SuSE9 Security Update : libpng, libpng-devel (YOU Patch Number 12339)

This update of libpng fixes the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0. CVE-2008-5907 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

SuSE9 Security Update : e2fsprogs (YOU Patch Number 11997)

This update of e2fsprogs fixes several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. CVE-2007-5497 %NASLMINLEVEL 70300 C Tenable Network...

SuSE9 Security Update : ClamAV (YOU Patch Number 12402)

This clamav version upgrade to 0.95.1 fixes a buffer overflow error in the cliurlcanon function CVE-2009-1372 and a denial of service condition occuring while parsing malformed UPack archives. CVE-2009-1371 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin i...

SuSE9 Security Update : ClamAV (YOU Patch Number 12388)

ClamAV update to version 0.95. This also fix some potential security bugs. CVE-2009-1241 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41290;...

SuSE9 Security Update : Red Carpet (YOU Patch Number 11461)

This update fixes a bug in the HTTP header parsing code of the included libsoup. This bug makes rcd vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : Sun Java (YOU Patch Number 12321)

The version update to SUN Java 1.4.2sr19 fixes numerous security issues such as privilege escalations. CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-5355,...

SuSE9 Security Update : XFree86 (YOU Patch Number 12170)

This update fixes multiple vulnerabilities reported by iDefense : - RENDER Extension heap buffer overflow. CVE-2008-2360 - RENDER Extension crash. CVE-2008-2361 - RENDER Extension memory corruption . CVE-2008-2362 - MIT-SHM arbitrary memory read. CVE-2008-1379 - RECORD and Security extensions...

SuSE9 Security Update : nessus (YOU Patch Number 9359)

nessus-adduser created temporary files in $TMPDIR in an insecure way. This has been fixed by creating an additional temporary directory first. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : htdig (YOU Patch Number 9833)

This update fixes a cross-site scripting vulnerability that can be exploited remotely. CVE-2005-0085 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41345;...

SuSE9 Security Update : Apache (YOU Patch Number 12125)

This update fixes multiple bugs in apache : - cross-site scripting problem when processing the 'Expect' header. CVE-2006-3918 - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module...

SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12336)

This update brings IBM Java 5 to Service Release 9. It fixes the following security problems : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running the applet or application...

SuSE9 Security Update : Postfix (YOU Patch Number 12219)

A local privilege escalation vulnerability as well as a mailbox ownership problem has been fixed in postfix. CVE-2008-2936 and CVE-2008-2937 have been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : ethereal (YOU Patch Number 12485)

Flaws in the AFS dissector allowed attackers to crash ethereal via specially crafted network traffic have been fixed. CVE-2009-2562 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : curl (YOU Patch Number 12467)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : libtiff (YOU Patch Number 12448)

This update of libtiff fixes a buffer underflow in LZWDecodeCompat. CVE-2009-2285 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41311; scriptversion"1.8";...

SuSE9 Security Update : acpid (YOU Patch Number 9486)

This update removes the possibility for a local DoS attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41337; scriptversion"1.8";...

SuSE9 Security Update : libsoup (YOU Patch Number 11401)

This update fixes a bug in the HTTP header parsing code. Applications using this library maybe vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'...

SuSE9 Security Update : libtiff (YOU Patch Number 12470)

This update of the tiff package fixes various integer overflows in the tools. CVE-2009-2347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41320;...

SuSE9 Security Update : GnuTLS (YOU Patch Number 12230)

Multiple issues have been fixed in gnutls. CVE-2008-1948 GNUTLS-SA-2008-1-1, CVE-2008-1949 GNUTLS-SA-2008-1-2 and CVE-2008-1950 GNUTLS-SA-2008-1-3 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : ethereal (YOU Patch Number 12098)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...