SuSE 10 Security Update : dhcpcd (ZYPP Patch Number 7433)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 %NASLMINLEVEL 70300 C...

SuSE 10 Security Update : openssl-certs (ZYPP Patch Number 7719)

This updates includes the latest SSL root certificates trusted by Mozilla as of 2011-08-31. This includes removing the DigiNotar CA. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : mailman (ZYPP Patch Number 7484)

This mailman update fixes several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57225;...

SuSE 10 Security Update : libgssapi (ZYPP Patch Number 7541)

This update fixes insecure getenv usage, which could be used under some circumstances by local attackers do gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : vpnc (ZYPP Patch Number 7692)

This update of vpnc fixes a flaw in the modifyresolvconfsuse script that could potentially allow remote attackers to inject commands through specially crafted DNS domains. CVE-2011-2660 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : X11 (ZYPP Patch Number 7416)

Remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 clients via XDMCP. CVE-2011-0465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7553)

This update for PHP5 fixes the following security issues : - Input Validation in the ZIP extension and NumberFormatter. CWE-20, CVE-2011-0421 / CVE-2011-1470 / CVE-2011-1467 - Numeric Errors in the SHM support and ZIP extension. CWE-189, CVE-2011-1092 / CVE-2011-1471 - Buffer overflows in the...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7393)

PHP5 was updated to fix several security issues. CVE-2010-4150 / CVE-2010-4645 / CVE-2010-4697 / CVE-2010-4698 / CVE-2010-4699 / CVE-2011-0708 / CVE-2011-0752 / CVE-2011-0753 / CVE-2011-0755 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : build (ZYPP Patch Number 7395)

The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead. CVE-2010-4226 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : popt (ZYPP Patch Number 7793)

Specially crafted rpm packages could have caused memory corruption in rpm when verifying signatures CVE-2011-3378. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

SuSE 10 Security Update : pam (ZYPP Patch Number 7815)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7723)

The OES Netware add-ons in pure-ftpd had a security problem and some bugs, which are fixed by this update. A local attacker could overwrite local files when the OES remote server feature of pure-ftpd is enabled due to a directory traversal. CVE-2011-3171 Additionally the following bugs have been...

SuSE 10 Security Update : ncpfs (ZYPP Patch Number 7710)

Following issues are fixed by this update : - The ncpfs mount and umount programs were affected by the /etc/mtab truncation problems on RLIMITFSIZE. CVE-2011-1679 - on errors, the mtab lock was not removed, blocking other applications from modifying /etc/mtab. CVE-2011-1680 - we now keep the...

SuSE 10 Security Update : dhcp (ZYPP Patch Number 7717)

This update of dhcp fixes two Denial of Service CVE-2011-2748 / CVE-2011-2749 vulnerabilities caused by specially crafted BOOTP packets. Additionally, the alias IP address handling of dhclient-script was fixed to not wipe out iptables connmark when renewing the lease. %NASLMINLEVEL 70300 C Tenabl...

SuSE 10 Security Update : yast2-core (ZYPP Patch Number 7725)

This update of yast2-core fixes security issues, bugs, and adds a debugging feature. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid56619; scriptversion"1.7";...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7740)

This update brings Mozilla Firefox to 3.6.22. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read : MFSA 2011-34 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7766)

Server code for ECDH could have crashed if it received a specially crafted handshake message CVE-2011-3210. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : quagga (ZYPP Patch Number 7767)

This update fixes the following security issues : - 718056: OSPF6D buffer overflow while decoding Link State Update with Inter Area Prefix Lsa. CVE-2011-3323 - 718058: OSPF6D DoS while decoding Database Description packet. CVE-2011-3324 - 718059: OSPFD DoS while decoding Hello packet. CVE-2011-33...

SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 7755)

The following bug has been fixed : - Specially crafted AJP messages could have been used to bypass authentication. CVE-2011-3190 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7728)

This update of cyrus-imapd fixes a buffer overflow that could have been potentially exploited by remote attackers to cause a crash or run arbitrary code. CVE-2011-3208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...