SuSE 10 Security Update : kdegraphics3-pdf (ZYPP Patch Number 4682)

A buffer overflow in the xpdf code contained in kpdf could be exploited by attackers to potentially execute arbitrary code. CVE-2007-4352 / CVE-2007-5392 / CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 2175)

A previous openssl update CVE-2006-2940 introduced another bug that can lead to a crash by providing a large prime number. An uninitialized pointer is freed during error handling. This bug allows remote attackers to crash services that use openssl. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : libgsf (ZYPP Patch Number 2363)

Specially crafted OLE documents enabled attackers to use a heap buffer overlow for executing code. CVE-2006-4514 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : xsupplicant (ZYPP Patch Number 2455)

xsupplicant has been upgraded to version 1.2.8, which includes bugfixes and one security fix : - A post-authentication stack overflow in the EAP handling could be used by already authenticated attacker to overflow a stackbuffer and so potentially execute code. CVE-2006-5601 %NASLMINLEVEL 70300 C...

SuSE 10 Security Update : Novell GroupWise client (ZYPP Patch Number 4494)

This update fixes a security vulnerability in the GroupWise system that allows a malicious user to intercept authentication credentials through a 'man in the middle' attack. CVE-2007-5195 / CVE-2007-5196 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : gzip (ZYPP Patch Number 2085)

This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334 / CVE-2006-4335 / CVE-2006-4336 / CVE-2006-4337 / CVE-2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : clamav (ZYPP Patch Number 2631)

This update to ClamAV version 0.90 fixes various bugs : - A filedescriptor leak in the handling of CAB files can lead to a denial of service attack against the clamd scanner daemon caused by remote attackers. CVE-2007-0897 - A directory traversal in handling of MIME E-Mail headers could be used b...

SuSE 10 Security Update : Kerberos5 (ZYPP Patch Number 2440)

Bugs in the handling of pointers to uninitializes resp. already freed memory could potentially be abused by attackers to execute code. CVE-2006-6144 / CVE-2006-6143 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)

This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 / CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

SuSE 10 Security Update : tar (ZYPP Patch Number 4171)

This update fixes a bug in function safernamesuffix of tar which leads to a crashing stack. Exploitability is unknown. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : mozilla-nss,mozilla-nss-devel (ZYPP Patch Number 2067)

A security problem in the SSL handling of the NSS libraries was found : If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This bug is tracked by the Mitre CVE ...

SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 3737)

This update of ImageMagick fixes a bug in the patch for the last security update for CVE-2007-1797. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29352;...

SuSE 10 Security Update : xine-lib (ZYPP Patch Number 2988)

The DirectShow loader uses wrong parameters in the memcpy function call which leads to a buffer overflow. CVE-2007-1246 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Mono (ZYPP Patch Number 4453)

This update fixes a buffer overflow in Mono's BigInteger implementation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29389; scriptversion"1.17";...

SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 2592)

This update fixes a broken patch for CVE-2006-5456 and minor non-security issues. CVE-2007-0770 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29350;...

SuSE 10 Security Update : libpng (ZYPP Patch Number 3740)

Applications using libpng can crash if libpng is ask to process a grayscale image with a malformed bad CRC tRNS chunk. CVE-2007-2445 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 2258)

This update brings MozillaFirefox to the security update release 1.5.0.8, including the following security fixes. Full details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html - Is split into 3 sub-entries, for ongoing stability improvements in the Mozilla...

SuSE 10 Security Update : MySQL (ZYPP Patch Number 4376)

This update provides fixes for : - remote triggerable crash. CVE-2007-3780 - query tables without propper authorisation. CVE-2007-3781 - gain update privileges without propper authorisation. CVE-2007-3782 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is ...

SuSE 10 Security Update : Xorg X11 (ZYPP Patch Number 3083)

Integer overflows in the XC-MISC extension of the X-server could potentially be exploited to execute code with root privileges. CVE-2007-1003 Integer overflows in libx11 could cause crashes. CVE-2007-1667 Integer overflows in the font handling of the X-server could potentially be exploited to...

SuSE 10 Security Update : Qt (ZYPP Patch Number 2187)

Multiple integer overflows have been found in image processing functions within the QT library. These could potentially lead to heap overflows and code execution. CVE-2006-4811 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...