Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 10/11 (Quagga 0.99.19未満)

回避策：SUSE-SU-2011:1075-1にて対応

脆弱性：DoS攻撃, クラッシュ, アサーションエラー, バッファオーバーフロー

ソース：

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00027.html

http://secunia.com/advisories/46139/

http://secunia.com/advisories/46214/

http://dvw-j.blogspot.com/2011/09/quagga.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3323

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3324

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3325

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3326

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3327

CVE：CVE-2011-3323, CVE-2011-3324, CVE-2011-3325, CVE-2011-3326, CVE-2011-3327

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 11 (X.Org libXfont 1.4.4未満)

回避策：SUSE-SU-2011:1035-1にて対応

脆弱性：権限の昇格, バウンダリエラー, 不正フォントファイル, バッファオーバーフロー

ソース：

http://www.novell.com/promo/home/sle11.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html

http://secunia.com/advisories/45544/

http://secunia.com/advisories/45986/

http://dvw-j.blogspot.com/2011/08/xorg-libxfont.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895

CVE：CVE-2011-2895

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 10/11 (Cyrus IMAP Server 2.3.17未満/2.4.11未満)

回避策：SUSE-SU-2011:1034-1にて対応

脆弱性：システムアクセス, バッファオーバーフロー, バウンダリエラー

ソース：

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11723935

http://secunia.com/advisories/45938/

http://secunia.com/advisories/45975/

http://dvw-j.blogspot.com/2011/09/cyrus-imap-server.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3208

CVE：CVE-2011-3208

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 10/11

回避策：SUSE-SU-2011:1028-1, SUSE-SU-2011:1029-1にて対応

脆弱性：データ操作, ディレクトリトラバーサル, キャッシュ汚染, ディレクトリ操作, シムリンク攻撃, ファイル操作

ソース：

http://www.suse.com/products/server/

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00016.html

http://secunia.com/advisories/45943/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3171

CVE：CVE-2011-3171

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server, Red Hat Fedora

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11, Red Hat Fedora 14 (Squid 3.0.STABLE25未満の3.0.x/3.1.14未満の3.1.x)

回避策：openSUSE-SU-2011:1018-1, SUSE-SU-2011:1019-1にて対応, FEDORA-2011-11854にて対応

脆弱性：システムアクセス, DoS攻撃, バウンダリエラー, バッファオーバーフロー, リモートコード実行

ソース：

http://www.opensuse.org/en/

http://www.novell.com/promo/home/sle11.html

http://fedoraproject.org/

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00013.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065534.html

http://secunia.com/advisories/45805/

http://secunia.com/advisories/45906/

http://secunia.com/advisories/45920/

http://dvw-j.blogspot.com/2011/08/squid.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3205

CVE：CVE-2011-3205

危険性：High Risk

Red Hat Fedora, Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Red Hat Fedora 14, Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1)

回避策：FEDORA-2011-10705にて対応, openSUSE-SU-2011:1021-1, SUSE-SU-2011:1023-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://fedoraproject.org/

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html

http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html

https://hermes.opensuse.org/messages/11695711

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45817/

http://secunia.com/advisories/45918/

http://dvw-j.blogspot.com/2011/08/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 11 (Apache 2.2.x)

回避策：SUSE-SU-2011:1000-1にて対応

脆弱性：DoS攻撃, 不正HTTPのリクエスト, メモリの浪費, セキュリティ強度の問題, クラッシュ

ソース：

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11682644

http://secunia.com/advisories/40206/

http://secunia.com/advisories/45606/

http://secunia.com/advisories/45869/

http://dvw-j.blogspot.com/2011/08/apache.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CVE：CVE-2010-1452, CVE-2011-3192

危険性：Medium Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 11 (Kernel.org Linux Kernel 2.6.x)

回避策：SUSE-SU-2011:0984-2, SUSE-SA:2011:038にて対応

脆弱性：機密情報の奪取, 権限の昇格, DoS攻撃, クラッシュ, イベントオーバーフローエラー, 不正アプリケーション, カーネルスタックメモリの曝露, NULLポインタの参照

ソース：

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11647323

https://lwn.net/Articles/457379/

http://secunia.com/advisories/42148/

http://secunia.com/advisories/45420/

http://secunia.com/advisories/45533/

http://secunia.com/advisories/45810/

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel_19.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3881

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2495

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2700

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2909

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2918

CVE：CVE-2010-3881, CVE-2011-1776, CVE-2011-2495, CVE-2011-2700, CVE-2011-2909, CVE-2011-2918

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Mozilla Firefox 3.6.20未満/5.x, Mozilla Thunderbird 3.1.12未満/5.x)

