SuSE 10 Security Update : SpamAssassin (ZYPP Patch Number 2521)

Primary it is a version update for the packages spamassassin und perl-spamassasin to version 3.1.7. Furthermore the following bugs were fixed : - SpamAssassin URIDNSBL plugin tries to lookup libraries libimf.so, liblua.so, ... via nameserver - BUG in archive PgSQL.pm SpamAssassin %NASLMINLEVEL...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 4477)

This update of openssl fixes a off-by-one buffer overflow in function SSLgetsharedciphers. This vulnerability potentially allows remote code execution; depending on memory layout of the process. CVE-2007-5135 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin...

SuSE 10 Security Update : libexif5 (ZYPP Patch Number 3723)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : clamav (ZYPP Patch Number 3081)

The version update to 0.90.2 fixes among other things two security problems. CVE-2007-1745 / CVE-2007-1997 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29400...

SuSE 10 Security Update : tcpdump (ZYPP Patch Number 4037)

This update fixes a buffer overlow that could be triggered when displaying BGP packets. CVE-2007-3798 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29588;...

SuSE 10 Security Update : ktorrent (ZYPP Patch Number 3049)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384 / CVE-2007-1799. Another bug could be exploited to crash Ktorrent. CVE-2007-1385 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SuSE 10 Security Update : gimp (ZYPP Patch Number 1920)

A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. CVE-2006-3404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : KDE (ZYPP Patch Number 4433)

Users could log in as root without having to enter the password if auto login was enabled and if kdm was configured to require the root passwort to shutdown the system. CVE-2007-4569 JavaScript code could modify the URL in the address bar to make the currently displayed website appear to come fro...

SuSE 10 Security Update : clamav (ZYPP Patch Number 3902)

This clamav version update to 0.91.1 fixes among other things the long startup time of version 0.90.3 as well as a possibilty to crash clamav with specially crafted rar archives. CVE-2007-3725 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, In...

SuSE 10 Security Update : unrar (ZYPP Patch Number 2997)

This update fixes a stack-absed buffer overflow in unrar that can be exploited with user-assistence by sending a password-protected archive. CVE-2007-0855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : liblcms,liblcms-devel (ZYPP Patch Number 4626)

This update addresses security bugs in liblcms that occurred while parsing ICC profiles in JPEG images. CVE-2007-2741 Remote attackers can exploit this bug to execute arbitrary commands or cause denial-of-service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : Python (ZYPP Patch Number 2167)

A buffer overflow within python's repr function has been fixed. The CAN number CVE-2006-4980 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : openldap2 (ZYPP Patch Number 4679)

This update fixes multiple flaws that could cause slapd to crash. CVE-2007-5707 / CVE-2007-5708 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29536;...

SuSE 10 Security Update : gd (ZYPP Patch Number 3748)

This update fixes a denial-of-service bug in libgd that can occur while processing crafted images. CVE-2007-2756 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : cups (ZYPP Patch Number 3716)

The previous cups update CVE-2007-0720 was incomplete and could lead to cupsd crashing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29411;...

SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 2426)

The SUN Java packages have been upgraded to 1.4.2 update 13 to fix various security problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29471;...

SuSE 10 Security Update : gnome-screensave (ZYPP Patch Number 4284)

Memory corruption made the gnome-screensaver process crash when the screen was locked, leaving the desktop accessible to anyone without having to enter a password. This fixes this memory corruption, as confirmed by internal testing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 2276)

The SQL Server PostgreSQL has been updated to fix the following security problems : - backend/parser/analyze.c in PostgreSQL 8.1.x allowed remote authenticated users to cause a denial of service daemon crash via certain aggregate functions in an UPDATE statement, which are not properly handled...

SuSE 10 Security Update : xpdf-tools (ZYPP Patch Number 2474)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE 10 Security Update : Tk (ZYPP Patch Number 4478)

This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...