SuSE 10 Security Update : the Linux Kernel (x86_64) (ZYPP Patch Number 6730)

This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraidsas driver was worldwriteable, allowing local users to cause a denial of service or potential code...

SuSE 10 Security Update : Linux kernel (x86_64) (ZYPP Patch Number 2096)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5239)

This kernel update fixes the following security problems : - tunneled ipv6 packets SIT could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. CVE-2008-2136 Additionally the following bugfixes have been included for all platforms : -...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8094)

IBM Java 1.6.0 has been updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8100)

IBM Java 1.5.0 has been updated to SR13-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8114)

This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in php5. CVE-2012-1172 - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal Apache module mode setup...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8116)

Flash Player was updated to version 11.2.202.233, fixing a critical security problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid59054; scriptversion"1.6";...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 8085)

This version upgrade of wireshark fixes the following security vulnerabilities : - The ANSI A dissector could dereference a NULL pointer and crash. CVE-2012-1593 - The pcap and pcap-ng file parsers could crash trying to read ERF data. CVE-2012-1595 - The MP2T dissector could try to allocate too...

SuSE 10 Security Update : Python (ZYPP Patch Number 8080) (BEAST)

The following issues have been fixed in this update : - hash randomization issues CVE-2012-115 see below - SimpleHTTPServer XSS. CVE-2011-1015 - SSL BEAST vulnerability CVE-2011-3389 The hash randomization fix is by default disabled to keep compatibility with existing python code when it extracts...

SuSE 10 Security Update : tiff (ZYPP Patch Number 8055)

This update of tiff fixes an issue where specially crafted tiff files could trigger an integer overflow which leads to a heap-based buffer overflow. CVE-2012-1173 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8077)

The Acrobat Reader has been updated to version 9.5.1 to fix the following issues : - crafted fonts inside PDFs could allow attackers to cause an integer overflow, resulting in the possibility of arbitrary code execution. CVE-2012-0774 - an issue in acroread's JavaScript API could allowattackers t...

SuSE 10 Security Update : Samba (ZYPP Patch Number 8058)

A remote code execution flaw in Samba has been fixed : - PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size. CVE-2012-1182 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8039)

Specially crafted font files could have caused buffer overflows in freetype. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 8034)

The following security issue has been fixed : - Specially crafted MIME headers could cause OpenSSL's ans1 parser to dereference a NULL pointer leading to a Denial of Service CVE-2006-7250 or fail verfication. CVE-2012-1165 Additionally, two other bugs have been fixed : - free headers after use in...

SuSE 10 Security Update : libxslt (ZYPP Patch Number 8019)

libxslt was prone to an out-of-bounds read flaw when parsing certain patterns CVE-2011-3970. This could have lead to a denial of service and is fixed with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8006)

flash-player 11.1.102.63 fixes two security issues : - memory corruption vulnerability in Matrix3D could lead to code executionn. CVE-2012-0768 - integer errors that could lead to information disclosure. CVE-2012-0769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of th...

SuSE 10 Security Update : libvorbis (ZYPP Patch Number 7984)

Specially crafted Ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code. CVE-2012-0444 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : CVS (ZYPP Patch Number 7991)

A heap-based buffer overflow flaw was found in the way CVS read proxy connection HTTP responses. An attacker could exploit this to cause the application to crash or, potentially, execute arbitrary code in the context of the user running the application. CVE-2012-0804 %NASLMINLEVEL 70300 C Tenable...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7982)

This version upgrade of flash-player fixes multiple security issues that could potentially be exploited to cause a crash or even execute arbitrary code. The following CVE were assigned : CVE-2012-0752 / CVE-2012-0753 / CVE-2012-0754 / CVE-2012-0755 / CVE-2012-0756 / CVE-2012-0767 %NASLMINLEVEL...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7981)

Mozilla Firefox was updated to 3.6.27 to fix a security issue with the embedded libpng, where a integer overflow could allow remote attackers to crash the browser or potentially execute code CVE-2011-3026, %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...