SuSE9 Security Update : libgtop (YOU Patch Number 11406)

This update fixes a buffer overflow in libgtop's glibtopgetprocmaps function. CVE-2007-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41116;...

SuSE9 Security Update : Ghostscript (YOU Patch Number 12375)

Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files. CVE-2009-0583, CVE-2009-0584 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE9 Security Update : ipsec-tools (YOU Patch Number 12438)

This update of ipsec-tools fixes multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : Epiphany (YOU Patch Number 12326)

The Mozilla Browser received backports for security problems in 1.8.1.14. The following security issues were fixed : - Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute arbitrary...

SuSE9 Security Update : quagga (YOU Patch Number 12416)

This update fixes a remote denial of service bug in quagga that can be triggered via an AS path containing ASN elements whose string representation is longer than expected. CVE-2009-1572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : Samba (YOU Patch Number 12002)

This update of Samba fixes a buffer overflow in function sendmailslot that allows to overwrite the stack with zero-bytes. CVE-2007-6015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

SuSE9 Security Update : bind (YOU Patch Number 12462)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if bind is master for a zone even if ddns is not configured CVE-2009-0696. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE9 Security Update : libpng (YOU Patch Number 12444)

This update of libpng improves the parsing of 1-bit interlaced images. This bug could be abused to use 'out-of-bounds pixels' to read memory. CVE-2009-2042 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : net-snmp (YOU Patch Number 12441)

With this update of net-snmp the handling of TCP wrappers rules for client authorization was improved, prior to this update it was possible for remote attackers to bypass intended access restrictions and execute SNMP queries. CVE-2008-6123 Additionally binding to multiple interfaces was improved...

SuSE9 Security Update : mod_python (YOU Patch Number 9905)

This update fixes an information leak in modpython when using the publisher handle. Due to the bug it is possible to get access to published objects remotely without permission. CVE-2005-0088 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : KDE3 FlashPlayer support (YOU Patch Number 12053)

This update is necessary to support the new FlashPlayer version, which required XEmbed support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41188;...

SuSE9 Security Update : vim and gvim (YOU Patch Number 11722)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : PHP4 (YOU Patch Number 11666)

This update fixes multiple bugs in PHP : - Predictable generaton of an initialization vector IV in the mcrypt extension - Additional cookie attributes could be injected via a session ID. - Specially crafted files could cause integer overflows in gd and leverage them to at least crash gd based...

SuSE9 Security Update : Tomcat (YOU Patch Number 12232)

This update of tomcat fixes another directory traversal bug which occurs when allowLinking and UTF-8 are enabled. CVE-2008-2938 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE9 Security Update : net-snmp (YOU Patch Number 12022)

This update of net-snmp fixes the following bugs : - Default and configurable maximum number of varbinds returnable to a GETBULK request. CVE-2007-5846 - Add option to ignore accepted connections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

SuSE9 Security Update : postgresql (YOU Patch Number 12065)

This version update to 8.1.11 fixes among other things, several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772, CVE-2007-6067, CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...

SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12210)

This update of IBM Java to 1.4.2 SR11 fixes various security problems : - Stack-based buffer overflow in Java Web Start javaws.exe allows remote attackers to execute arbitrary code via a crafted JNLP file. CVE-2008-1196 - Unspecified vulnerability in the Java Runtime Environment JRE allows remote...

SuSE9 Security Update : opensc, opensc-devel (YOU Patch Number 12240)

This revised update fixes a security issue with opensc that occurs when initializing blank smart cards with Siemens CardOS M4. After initialization, anyone could set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: cards already initialized with the old version are still...

SuSE9 Security Update : ClamAV (YOU Patch Number 12442)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41307; scriptversion"1.7";...

SuSE9 Security Update : Tomcat (YOU Patch Number 12343)

Two old but not yet fixed security issues in tomcat5 were spotted and are fixed by this update : - Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon ; preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.d...