MDKA-2007:056 : pidentd

The pidentd package had incorrect requirements that prevented it from being installed. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2007:114 : eclipse

The Eclipse IDE provided with 2008.0 does not run, instead outputting a glibc error or JVM termination error. This update fixes that, and some other bugs in the package. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDKA-2007:073 : gtk+2.0

With some window managers such as IceWM or matchbox, or when using no window manager, the GTK file chooser was resizing infinitely. This bug notably occurred in the save dialog of Mozilla Firefox. This update package fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecat...

CentOS 3 / 4 / 5 : qt (CESA-2007:0721)

Updated qt packages that correct an integer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications...

Ubuntu 7.04 / 7.10 / 8.04 LTS : exiv2 vulnerabilities (USN-655-1)

Meder Kydyraliev discovered that exiv2 did not correctly handle certain EXIF headers. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could cause the application linked against libexiv2 to crash, leading to a denial of service, or possibly...

CentOS 3 / 4 / 5 : perl (CESA-2007:0966)

Updated Perl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration...

Mandriva Linux Security Advisory : rsync (MDVSA-2008:011)

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. CVE-2007-6199 Unspecified vulnerability in rsync before...

CentOS 4 / 5 : devhelp / firefox / yelp (CESA-2007:0400)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way...

Mandriva Linux Security Advisory : autofs (MDVSA-2008:009-1)

The default behaviour of autofs 5 for the hosts map did not specify the nosuid and nodev mount options. This could allow a local user with control of a remote NFS server to create a setuid root executable on the exported filesystem of the remote NFS server. If this filesystem was mounted with the...

Mandriva Linux Security Advisory : mysql (MDVSA-2008:028)

The mysqlchangedb function in MySQL 5.0.x before 5.0.40 did not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allowed remote authenticated users to gain privileges CVE-2007-2692. The federated engine in MySQL 5.0.x, when performing a certain SHOW...

Solaris 8 (sparc) : 127380-01

Sun Management Centre 3.6: Patch for Solaris 8. Date this patch was last updated by Sun : Dec/11/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mandrake Linux Security Advisory : xine-ui (MDKSA-2007:154)

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors. CVE-2007-0254 XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

Solaris 9 (sparc) : 127381-01

Sun Management Centre 3.6: Patch for Solaris 9. Date this patch was last updated by Sun : Dec/11/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Ubuntu 6.06 LTS / 7.10 : gnome-screensaver vulnerabilities (USN-669-1)

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

CentOS 4 : xpdf (CESA-2007:1029)

Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Alin Rad P...

Mandriva Linux Security Advisory : squid (MDVSA-2008:002)

The cache update reply processing functionality in Squid 2.x before 2.6.STABLE17, and Squid 3.0, allows remote attackers to cause a denial of service crash via unknown vectors related to HTTP headers. The updated package fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

MDKA-2007:109 : beagle

A missing path in the beagle command line tools made beagle-info crash. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

Mandriva Linux Security Advisory : tcl (MDVSA-2008:059)

A flaw in the Tcl regular expression handling engine was originally discovered by Will Drewry in the PostgreSQL database server's Tcl regular expression engine. This flaw can result in an infinite loop when processing certain regular expressions. The updated packages have been patched to correct...

Mandriva Linux Security Advisory : postgresql (MDVSA-2008:004)

Index Functions Privilege Escalation CVE-2007-6600: as a unique feature, PostgreSQL allows users to create indexes on the results of user-defined functions, known as expression indexes. This provided two vulnerabilities to privilege escalation: 1 index functions were executed as the superuser and...

RHEL 5 : kdegraphics (RHSA-2007:1051)

Updated kdegraphics packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment. This includes...