----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
SUSE Update for Multiple Packages

SECUNIA ADVISORY ID:
SA35685

VERIFY ADVISORY:
http://secunia.com/advisories/35685/

DESCRIPTION:
SUSE has issued an update for multiple packages. This fixes some
vulnerabilities, which can be exploited by malicious users to
disclose sensitive information, manipulate certain data, and by
malicious people to disclose sensitive information, cause a DoS
(Denial of Service), and potentially compromise a vulnerable system.

For more information:
SA33338
SA33853
SA33884
SA34035
SA34481
SA34746
SA34797
SA35021
SA35128
SA35216
SA35296
SA35344
SA35422

1) A boundary error exists within the "pg_db_putline()" function in
perl-DBD-Pg's dbdimp.c. This can be exploited to cause a heap-based
buffer overflow if malicious rows are retrieved from the database
using the "pg_getline()" or "getline()" function.

2) A memory leak exists within the function "dequote_bytea()" in
perl-DBD-Pg's quote.c, which can be exploited to cause a memory
exhaustion.

3) Various integer overflow errors exist within the "pdftops"
application. This can be exploited to e.g. cause a crash or
potentially execute arbitrary code by printing a specially crafted
PDF file.

4) A vulnerability is caused due to an assertion error in bgpd when
handling an AS path containing multiple 4 byte AS numbers, which can
be exploited to crash to the daemon by advertising specially crafted
AS paths.

SOLUTION:
Apply updated packages via YaST Online Update or the SUSE FTP server.

ORIGINAL ADVISORY:
SUSE-SR:2009:012:
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

OTHER REFERENCES:
SA33338:
http://secunia.com/advisories/33338/

SA33853:
http://secunia.com/advisories/33853/

SA33884:
http://secunia.com/advisories/33884/

SA34035:
http://secunia.com/advisories/34035/

SA34481:
http://secunia.com/advisories/34481/

SA34746:
http://secunia.com/advisories/34746/

SA34797:
http://secunia.com/advisories/34797/

SA35021:
http://secunia.com/advisories/35021/

SA35128:
http://secunia.com/advisories/35128/

SA35216:
http://secunia.com/advisories/35216/

SA35296:
http://secunia.com/advisories/35296/

SA35344:
http://secunia.com/advisories/35344/

SA35422:
http://secunia.com/advisories/35422/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------