|
SUSE updates for openssh, openssl, and bind9
|
|
Secunia Advisory:
|
SA22298
|
|
|
Release Date:
|
2006-10-09
|
|
Popularity:
|
6,296 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Partial Fix
|
|
| OS: | SuSE eMail Server 3.x
SUSE Linux 10
SUSE Linux 10.1
SuSE Linux 7.x
SuSE Linux 8.x
SuSE Linux 9.0
SuSE Linux 9.1
SUSE Linux 9.2
SUSE Linux 9.3
SuSE Linux Connectivity Server
SuSE Linux Database Server
SuSE Linux Desktop 1.x
SUSE Linux Enterprise Server 10
SuSE Linux Enterprise Server 7
SuSE Linux Enterprise Server 8
SUSE Linux Enterprise Server 9
SuSE Linux Firewall on CD/Admin host
SuSE Linux Office Server
SuSE Linux Openexchange Server 4.x
SuSE Linux Standard Server 8
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-4924
CVE-2006-4925
CVE-2006-2937
CVE-2006-2940
CVE-2006-3738
CVE-2006-4343
CVE-2006-4095
CVE-2006-4096
|
|
Description:
SUSE has issued updates for openssh, openssl, and bind9. These fix some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.
For more information:
SA21752
SA22091
SA22130
Solution:
Apply updated packages.
Updated packages are available via YaST Online Update or via the SUSE FTP site.
Note: The fix for CVE-2006-2940 is incorrect in current openssl packages. Reportedly, updated packages are available soon.
Original Advisory:
http://lists.suse.com/archive/suse-security-announce/2006-Oct/0001.html
Other References:
SA21752:
http://secunia.com/advisories/21752/
SA22091:
http://secunia.com/advisories/22091/
SA22130:
http://secunia.com/advisories/22130/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
