SUSE Security Update: Security update for vpnc ______________________________________________________________________________
Announcement ID: SUSE-SU-2011:0979-1 Rating: important References: #651577 #708656 Cross-References: CVE-2011-2660 Affected Products: SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________
An update that solves one vulnerability and has one errata is now available.
Description:
This update of vpnc fixes a flaw in the modify_resolvconf_suse script that could potentially allow remote attackers to inject commands through specially crafted DNS domains (CVE-2011-2660).