12.8 and the Mozilla NSPR Library was updated to 4.8.6 to fix various bugs and one security issue : - Disallow wildcard matching in X509 certificate Common Names. This update also has preparations for Firefox 4 support, and a updated Root Certifica...

SuSE 11 Security Update : openLDAP (SAT Patch Number 2552)

Several issues have been fixed in OpenLDAP : - specially crafted MODRDN operations can crash the OpenLDAP server. CVE-2010-0211 / CVE-2010-0212 - syncrepl might loose deletes in refreshAndPersist mode - DoS when handling 0-bytes %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11 Security Update : compiz (SAT Patch Number 2005)

The expo plugin in Compiz Fusion allowed local users with physical access to bypass the screen-saver by just dragging it aside. CVE-2008-6514: CVSS v2 Base Score: 6.2. This has been fixed. %NASLMINLEVEL 70300 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 8000...

SuSE 11 Security Update : Samba (SAT Patch Number 2126)

With enabled 'wide links' Samba follows symbolic links on the server side, therefore allowing clients to overwrite arbitrary files CVE-2010-0926. This update changes the default setting to have 'wide links' disabled by default. The new default only works if 'wide links' is not set explicitly in...