Solaris 10 (x86) : 123939-05 (deprecated)

GNOME 2.6.0x86: GNU Transport Layer Security Library Patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 123939 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2007:041)

Vladimir Nadvornik discovered a buffer overflow in GraphicsMagick and ImageMagick allows user-assisted attackers to cause a denial of service and possibly execute execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. This is related t...

Slackware 10.0 / 10.1 / 10.2 / 11.0 : qt (SSA:2006-298-01)

New qt packages are available for Slackware 10.0, 10.1, 10.2, and 11.0 to fix a possible security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-298-01. The text itself is...

Mandrake Linux Security Advisory : openssh (MDKSA-2006:204)

A vulnerability in the privilege separation functionality in OpenSSH was discovered, caused by an incorrect checking for bad signatures in sshd's privsep monitor. As a result, the monitor and the unprivileged process can get out sync. The OpenSSH team indicated that this bug is not known to be...

SUSE-SA:2006:079: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:079 kernel. The Linux 2.6 kernel has been updated to fix various security issues. On SUSE Linux Enterprise Server 9 and SUSE Linux Enterprise 10 and their derived products this update also contains various bugfixes. %NASLMINLEVEL...

SUSE-SA:2006:052: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:052 php4,php5. Various security problems have been fixed in the PHP script language engine and its modules, versions 4 and 5. The PHP4 updated packages were released on September 12, the PHP5 update packages were released on...

Slackware 10.2 : mysql (SSA:2006-211-01)

New mysql packages are available for Slackware 10.2 to fix security issues and other bugs. For complete details about the many fixes addressed by this release, you can find MySQL's news article about the MySQL 4.1.21 Community Edition release here:...

Mandrake Linux Security Advisory : texinfo (MDKSA-2006:203)

Miloslav Trmac discovered a buffer overflow in texinfo. This issue can cause texi2dvi or texindex to crash when processing a carefully crafted file. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Mandrake Linux Security Advisory : gzip (MDKSA-2006:167)

NULL Dereference CVE-2006-4334 A stack modification vulnerability where a stack buffer can be modified out of bounds, but not in the traditional stack overrun sense exists in the LZH decompression support of gzip. CVE-2006-4335 A .bss buffer underflow exists in gzip's pack support, where a loop...

Mandrake Linux Security Advisory : doxygen (MDKSA-2006:212)

Doxygen is a documentation system for C, C++ and IDL. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to...

Mandrake Linux Security Advisory : openldap (MDKSA-2006:171)

slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List ACL privileges to modify arbitrary Distinguished Names DN. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SUSE-SA:2006:070: pdns

The remote host is missing the patch for the advisory SUSE-SA:2006:070 pdns. Two security problems that have been found in PowerDNS are fixed by this update: CVE-2006-4251: The PowerDNS Recursor can be made to crash by sending malformed questions to it over TCP potentially executing code...

Mandrake Linux Security Advisory : pxelinux (MDKSA-2006:211)

PXELINUX is a PXE bootloader. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service...

SUSE-SA:2006:059: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:059 php4,php5. The inirestore method could be exploited to reset options such as openbasedir when set via the web server config file to their default value set in php.ini CVE-2006-4625. Additionally php5 on all products as well as...

Mandrake Linux Security Advisory : ffmpeg (MDKSA-2006:173)

Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in 1 dtsdec.c, 2 vorbis.c, 3 rm.c, 4sierravmd.c, 5 smacker.c, 6 tta.c, 7 4xm.c, 8 alac.c, 9 cook.c,...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:197)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Bugs in the netfilter for IPv6 code, as reported by Mark Dowd, were fixed CVE-2006-4572. The ATM subsystem of the Linux kernel could allow a remote attacker to cause a Denial of Service panic via unknown vectors that cau...

SUSE-SA:2006:032: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2006:032 sendmail. The Mail Transfer Agent sendmail has a remote exploitable problem, where a specially crafted MIME messages can crash sendmail and block queue processing. This issue is tracked by the Mitre CVE ID CVE-2006-1173 and CE...

Mandrake Linux Security Advisory : php (MDKSA-2006:185)

PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safemode and openbasedir, via the inirestore function, which resets the values to their php.ini Master Value defaults. CVE-2006-4625 A race condition in the symlink functi...

MDKA-2005:046 : drakxtools

A new version of the HPLIP driver suite is now available. This new version introduces support for parallel printers and multi-function devices; now USB, parallel, and network TCP/Socket devices are now fully supported, as well as the devices that the former HPOJ suite handled. The new HPLIP suite...

MDKA-2006:034 : ipsec-tools

IPsec-Tools1 is a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. This update fixes a few issues and introduces new functionalities to the package provided for Mandriva 2006 users: - fixed tunnel mode connection 19460 2 - fixed GSSAPI build - version update: 0.6.6 - enabled...