14488 matches found
GLSA-200701-09 : oftpd: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200701-09 oftpd: Denial of Service By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact : Remote, unauthenticated attackers may be ab...
Fedora Core 5 : ruby-1.8.5-1.fc5 (2006-1110)
Fri Oct 27 2006 Akira TAGOH - 1.8.5-1 - security fix release. - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that causes the denial of service. 212396 - backport fixes from devel. - fixed rbconfig.rb to refer to DESTDIR for sitearchdir. 207311 - updates to 1.8.5 - removed...
Fedora Core 6 : fetchmail-6.3.6-1.fc6 (2007-042)
Sat Jan 6 2007 Miloslav Trmac - 6.3.6-1 - Update to fetchmail-6.3.6 CVE-2006-5867, CVE-2006-5974 - Wed Nov 1 2006 Miloslav Trmac - 6.3.5-1 - Update to fetchmail-6.3.5 - Fix some rpmlint warnings Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora Core 5 : squirrelmail-1.4.8-1.fc5 (2006-913)
Upstream's 1.4.8 release fixes more bugs and solves CVE-2006-4019 security issue. Fedora's package also contains numerous language specific fixes. See RPM %changelog for more details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...
Fedora Core 5 : kdebase-3.5.3-0.3.fc5 (2006-726)
Thu Jun 15 2006 Than Ngo 6:3.5.3-0.3.fc5 - fix BR - Wed Jun 14 2006 Than Ngo 6:3.5.3-0.2.fc5 - apply patch to to fix 194659, CVE-2006-2449 KDM symlink attack vulnerability thanks to KDE security team - Thu Jun 8 2006 Than Ngo 6:3.5.3-0.1.fc5 - update to 3.5.3 - Fri May 12 2006 Than Ngo...
Fedora Core 6 : evince-0.6.0-5.fc6 (2006-1438)
The PostScript backend of evince had a buffer overflow CVE-2006-5864. This update fixes the problem. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora Core 4 : mysql-4.1.19-1.FC4.1 (2006-554)
4.1.19 fixes several moderate-severity security issues: see CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518, also our bugs 180467 180639 182025 183261 190866 190868 190870 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
Fedora Core 4 : openoffice.org-2.0.1.1-7.1 (2006-764)
CVE-2006-2198 macro security - CVE-2006-2199 java applets - CVE-2006-3117 corrupt file format more details at http://www.openoffice.org/security/bulletin-20060629.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora Core 5 : openssl-0.9.8a-5.3 / openssl097a-0.9.7a-4.2.2 (2006-953)
This is a security update for CVE-2006-4339. Avoid PKCS 1 v1.5 signature attack discovered by Daniel Bleichenbacher Ben Laurie; Google Security Team Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
Fedora Core 5 : kernel-2.6.16-1.2107_FC5 (2006-499)
An update to the latest upstream -stable snapshot 2.6.16.13 Among quite a few bug-fixes, are two security related fixes : Don't allow a backslash in a path component CVE-2006-1863 NETFILTER: SCTP conntrack: fix infinite loop CVE-2006-1527 Detailed changelogs of the last few point releases can be...
Fedora Core 5 : wget-1.10.2-3.3.fc5 (2007-037)
Wed Jan 10 2007 Karsten Hopp 1.10.2-3.3 - add disttag - fix bugzilla 218211 - fix bugzilla 186195 - fix bugzilla 205723 - fix CVE-2006-6719 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Core 5 : firefox-1.5.0.9-1.fc5 (2006-1499)
Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processes certain malformed JavaScript code. A malicious web page could cause the execution of JavaScript code in such a way that could cause Firefox to crash or execute arbitrary code as the user running...
Fedora Core 5 : firefox-1.5.0.7-1.fc5 (2006-976)
Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. CVE-2006-4565, CVE-2006-4566 A number of flaws were found in...
Fedora Core 6 : dovecot-1.0-1.rc15.fc6 (2006-1396)
Tue Nov 21 2006 Petr Rockai - 1.0-1.rc15 - update to latest upstream, fixes a few bugs, plus a security vulnerability 216510, CVE-2006-5973 - Tue Oct 10 2006 Petr Rockai - 1.0-0.3.rc7 - fix few inconsistencies in specfile, fixes 198940 - Wed Oct 4 2006 Petr Rockai - 1.0-0.2.rc7 - fix default...
Fedora Core 6 : kernel-2.6.18-1.2849.fc6 (2006-1223)
This updates to the latest upstream stable kernel 2.6.18.2, and also fixes a number of security issues. MOKB-05-11-2006: Linux 2.6.x ISO9660 findgetblockslow denial of service http://projects.info-pull.com/mokb/MOKB-05-11-2006.html CVE-2006-5757 MOKB-07-11-2006: Linux 2.6.x zlibinflate memory...
CVE-2006-6937
CVE-2006-6937 describes an SQL injection in displaypic.asp of Xtreme ASP Photo Gallery, exploitable via the sortorder parameter. The vulnerability arises in the web application component/display logic, allowing remote attackers to inject arbitrary SQL commands. NVD lists a base score of 7.5 (HIGH...
Fedora Core 5 : squirrelmail-1.4.7-2.fc5 (2006-788)
Many fixes here. Please report any regressions to Red Hat Bugzilla. - 1.4.7 with CVE-2006-3174 197369 - Move sqspellconfig.php to /etc and mark it %%confignoreplace 192236 - Reduce patch for body text 194457 - Better JP translation for 'Check mail' 196117 - Japanese zenkaku subject conversion...
Fedora Core 5 : mono-1.1.13.7-2.fc5.1 (2006-1012)
CVE-2006-5072 Mono insecure temporary file usage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Core 6 : texinfo-4.8-14.fc6 (2006-1203)
Sun Nov 5 2006 Miloslav Trmac - 4.8-14 - Remove off-line sorting from texindex fixes CVE-2006-4810 - Mon Oct 9 2006 Miloslav Trmac - 4.8-13 - Don't use mode 0666 for the texindex temporary files - Mon Oct 9 2006 Miloslav Trmac - 4.8-12 - Don't leave around temporary files used by texindex - Add...
