TITLE:
SUSE Updates for Multiple Packages

SECUNIA ADVISORY ID:
SA17831

VERIFY ADVISORY:
http://secunia.com/advisories/17831/

CRITICAL:
Highly critical

IMPACT:
Cross Site Scripting, Exposure of system information, Exposure of
sensitive information, Privilege escalation, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
SuSE eMail Server 3.x
http://secunia.com/product/1168/
SUSE Linux 10
http://secunia.com/product/6221/
SuSE Linux 7.x
http://secunia.com/product/140/
SuSE Linux 8.x
http://secunia.com/product/141/
SuSE Linux 9.0
http://secunia.com/product/2467/
SuSE Linux 9.1
http://secunia.com/product/3473/
SUSE Linux 9.2
http://secunia.com/product/4258/
SUSE Linux 9.3
http://secunia.com/product/4933/
SuSE Linux Connectivity Server
http://secunia.com/product/1169/
SuSE Linux Database Server
http://secunia.com/product/1178/
SuSE Linux Desktop 1.x
http://secunia.com/product/2002/
SuSE Linux Enterprise Server 7
http://secunia.com/product/1170/
SuSE Linux Enterprise Server 8
http://secunia.com/product/1171/
SUSE Linux Enterprise Server 9
http://secunia.com/product/4118/
SuSE Linux Firewall on CD/Admin host
http://secunia.com/product/1179/
SuSE Linux Office Server
http://secunia.com/product/1172/
SuSE Linux Openexchange Server 4.x
http://secunia.com/product/2001/
SuSE Linux Standard Server 8
http://secunia.com/product/2526/

DESCRIPTION:
SUSE has issued updates for multiple packages. These fix various
vulnerabilities, where the most critical ones can be exploited by
malicious people to cause a DoS (Denial of Service), disclose
sensitive information, and compromise a user's system.

For more information:
SA16559
SA16605
SA16907
SA17289
SA17351
SA17492
SA17544
SA17578
SA17647
SA17651

This also fixes an unspecified bug in Squid in SUSE Linux 9.0 which
causes crashes.

SOLUTION:
Apply updated packages.

Updated packages are available using YaST Online Update or via the
SUSE FTP site.

ORIGINAL ADVISORY:
http://lists.suse.com/archive/suse-security-announce/2005-Dec/0001.html

OTHER REFERENCES:
SA16559:
http://secunia.com/advisories/16559/

SA16605:
http://secunia.com/advisories/16605/

SA16907:
http://secunia.com/advisories/16907/

SA17289:
http://secunia.com/advisories/17289/

SA17351:
http://secunia.com/advisories/17351/

SA17492:
http://secunia.com/advisories/17492/

SA17544:
http://secunia.com/advisories/17544/

SA17578:
http://secunia.com/advisories/17578/

SA17647:
http://secunia.com/advisories/17647/

SA17651:
http://secunia.com/advisories/17651/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------