回避策：openSUSE-SU-2011:0935-2, openSUSE-SU-2011:0957-2, SUSE-SU-2011:0967-1, SUSE-SA:2011:037にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, システムアクセス, 不特定のエラー, メモリ破壊, JARファイル操作エラー, 不正Java Scriptコード実行, バッファオーバーフロー,　解放後使用エラー, ポインタ間接参照エラー, リモートコード実行, 不正ライブラリのロード

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://lists.opensuse.org/opensuse-updates/2011-08/msg00042.html

http://lists.opensuse.org/opensuse-updates/2011-08/msg00043.html

http://www.suse.com/support/security/advisories/2011_37_firefox.html

https://hermes.opensuse.org/messages/11623434

http://secunia.com/advisories/45581/

http://secunia.com/advisories/45666/

http://secunia.com/advisories/45785/

http://secunia.com/advisories/45802/

http://secunia.com/advisories/45825/

http://secunia.com/advisories/45831/

http://dvw-j.blogspot.com/2011/08/mozilla-firefox-mozilla-thunderbird.html

http://dvw-j.blogspot.com/2011/08/mozilla-firefox-mozilla-thunderbird-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2378

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2980

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2981

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2982

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2983

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2984

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2985

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2986

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2987

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2988

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2989

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2990

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2991

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2992

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2993

CVE：CVE-2011-0084, CVE-2011-2378, CVE-2011-2980, CVE-2011-2985, CVE-2011-2981, CVE-2011-2982, CVE-2011-2983, CVE-2011-2984, CVE-2011-2985, CVE-2011-2986, CVE-2011-2987, CVE-2011-2988, CVE-2011-2989, CVE-2011-2990, CVE-2011-2991, CVE-2011-2992, CVE-2011-2993

危険性：High Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 10/11 (Sun Java)

回避策：SUSE-SU-2011:0966-1にて対応

脆弱性：XSS, データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行, バッファオーバーフロー, バウンダリエラー

ソース：

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11622943

http://secunia.com/advisories/44784/

http://secunia.com/advisories/45794/

http://dvw-j.blogspot.com/2011/06/sun-java-red-hat-enterprise-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0862, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0871, CVE-2011-0872

危険性：High Risk

Novell SUSE Linux Enterprise Server

ソフト名：Novell SUSE Linux Enterprise Server (SLES) 9/10/11 (IBM Java 6.x)

回避策：SUSE-SA:2011:036にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：

http://www.novell.com/promo/home/sle11.html

http://www.suse.com/products/server/

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00022.html

http://secunia.com/advisories/45206/

http://secunia.com/advisories/45736/

http://dvw-j.blogspot.com/2011/07/ibm-java.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0786

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

CVE：CVE-2011-0786, CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0862, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0871, CVE-2011-0872

危険性：High Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11 (The Linux Foundation Foomatic 3.0.2未満/4.0.6)

回避策：openSUSE-SU-2011:0950-1, SUSE-SU-2011:0951-1にて対応

脆弱性：権限の昇格, システムアクセス, ローカルコード実行, ローカルコマンド挿入, ローカルコマンド実行

ソース：

http://www.opensuse.org/en/

http://www.novell.com/promo/home/sle11.html

http://lists.opensuse.org/opensuse-updates/2011-08/msg00036.html

https://hermes.opensuse.org/messages/11591627

http://secunia.com/advisories/12557/

http://secunia.com/advisories/45196/

http://secunia.com/advisories/45756/

http://secunia.com/advisories/45790/

http://dvw-j.blogspot.com/2011/07/linux-foundation-foomatic.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0801

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697

CVE：CVE-2004-0801, CVE-2011-2697

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 9/10/11 (Sourcefire Clam AntiVirus 0.97.2)

回避策：openSUSE-SU-2011:0940-1, SUSE-SU-2011:0948-1にて対応

脆弱性：DoS攻撃, オフバイワンエラー, デーモンのクラッシュ

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://www.novell.com/products/openenterpriseserver/

http://lwn.net/Articles/456236/

https://hermes.opensuse.org/messages/11564156

http://secunia.com/advisories/45382/

http://secunia.com/advisories/45773/

http://dvw-j.blogspot.com/2011/07/sourcefire-clam-antivirus.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721

CVE：CVE-2011-2721

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server 9/(SLES) 10/(SLES) 11 (libpng 1.2.x)

