SuSE9 Security Update : Postfix (YOU Patch Number 12219)

A local privilege escalation vulnerability as well as a mailbox ownership problem has been fixed in postfix. CVE-2008-2936 and CVE-2008-2937 have been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : clamav (YOU Patch Number 12236)

This version update of clamav to 0.94 fixes numerous problems, including the following security issues : - Fix possible invalid memory access. CVE-2008-1389 - Fix out-of-memory null dereference. CVE-2008-3912 - Fix error path memory leaks and file descriptor leaks. CVE-2008-3913, CVE-2008-3914...

SuSE9 Security Update : audiofile (YOU Patch Number 12342)

A heap-overflow in libaudiofile was fixed. The overflow existed in the WAV processing code and can be exploited to execute arbitrary code. CVE-2008-5824 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : gdm (YOU Patch Number 11050)

This update solves a bug in GDM. This bug allows to bypass root authorization to access the login configuration. CVE-2006-2452 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : openssl (YOU Patch Number 12341)

This update improves the verification of return values. Prior to this udpate it was possible to bypass the certification chain checks of openssl. CVE-2008-5077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : the webdav apache module (YOU Patch Number 9363)

A vulnerability in the WebDAV module has been fixed. A remote attacker could crash a server process, leading to a Denial of Service scenario. Only installations configured for WebDAV access were affected. See http://nagoya.apache.org/bugzilla/showbug.cgi?id=31183. CVE-2004-0809 has been assigned ...

SuSE9 Security Update : perl-DBI (YOU Patch Number 9838)

This update fixes insecure temp. file handling. CVE-2005-0077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41346; scriptversion"1.9";...

SuSE9 Security Update : Red Carpet (YOU Patch Number 11461)

This update fixes a bug in the HTTP header parsing code of the included libsoup. This bug makes rcd vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : enscript (YOU Patch Number 9867)

Unsanitised input can caues the execution of arbitrary commands via EPSF pipe support. This has been disabled, also upstream. CVE-2004-1184 - Due to missing sanitising of filenames it is possible that a specially crafted filename can cause arbitrary commands to be executed. CVE-2004-1185 -...

SuSE9 Security Update : Ghostscript (YOU Patch Number 12074)

A stack-based buffer overflow was fixed in the ghostscript interpreter, which potentially could be used to execute code or at least crash ghostscript. CVE-2008-0411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : ClamAV (YOU Patch Number 12388)

ClamAV update to version 0.95. This also fix some potential security bugs. CVE-2009-1241 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41290;...

SuSE9 Security Update : liblcms,liblcms-devel (YOU Patch Number 11955)

Various security issues in liblcms have been found that occur while parsing ICC profiles in JPEG images. A remote attacker can exploit these bugs to execute arbitrary commands or cause denial-of-service by tricking the user to view a specially crafted JPEG image. This issue has been tracked by...

SuSE9 Security Update : cups (YOU Patch Number 12099)

This update of cups fixes a denial-of-service bug double-free CVE-2008-0882 and specially crafted IPP packets can make cups crash too. CVE-2008-0596, CVE-2008-0597 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : clamav (YOU Patch Number 12201)

This update brings clamav to version 0.93.3. It lists CVE-2008-2713 as fixed, but this was fixed in 0.93.1 already, but not mentioned. The update contains stability and bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : Apache (YOU Patch Number 12125)

This update fixes multiple bugs in apache : - cross-site scripting problem when processing the 'Expect' header. CVE-2006-3918 - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module...

SuSE9 Security Update : perl (YOU Patch Number 11964)

Specially crafted regular expressions could lead to a buffer overflow in perl's regular expressions engine. Scripts processing data from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. Depending on the purpose of the scripts, the vulnerability ca...

SuSE9 Security Update : netpbm (YOU Patch Number 11701)

This update fixes a buffer overflow in the RGBA-palette code. The bug can be abused to trigger a denial-or-service attack by feeding untrusted data to 'pnmtopng -alpha' maybe via a remote service like a CGI, mail user agent, etc. The execution of arbitrary code is theoretically possible but...

SuSE9 Security Update : Apache 2 (YOU Patch Number 12124)

This update fixes multiple bugs in apache : - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module. CVE-2008-0005 - cross-site scripting problem in the error page for status code 41...

SuSE9 Security Update : gvim and vim (YOU Patch Number 12018)

Vim allows to open content via external programs if the argument contains a 'http:' sub-string. It insecurely invoked external web browsers to fetch the remote content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : horde (YOU Patch Number 11488)

This update fixes a cross-site scripting bug XSS in horde. CVE-2007-1473 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41123; scriptversion"1.8";...