SuSE9 Security Update : libxml2 (YOU Patch Number 12469)

This update of libxml2 does not use pointers after they were freed anymore. CVE-2009-2416 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41319;...

SuSE9 Security Update : gnutls (YOU Patch Number 11228)

A security problem in the GNU TLS library has been found : If an RSA key with exponent 3 is used, the PKCS padding gets removed before generating a hash, which allows remote attackers to forge a PKCS signature that apapears to be signed by that RSA key and prevents gnutls from correctly verifying...

SuSE9 Security Update : freetype2 (YOU Patch Number 12398)

Freetype was updated to fix some integer overflows that can be exploited remotely in conjunction with programs like a web-browser. CVE-2009-0946 Thanks to Tavis Ormandy who found the bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : SLES9-SP4: Security update for yast2-mail-server (YOU Patch Number 11602)

If you go to YaST -- Mail Server -- FetchMail and select add account window. While entering the password for the remote user, it shows the password. Now the password field echoes '', instead of plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE9 Security Update : DHCP (YOU Patch Number 12347)

This update contains a backported patch from dhcp-3.0.7 to fix a buffer overflow which could lead to a denial-of-service condition in cases when the dhcp server is configured to send many DHCP options to clients. CVE-2007-0062 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE9 Security Update : libpng (YOU Patch Number 12358)

A allocation mistake in libpng's pngread.c has been fixed CVE-2009-0040. The previous update was using an incomplete patch so it needed to be reissued. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : SLES9-SP4: Security update for sudo (YOU Patch Number 11660)

Permissions of file /etc/sudoers was changed from 0640 to 0440 for security reasons. Fate 300934 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41142;...

SuSE9 Security Update : htdig (YOU Patch Number 9833)

This update fixes a cross-site scripting vulnerability that can be exploited remotely. CVE-2005-0085 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41345;...

SuSE9 Security Update : ethereal (YOU Patch Number 12485)

Flaws in the AFS dissector allowed attackers to crash ethereal via specially crafted network traffic have been fixed. CVE-2009-2562 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : Postfix (YOU Patch Number 12219)

A local privilege escalation vulnerability as well as a mailbox ownership problem has been fixed in postfix. CVE-2008-2936 and CVE-2008-2937 have been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : IBMJava5 JRE and IBMJava5 SDK (YOU Patch Number 12265)

IBM Java 5 was updated to SR8a to fix a security issue : - A vulnerability in the Java Management Extensions JMX agent when local monitoring is enabled, allowed remote attackers to 'perform unauthorized operations'. CVE-2008-3103 This update also includes new timezone data and fixes missing...

SuSE9 Security Update : xntp, xntp-doc (YOU Patch Number 12338)

This update of ntp improves a check for the return value of openssl's function EVPVerifyFinal. CVE-2009-0021 Additionally a fix non-security for starting ntpd with the option -x was added. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : resmgr (YOU Patch Number 9434)

This update of resmgr improves the stability of determining terminal names. Without this fix it is possible for users to fake terminals, and therefore login types, in the context of the resmgr. This is just a minor issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description o...

SuSE9 Security Update : e2fsprogs (YOU Patch Number 12019)

This update of e2fsprogs fixes several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. CVE-2007-5497 %NASLMINLEVEL 70300 C Tenable Network...

SuSE9 Security Update : KDE3 FlashPlayer support (YOU Patch Number 12056)

This update is necessary to support the new FlashPlayer version, which required XEmbed support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41189;...

SuSE9 Security Update : ClamAV (YOU Patch Number 12318)

Specially crafted jpg files could crash the clamd daemon of clamav. CVE-2008-5314 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41262; scriptversion"1.8";...

SuSE9 Security Update : OpenSSL (YOU Patch Number 12397)

This update of OpenSSL fixes the following problems : - ASN1STRINGprintex function allows remote denial of service. CVE-2009-0590 - denial of service due to malformed ASN.1 structures. CVE-2009-0789 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE9 Security Update : libtiff (YOU Patch Number 12448)

This update of libtiff fixes a buffer underflow in LZWDecodeCompat. CVE-2009-2285 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41311; scriptversion"1.8";...

SuSE9 Security Update : libxml (YOU Patch Number 9579)

This update adds missing patches for a buffer overflow in URL parsing code CVE-2004-0989 and a buffer overflow while handling DNS responses. CVE-2004-0110 These bugs can be exploited remotely to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

SuSE9 Security Update : curl (YOU Patch Number 12467)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...