|
|
|
>> SuSE Security Update Fixes Code Execution and DoS Vulnerabilities
|
Multiple vulnerabilities have been identified in various SuSE products, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or execute arbitrary code. These issues are caused by errors in sudo, courier-authlib, gnome-screensaver, clamav, php5, ImageMagick, GraphicsMagick, mtr, bind, pcre, tomcat, squid and freetype. For additional information, see : VUPEN/ADV-2008-1096 - VUPEN/ADV-2008-1412 - VUPEN/ADV-2008-1637 - VUPEN/ADV-2008-1725 - VUPEN/ADV-2008-1794 - VUPEN/ADV-2008-1855 - VUPEN/ADV-2008-1969 - VUPEN/ADV-2008-2005
Affected Products
openSUSE 10.x
SuSE Linux 10
SuSE Linux 9.x
SuSE Linux 8.x
SuSE Linux 7.x
SuSE Linux Connectivity Server
SuSE Linux Database Server
SuSE Linux Desktop 1.x
SuSE Linux Enterprise Server 7
SuSE Linux Enterprise Server 8
SUSE Linux Enterprise Server 9
SuSE Linux Firewall
SuSE Linux Standard Server 8
SuSE Linux Office Server
SuSE Linux Openexchange Server 4.x
Solution
Upgrade the affected packages :
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
References
http://www.vupen.com/english/advisories/2008/2011
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
ChangeLog
2008-07-07 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
