OracleVM 2.2 : bash (OVMSA-2014-0020)

The remote OracleVM system is missing necessary patches to address critical security updates : - Check for fishy environment Resolves: 1141644 - Fixed a bug that caused trap handlers to be executed recursively, corrupting internal data structures. Resolves: 964753 - Don't include backup files...

openSUSE Security Update : pidgin / pidgin-branding-openSUSE (openSUSE-SU-2014:0239-1)

Update to version 2.10.8 bnc861019 : + General: Python build scripts and example plugins are now compatible with Python 3 pidgin.im15624. + libpurple : - Fix potential crash if libpurple gets an error attempting to read a reply from a STUN server CVE-2013-6484. - Fix potential crash parsing a...

openSUSE Security Update : libpango-1_0-0 (openSUSE-SU-2011:0221-1)

Specially crafted font files could cause a heap corruption in applications linked against pango CVE-2011-0064, CVE-2011-0020. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpango-10-0-4076...

KLA10433 Multiple vulnerabilities in Pidgin

Multiple serious vulnerabilities have been found in Pidgin. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary programs and other unknown impact. Below is a complete list of vulnerabilities 1. Improper traffic restrictions can be exploited remotely via...

Fedora 19 : pidgin-2.10.9-1.fc19 (2014-1999)

Update to 2.10.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Update for pidgin FEDORA-2014-1999

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for finch CESA-2014:0139 centos6

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2014:0139 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for finch CESA-2014:0139 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for finch CESA-2014:0139 centos5

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2014:0139 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2014-0020

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service application crash via a crafted message...

CVE-2014-0020

The CVE-2014-0020 entry applies to Pidgin with libpurple’s IRC protocol plugin (pre-2.10.8). The issue is that the IRC plugin does not validate argument counts, allowing remote IRC servers to crash the application (DoS) via a crafted message. Public advisories across distributions indicate this h...

CentOS 5 / 6 : pidgin (CESA-2014:0139)

Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2014:0139 Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...

pidgin security update

2.7.9-27.el6 - Fix regression in CVE-2013-6483. 2.7.9-26.el6 - Fix patch for CVE-2012-6152 RH bug 1058242. 2.7.9-25.el6 - Add patch for CVE-2014-0020 RH bug 1058242. 2.7.9-24.el6 - Add patch for CVE-2013-6490 RH bug 1058242. 2.7.9-23.el6 - Add patch for CVE-2013-6489 RH bug 1058242. 2.7.9-22.el6 ...

pidgin

New pidgin packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/pidgin-2.10.9-i486-1slack14.1.txz: Upgraded. This update fixes various security issues and other bugs. For...

Fedora Update for goffice FEDORA-2014-0020

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : pango (ELSA-2011-0180)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0180 advisory. - Prevent heap corruption with malformed fonts. CVE-2011-0020 Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2013-0020

CVE-2013-0020 is a concrete use-after-free vulnerability in Microsoft Internet Explorer 9, related to CMarkup handling (CDATAs) that can be triggered by visiting a crafted page. The root cause involves a dangling pointer being reused after a delete, enabling remote code execution with the user’s ...

Internet Explorer CMarkup Use After Free (MS13-009; CVE-2013-0020)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Slackware Advisory SSA:2004-133-01 apache

The remote host is missing an update as announced via advisory SSA:2004-133-01. OpenVAS Vulnerability Test $Id: esoftslkssa200413301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...