----------------------------------------------------------------------

Secunia is proud to announce the availability of the Secunia Software
Inspector.

The Secunia Software Inspector is a free service that detects insecure
versions of software that you may have installed in your system. When
insecure versions are detected, the Secunia Software Inspector also
provides thorough guidelines for updating the software to the latest
secure version from the vendor.

Try it out online:
http://secunia.com/software_inspector/

----------------------------------------------------------------------

TITLE:
SUSE update for acroread

SECUNIA ADVISORY ID:
SA23882

VERIFY ADVISORY:
http://secunia.com/advisories/23882/

CRITICAL:
Highly critical

IMPACT:
Hijacking, Cross Site Scripting, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
SUSE Linux 9.3
http://secunia.com/product/4933/
SUSE Linux 10
http://secunia.com/product/6221/
SUSE Linux 10.1
http://secunia.com/product/10796/
SUSE Linux Enterprise Server 10
http://secunia.com/product/12192/

DESCRIPTION:
SUSE has issued an update for acroread. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct cross-site scripting attacks, as a vector for conducting
cross-site request forgery attacks, or to potentially compromise a
user's system.

For more information:
SA23483
SA23666

SOLUTION:
Apply updated packages.

x86 Platform:

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/acroread-7.0.9-2.1.i586.rpm
c37b991bf98afafafe7cef049b19c432

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/acroread-7.0.9-1.2.i586.rpm
1c2d6f4028f856b208c7a63a1a085ae2

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/acroread-7.0.9-2.1.i586.rpm
065c5b67a4194558d70f23671f0800db

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/acroread-7.0.9-2.1.i586.rpm
da0c72bc6379fa546f581d5b73eab620

Sources:

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/acroread-7.0.9-2.1.nosrc.rpm
c29bf975f673b532189ced3754693ed0

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/acroread-7.0.9-1.2.nosrc.rpm
6cbe0b868a4bfffa536311e933f402a2

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/acroread-7.0.9-2.1.nosrc.rpm
668ca101366dc4e66cb4670de282b6be

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/acroread-7.0.9-2.1.src.rpm
3e8a7e56bad5c5cba050f7c69c40d5fa

Our maintenance customers are notified individually. The packages
are
offered for installation from the maintenance web:

Novell Linux Desktop 9:
http://support.novell.com/techcenter/psdb/e4aa9329743e7c8bb35f09a113da0938.html

SUSE SLED 10:
http://support.novell.com/techcenter/psdb/af82ce465dd28a7a87602e1069a0e963.html

ORIGINAL ADVISORY:
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html

OTHER REFERENCES:
SA23483:
http://secunia.com/advisories/23483/

SA23666:
http://secunia.com/advisories/23666/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------