Fixlet Site - PatchesforSUSELinuxEnterprise Current Version: 157 Published: Wed, 06 Aug 2008 16:37:43 GMT New Fixlets: ============ *************************************************************** Title: PATCH-B8073101 - Security update for net-snmp - SLES10 SP2/SLED10 SP2 Severity: Fixlet ID: 807310105 Fixlet Link: http://download.novell.com/Download?buildid=Cb_IA55nBrM~ Fixlet Link: http://download.novell.com/Download?buildid=ShIA7Ps0Qws~ Fixlet Description: This security update of net-snmp fixes a denial of service vulnerability (CVE-2008-2292), an authentication bypass (CVE-2008-0960) and several memory leaks. In addition net-snmp was patched to allow customization of the agent address set. Everyone should update. Please see patch page for more detailed information. *************************************************************** Title: PATCH-B8073101 - Security update for net-snmp - SLES10 SP1/SLED10 SP1 Severity: Fixlet ID: 807310107 Fixlet Link: http://download.novell.com/Download?buildid=7vELG_eFXRY~ Fixlet Link: http://download.novell.com/Download?buildid=bldRWCb30ws~ Fixlet Description: This security update of net-snmp fixes a denial of service vulnerability (CVE-2008-2292), an authentication bypass (CVE-2008-0960) and several memory leaks. In addition net-snmp was patched to allow customization of the agent address set. Everyone should update. Please see patch page for more detailed information. *************************************************************** Title: PATCH-B8073102 - Security update for Subversion - SLED10 SP1/SLED10 SP2 Severity: Fixlet ID: 807310201 Fixlet Link: http://download.novell.com/Download?buildid=qFm7r3I-CqU~ Fixlet Link: http://download.novell.com/Download?buildid=T2TExZNuJfs~ Fixlet Description: This update of subversion fixes multiple vulnerabilities. CVE-2008-1290: list CVS or SVN commits on "all-forbidden" files CVE-2008-1291: directly access hidden CVSROOT folders CVE-2008-1292: expose restricted content via the revision view, the log history, or the diff view Everyone using subversion should update. Please see patch page for more detailed information.