SLES11: Security update for pango
🗓️ 11 Oct 2009 00:00:00Reported by Copyright (c) 2009 E-Soft Inc. http://www.securityspace.comType
openvas🔗 plugins.openvas.org👁 7 Views
| Reporter | Title | Published | Views | Family All 92 |
|---|---|---|---|---|
| pango -- integer overflow | 22 Feb 200900:00 | – | freebsd | |
| Mozilla Firefox < 3.0.12 Multiple Vulnerabilities | 28 Jul 200900:00 | – | nessus | |
| Firefox < 3.0.12 Multiple Vulnerabilities | 28 Jul 200900:00 | – | nessus | |
| CentOS 3 / 4 / 5 : pango (CESA-2009:0476) | 11 May 200900:00 | – | nessus | |
| CentOS 5 : firefox (CESA-2009:1162) | 6 Jan 201000:00 | – | nessus | |
| Debian DSA-1798-1 : pango1.0 - integer overflow | 11 May 200900:00 | – | nessus | |
| FreeBSD : pango -- integer overflow (4b172278-3f46-11de-becb-001cc0377035) | 13 May 200900:00 | – | nessus | |
| GLSA-201405-13 : Pango: Multiple vulnerabilities | 19 May 201400:00 | – | nessus | |
| Mandriva Linux Security Advisory : pango (MDVSA-2009:158-3) | 24 Jul 200900:00 | – | nessus | |
| MiracleLinux 3 : pango-1.14.9-5AXS3 (AXSA:2009-50:01) | 19 Jan 202600:00 | – | nessus |
10
| Source | Link |
|---|---|
| bugzilla | www.bugzilla.novell.com/show_bug.cgi |
#
#VID a9f9ebf1fe153fd04f53f3b5b237c97d
# OpenVAS Vulnerability Test
# $
# Description: Security update for pango
#
# Authors:
# Thomas Reinke <[email protected]>
#
# Copyright:
# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com
# Text descriptions are largely excerpted from the referenced
# advisories, and are Copyright (c) the respective author(s)
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2,
# as published by the Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#
include("revisions-lib.inc");
tag_summary = "The remote host is missing updates to packages that affect
the security of your system. One or more of the following packages
are affected:
pango
pango-doc
More details may also be found by searching for the SuSE
Enterprise Server 11 patch database located at
http://download.novell.com/patch/finder/";
tag_solution = "Please install the updates provided by SuSE.";
if(description)
{
script_xref(name : "URL" , value : "https://bugzilla.novell.com/show_bug.cgi?id=492773");
script_id(65672);
script_version("$Revision: 6666 $");
script_tag(name:"last_modification", value:"$Date: 2017-07-11 15:13:36 +0200 (Tue, 11 Jul 2017) $");
script_tag(name:"creation_date", value:"2009-10-11 22:58:51 +0200 (Sun, 11 Oct 2009)");
script_cve_id("CVE-2009-1194");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
script_name("SLES11: Security update for pango");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse_sles", "ssh/login/rpms");
script_tag(name : "solution" , value : tag_solution);
script_tag(name : "summary" , value : tag_summary);
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
exit(0);
}
#
# The script code starts here
#
include("pkg-lib-rpm.inc");
res = "";
report = "";
if ((res = isrpmvuln(pkg:"pango", rpm:"pango~1.22.1~3.17.3", rls:"SLES11.0")) != NULL) {
report += res;
}
if ((res = isrpmvuln(pkg:"pango-doc", rpm:"pango-doc~1.22.1~3.17.3", rls:"SLES11.0")) != NULL) {
report += res;
}
if (report != "") {
security_message(data:report);
} else if (__pkg_match) {
exit(99); # Not vulnerable.
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Jul 2017 00:00Current
7.7High risk
Vulners AI Score7.7
EPSS0.0413