SuSE Essential and Critical Security Patch Updates - Page 761

SuSE: 2009-063: Mozilla Firefox Security Update

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The Mozilla Firefox browsers and XUL engines were updated to the The Mozilla Firefox browsers and XUL engines were updated to the current stable releases fixing lots of bugs and various security current stable releases fixing lots of bugs and various security issues. SUSE Linux Enterprise 10 SP2, SP3, SUSE Linux Enterprise 11 and openSUSE 11.2 were updated to Firefox 3.5.6. openSUSE 11.0 and 11.1 [More...]

LinuxSecurity.com Team
Dec 22, 2009

SuSE: 2009-062: Flash Player Security Update

A security update was released for the Adobe Flash Player 10. A security update was released for the Adobe Flash Player 10. Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code. Fixed packages for Adobe Flash Player 9 (the version found in SUSE Linux Enterprise 10, Novell Linux Desktop 9 and openSUSE 11.0) wil [More...]

LinuxSecurity.com Team
Dec 22, 2009

SuSE: 2009-061: Linux kernel Security Update

This update fixes various bugs and some security issues in the SUSE This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. Linux Enterprise 10 SP 3 kernel. Following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraid_sas driver was world writable, allowing local users to cause a denial of service or potential code execution.

LinuxSecurity.com Team
Dec 14, 2009

SuSE: 2009-060: Linux Kernel Security Update

The SUSE Linux Enterprise 11 and openSUSE 11.1 Kernel was updated to The SUSE Linux Enterprise 11 and openSUSE 11.1 Kernel was updated to 2.6.27.39 fixing various bugs and security issues. 2.6.27.39 fixing various bugs and security issues. Following security issues have been fixed: CVE-2009-3547: A race condition during pipe open could be used by local attackers to cause a denial of service. (Due [More...]

LinuxSecurity.com Team
Dec 02, 2009

SuSE: 2009-059: bind Security Update

The bind DNS server was updated to close a possible cache poisoning The bind DNS server was updated to close a possible cache poisoning vulnerability which allowed to bypass DNSSEC. vulnerability which allowed to bypass DNSSEC. This problem can only happen after the other spoofing/poisoning mechanisms have been bypassed already (the port and transaction id randomization). Also this can only happe [More...]

LinuxSecurity.com Team
Dec 02, 2009

SuSE: Weekly Summary 2009:019

To avoid flooding mailing lists with SUSE Security Announcements for minor To avoid flooding mailing lists with SUSE Security Announcements for minor issues, SUSE Security releases weekly summary reports for the low profile issues, SUSE Security releases weekly summary reports for the low profile vulnerability fixes. The SUSE Security Summary Reports do not list or download URLs like the SUSE Secu [More...]

LinuxSecurity.com Team
Nov 24, 2009

SuSE: 2009-058: Sun Java 6 Security Update

The Sun Java 6 SDK/JRE was updated to u17 update fixing bugs and The Sun Java 6 SDK/JRE was updated to u17 update fixing bugs and various security issues: various security issues: CVE-2009-3866:The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute a [More...]

LinuxSecurity.com Team
Nov 19, 2009

SuSE: 2009-057: openssl Security Update

The TLS/SSLv3 protocol as implemented in openssl prior to this update The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate already sent data to a renegotiated connection. was not able to associate already sent data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For e [More...]

LinuxSecurity.com Team
Nov 18, 2009

SuSE: 2009-056: Linux kernel Security Update

Several security issues and some bugs were fixed in the SUSE Linux Several security issues and some bugs were fixed in the SUSE Linux Enterprise 9 kernel. Enterprise 9 kernel. Following security bugs were fixed: CVE-2009-3547: A race condition in the pipe(2) system call could be used by local attackers to execute code and escalate privileges.

LinuxSecurity.com Team
Nov 16, 2009

SuSE: 2009-055: Linux Kernel Security Update

This update fixes various bugs and some security issues in the SUSE This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. Linux Enterprise 10 SP 3 kernel. Following security issues were fixed: CVE-2009-3547: A race condition during pipe open could be used by local attackers to elevate privileges.

LinuxSecurity.com Team
Nov 12, 2009

SuSE: 2009-054: Linux kernel Security Update

This update fixes a several security issues and various bugs in the This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. SUSE Linux Enterprise 10 SP 2 kernel. Following security issues were fixed: CVE-2009-3547: A race condition during pipe open could be used by local attackers to elevate privileges.

LinuxSecurity.com Team
Nov 11, 2009

SuSE: Weekly Summary 2009:018

LinuxSecurity.com Team
Nov 10, 2009

SuSE: 2009-053: IBM Java 6 Security Update

The IBM Java 6 JRE/SDK was updated to Service Release 6, fixing The IBM Java 6 JRE/SDK was updated to Service Release 6, fixing various bugs and security issues. various bugs and security issues. Following security issues were fixed: CVE-2009-2676: A security vulnerability in the JNLPAppletLauncher might impact users of the Sun JDK and JRE. Non-current versions of the JNLPAppletLauncher might be [More...]

LinuxSecurity.com Team
Nov 04, 2009

SuSE: 2009-052: Mozilla Firefox Security Update

The Mozilla Firefox browser was updated to fix various bugs and The Mozilla Firefox browser was updated to fix various bugs and security issues. security issues. On all SUSE Linux Enterprise products it was updated to the stable version 3.5.4, on openSUSE 11.0 and 11.1 it was updated to the stable version 3.0.0.15.

LinuxSecurity.com Team
Nov 04, 2009

SuSE: 2009-051: Linux kernel Security Update

The SUSE Linux Enterprise 11 and openSUSE 11.1 kernel was updated to The SUSE Linux Enterprise 11 and openSUSE 11.1 kernel was updated to 2.6.27.37 fixing various bugs and security issues. 2.6.27.37 fixing various bugs and security issues. Following security issues were fixed: CVE-2009-2909: Unsigned check in the ax25 socket handler could allow local attackers to potentially crash the kernel or e [More...]

LinuxSecurity.com Team
Nov 02, 2009

SuSE: 2009-050: Apache and libapr Security Update

The Apache web server was updated to fix various security issues: The Apache web server was updated to fix various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy(CVE-2009-1890) - mod_deflate continued to co [More...]

LinuxSecurity.com Team
Oct 26, 2009

SuSE: Weekly Summary 2009:017

LinuxSecurity.com Team
Oct 26, 2009

SuSE: 2009-049: acroread, acroread_ja Security Update

Adobe Reader has been updated to fix numerous security Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. 2) Solution or Work-Around

LinuxSecurity.com Team
Oct 26, 2009

SuSE: 2009-048: Mozilla Firefox Security Update

The Mozilla Firefox was updated to current stable versions on all The Mozilla Firefox was updated to current stable versions on all affected Linux products. affected Linux products. openSUSE 10.3,11.0 and 11.1: Firefox was updated to the current stable branch version 3.0.14. These updates were already released on September 21st.

LinuxSecurity.com Team
Oct 20, 2009

SuSE: Weekly Summary 2009:016

LinuxSecurity.com Team
Oct 13, 2009