回避策：openSUSE-SU-2011:0915-1, SUSE-SU-2011:0916-1, SUSE-SU-2011:0919-1にて対応

脆弱性：DoS攻撃, システムアクセス, 区域外メモリの使用, アプリケーションのクラッシュ, メモリリーク, 不正PNGファイル

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11259948

https://hermes.opensuse.org/messages/11255439

https://hermes.opensuse.org/messages/11279547

http://secunia.com/advisories/32418/

http://secunia.com/advisories/45046/

http://secunia.com/advisories/45635/

http://secunia.com/advisories/45646/

http://dvw-j.blogspot.com/2011/06/libpng.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6218

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5063

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2501

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2690

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2691

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2692

CVE：CVE-2008-6218, CVE-2009-5063, CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server 9/10/11

回避策：openSUSE-SU-2011:0892-1, SUSE-SU-2011:0895-1にて対応

脆弱性：システムアクセス, ローカルコマンド挿入, ローカルコマンド実行

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/11030786

https://hermes.opensuse.org/messages/11040895

http://secunia.com/advisories/45196/

http://secunia.com/advisories/45594/

http://dvw-j.blogspot.com/2011/07/linux-foundation-foomatic.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2964

CVE：CVE-2011-2697, CVE-2011-2964

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11 (eCryptfs)

回避策：openSUSE-SU-2011:0902-1, SUSE-SU-2011:0898-1にて対応

脆弱性：セキュリティ制限の回避, データ操作, 機密情報の奪取, 権限の昇格, DoS攻撃, マウント脆弱性

ソース：

http://www.opensuse.org/en/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/11043404

https://hermes.opensuse.org/messages/11079346

http://secunia.com/advisories/45563/

http://secunia.com/advisories/45589/

http://dvw-j.blogspot.com/2011/08/ecryptfs-canonical-ltd-ubuntu-linux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1831

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1832

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1833

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1834

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1835

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1836

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1837

CVE：CVE-2011-1831, CVE-2011-1832, CVE-2011-1833, CVE-2011-1834, CVE-2011-1835, CVE-2011-1836, CVE-2011-1837

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11 (libsoup 2.34.3未満/2.35.4未満)

回避策：SUSE-SU-2011:0876-1, openSUSE-SU-2011:0875-1にて対応

脆弱性：機密情報の奪取, ディレクトリトラバーサル, 入力検証エラー, ファイルの曝露, 不正HTTPのリクエスト

ソース：

http://www.opensuse.org/en/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/10656310

https://hermes.opensuse.org/messages/10653875

http://secunia.com/advisories/45426/

http://secunia.com/advisories/45554/

http://dvw-j.blogspot.com/2011/08/libsoup-canonical-ltd-ubuntu-linux-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2524

CVE：CVE-2011-2524

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3, Novell SUSE Linux Enterprise Server (SLES) 10/11 (libsndfile 1.0.20/1.0.24)

回避策：openSUSE-SU-2011:0854-1, SUSE-SU-2011:0856-1にて対応

脆弱性：DoS攻撃, システムアクセス, ゼロ除算エラー, 整数オーバーフロー, バッファオーバーフロー, リモートコード実行

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/10207276

https://hermes.opensuse.org/messages/10387559

http://secunia.com/advisories/35266/

http://secunia.com/advisories/45125/

http://secunia.com/advisories/45494/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4835

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2696

CVE：CVE-2009-4835, CVE-2011-2696

危険性：High Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (OPIE 2.4)

回避策：openSUSE-SU-2011:0848-1, SUSE-SU-2011:0849-1にて対応

脆弱性：権限の昇格, DoS攻撃, システムアクセス, オフバイワンエラー

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

https://hermes.opensuse.org/messages/10082052

https://hermes.opensuse.org/messages/10082068

http://secunia.com/advisories/45136/

http://secunia.com/advisories/45448/

http://dvw-j.blogspot.com/2011/07/debian-gnulinux_26.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2489

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2490

CVE：CVE-2011-2489, CVE-2011-2490

危険性：Medium Risk

Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11 (FreeType 2.4.5)

回避策：openSUSE-SU-2011:0852-1, SUSE-SU-2011:0853-1にて対応

脆弱性：システムアクセス, メモリ破壊

ソース：

http://www.opensuse.org/en/

http://www.novell.com/promo/home/sle11.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html

http://secunia.com/advisories/45167/

http://secunia.com/advisories/45449/

http://dvw-j.blogspot.com/2011/07/freetype.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0226

CVE：CVE-2011-0226

危険性：High Risk