---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secunia_vacancies/ ---------------------------------------------------------------------- TITLE: SUSE Updates for gpg2/telnet/unace/horde SECUNIA ADVISORY ID: SA15741 VERIFY ADVISORY: http://secunia.com/advisories/15741/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of system information, System access WHERE: >From remote OPERATING SYSTEM: SuSE Linux Standard Server 8 http://secunia.com/product/2526/ SuSE Linux Openexchange Server 4.x http://secunia.com/product/2001/ SuSE Linux Office Server http://secunia.com/product/1172/ SuSE Linux Firewall on CD/Admin host http://secunia.com/product/1179/ SUSE Linux Enterprise Server 9 http://secunia.com/product/4118/ SuSE Linux Enterprise Server 8 http://secunia.com/product/1171/ SuSE Linux Enterprise Server 7 http://secunia.com/product/1170/ SuSE Linux Desktop 1.x http://secunia.com/product/2002/ SuSE Linux Database Server http://secunia.com/product/1178/ SuSE Linux Connectivity Server http://secunia.com/product/1169/ SUSE Linux 9.3 http://secunia.com/product/4933/ SUSE Linux 9.2 http://secunia.com/product/4258/ SuSE Linux 9.1 http://secunia.com/product/3473/ SuSE Linux 9.0 http://secunia.com/product/2467/ SuSE Linux 8.x http://secunia.com/product/141/ SuSE Linux 7.x http://secunia.com/product/140/ SuSE eMail Server 3.x http://secunia.com/product/1168/ DESCRIPTION: SUSE has issued updates for gpg2, telnet, unace and horde. These fix some vulnerabilities, which can be exploited by malicious people to gain knowledge of various information, conduct cross-site scripting attacks and compromise a user's system. For more information: SA14359 SA14730 SA15709 This also fixes an error with the S/MIME signing using gpg2. SOLUTION: Apply updated packages. Updated packages are available using YaST Online Update or the SUSE FTP site. ORIGINAL ADVISORY: http://www.novell.com/linux/security/advisories/2005_16_sr.html OTHER REFERENCES: SA14359: http://secunia.com/advisories/14359/ SA14730: http://secunia.com/advisories/14730/ SA15709: http://secunia.com/advisories/15709/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------