SuSE9 Security Update : netpbm (YOU Patch Number 12068)

Specially crafted GIF images could cause a buffer overflow and crash netpbm. It seems unlikely but not entirely impossible that this overflow can be exploited to execute arbitrary code. CVE-2008-0554 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE9 Security Update : libvorbis (YOU Patch Number 12159)

Several security problems were fixed in libvorbis : - Division by zero. CVE-2008-1419 - integer overflow. CVE-2008-1420 - integer overflow. CVE-2008-1423 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12387)

This update brings the IBM Java 1.4.2 JDK and JRE to Service Release 13. It fixes lots of bugs and various security issues : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running t...

SuSE9 Security Update : Sun Java (YOU Patch Number 12321)

The version update to SUN Java 1.4.2sr19 fixes numerous security issues such as privilege escalations. CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-5355,...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 11509)

This update fixes two vulnerabilities that affect the backend server and can only be exploited by authenticated users to cause a denial-of-service, or maybe to access other tables/databases without authentication. CVE-2007-0555 CVE-2007-0556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

SuSE9 Security Update : libtiff (YOU Patch Number 12229)

A buffer underflow CVE-2008-2327 has been fixed in libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41236; scriptversion"1.8";...

SuSE9 Security Update : permissions (YOU Patch Number 10815)

It is technically impossible to change permissions files in of world writeable directories that don't have the sticky bit set in a secure way. This update therefore removes /var/lib/xmcd/discog from /etc/permissions. Furthermore permissions handling of files below /var/games is removed. To be abl...

SuSE9 Security Update : ndiswrapper (YOU Patch Number 12315)

The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings. CVE-2008-4395 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : libxml2 (YOU Patch Number 12350)

A previous security fix for libxml2 caused problems when processing large xml files. The patch has been reworked so processing large files works again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : University of Washington IMAP (YOU Patch Number 10523)

The client part of the University of Washington IMAP implementation is prone to a buffer overflow while parsing mailbox names. This bug can probably be exploited by a remote attacker to execute arbitrary code with the privileges of the user running the affected mail client. %NASLMINLEVEL 70300 C...

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

SuSE9 Security Update : sendmail (YOU Patch Number 11200)

Without this update sendmail may crash when finishing a mail due to referencing an already freed variable. CVE-2006-4434 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : xscreensaver (YOU Patch Number 11506)

Xscreensaver could crash under certain circumstances causing the screen to unlock. That could happen for example when LDAP is used for authentication and the network connection gets interrupted for a long time. CVE-2007-1859 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

SuSE9 Security Update : bind (YOU Patch Number 12197)

The transaction id and the udp source port used for DNS queries by the bind nameserver were predictable. Attackers could potentially exploit that weakness to manipulate the DNS cache 'DNS cache poisoning', CVE-2008-1447. Additionally the root.hint zone file was updated to contain the new IP numbe...

SuSE9 Security Update : GhostScript (YOU Patch Number 12417)

Specially crafted file could cause a heap-overflow in JBIG2 decoder CVE-2009-0196, an integer overflow in ICC library CVE-2009-0792 or crash the CCITTFax decoder. CVE-2007-6725 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : postgresql-pl (YOU Patch Number 12407)

Due to tight package dependencies postgresql-pl has to be updated to match the recently released postgresql packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12222)

This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...

SuSE9 Security Update : enscript (YOU Patch Number 12349)

Long path names could overflow a buffer in enscript. CVE-2008-5078 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41277; scriptversion"1.9";...

SuSE9 Security Update : IBM Java 5 JRE and IBM Java 5 SDK (YOU Patch Number 12422)

The update brings IBM Java 5 to SR9-SSU. It fixes a lot of security issues : - A vulnerability in the Java Runtime Environment JRE with storing temporary font files may allow an untrusted applet or application to consume a disproportionate amount of disk space resulting in a denial-of-service...

SuSE9 Security Update : opensc (YOU Patch Number 12216)

This update fix a security issues with opensc that occurs during initializing blank smart cards with Siemens CardOS M4. It allows to set the PIN of the smart card without authorization. CVE-2008-2235 NOTE: Already initialized cards are still vulnerable after this update. Please use the command-li...