|
SUSE Update for Multiple Packages
|
|
Secunia Advisory:
|
SA28838
|
|
|
Release Date:
|
2008-02-08
|
|
Last Update:
|
2008-02-13
|
|
Popularity:
|
4,549 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
Manipulation of data
Privilege escalation
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | openSUSE 10.2
openSUSE 10.3
SUSE Linux 10.1
SUSE Linux Enterprise Server 10
SUSE Linux Enterprise Server 9
SuSE Linux Openexchange Server 4.x
SuSE Linux Standard Server 8
|
|
| Software: | Novell Open Enterprise Server 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-4484
CVE-2007-2583
CVE-2007-2691
CVE-2007-2692
CVE-2007-4965
CVE-2007-5503
CVE-2007-5794
CVE-2007-5925
CVE-2007-5969
CVE-2007-6109
CVE-2007-6303
CVE-2007-6304
CVE-2007-6427
CVE-2007-6428
CVE-2007-6429
CVE-2008-0123
CVE-2008-0732
|
|
Description:
SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and cause a DoS (Denial of Service), by malicious users to manipulate data, gain escalated privileges, and cause a DoS, and by malicious people to manipulate data, bypass certain security restrictions, cause a DoS, and potentially compromise a vulnerable system.
For more information:
SA25188
SA25301
SA26837
SA27568
SA27670
SA27880
SA28063
SA28532
SA28640
SA28746
This also updates the Sun Java packages, fixes a problem in the command line handling of xemacs, and some vulnerabilities in NX.
Solution:
Apply updated packages via YaST Online Update or the SUSE FTP server.
Changelog:
2008-02-13: Added CVE reference.
Original Advisory:
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
Other References:
SA25188:
http://secunia.com/advisories/25188/
SA25301:
http://secunia.com/advisories/25301/
SA26837:
http://secunia.com/advisories/26837/
SA27568:
http://secunia.com/advisories/27568/
SA27670:
http://secunia.com/advisories/27670/
SA27880:
http://secunia.com/advisories/27880/
SA28063:
http://secunia.com/advisories/28063/
SA28532:
http://secunia.com/advisories/28532/
SA28640:
http://secunia.com/advisories/28640/
SA28746:
http://secunia.com/advisories/28746/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
