Important: Red Hat Security Advisory: poppler security update

Updated poppler packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Poppler is a PDF rendering library, used by applications such as evince. Alin Rad Pop...

Important: Red Hat Security Advisory: gpdf security update

Updated gpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME-based viewer for Portable Document Format PDF files. Alin Rad Pop discover...

Incomplete fix for CVE-2007-0720 CUPS denial of service

The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation...

Incomplete fix for CVE-2007-0720 CUPS denial of service

The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation...

Moderate: Red Hat Security Advisory: pam security, bug fix, and enhancement update

Updated pam packages that fix two security flaws, resolve several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

Fedora 8 : hugin-0.6.1-11.fc8 (2007-2807)

Mon Nov 5 2007 Bruno Postle 0.6.1-11 - fix for CVE-2007-5200 hugin unsafe temporary file usage - bug 332401; bug 362851; bug 362861; bug 362871 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

FreeBSD : perl -- regular expressions unicode data buffer overflow (5b47c279-8cb5-11dc-8878-0016179b2dd5)

Red Hat reports : A flaw was found in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, possibly resulting in arbitrary code running with the permissions of the user running Perl. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 8 : nagios-plugins-1.4.8-9.fc8 (2007-2876)

Fri Oct 26 2007 Mike McGrath 1.4.8-9 - Fix for Bug 348731 and CVE-2007-5623 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Important: gpdf security update

2.8.2-7.7.1 - Bump release. 2.8.2-7.4.3 - Fix a couple of typos in the patch for 356641. 2.8.2-7.4.2 - Add patch to fix CVE-2007-4352, CVE-2007-5392, and CVE-2007-5393 356641. 2.8.2-7.4.1 - Add patch to fix CVE-2007-3387 248203. - Add patch to fix CVE-2006-0301 179053...

iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability

iDefense Security Advisory 11.06.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 06, 2007 I. BACKGROUND DebugView is a system analysis tool designed to display debug messages being generated on the system. More information is available on the vendor's site at the following URL...

FreeBSD : pcre -- arbitrary code execution (bfd6eef4-8c94-11dc-8c55-001c2514716c)

Debian project reports : Tavis Ormandy of the Google Security Team has discovered several security issues in PCRE, the Perl-Compatible Regular Expression library, which potentially allow attackers to execute arbitrary code by compiling specially crafted regular expressions. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : xfs (MDKSA-2007:210)

Integer overflow in the buildrange function in X.Org X Font Server xfs before 1.0.5 allows context-dependent attackers to execute arbitrary code via 1 QueryXBitmaps and 2 QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow. CVE-2007-4568 The...

Fedora 8 : liferea-1.2.23-5.fc8 (2007-2853)

Added patch to fix weak permission in feedlist.opml backup file. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

GLSA-200711-05 : SiteBar: Multiple issues

"The remote host is affected by the vulnerability described in GLSA-200711-05 SiteBar: Multiple issues Tim Brown discovered these multiple issues: the translation module does not properly sanitize the value to the 'dir' parameter CVE-2007-5491, CVE-2007-5694 %NASLMINLEVEL 70300 C Tenable Network...

Fedora 8 : ruby-1.8.6.111-1.fc8 (2007-2812)

This release contains another fixes of CVE-2007-5162 for Net::FTPTLS, Net::Telnet and Net::IMAP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix

A vulnerability in both the statusmessages and linkintegrity modules has been identified, where untrusted network data was treated as a pickle and loaded. This allows an attacker to run arbitrary python code within the Zope/Plone process. This issue has been assigned CVE-2007-5741 Affected versio...

Important: cups security update

1.1.17-13.3.46 - Applied patch to fix CVE-2007-4045 bug 356541. - Applied patch to fix CVE-2007-4351 STR 2561, bug 356541. - Applied patch to fix CVE-2007-5393 bug 356541...

Important: cups security update

1.1.22-0.rc1.9.20.2:.2 - Applied patch to fix CVE-2007-4351 STR 2561, bug 356551. 1.1.22-0.rc1.9.20.2:.1 - Applied patch to fix CVE-2007-4045 bug 356551. - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and CVE-2007-5393 bug 356551...

Fedora 8 : tar-1.17-4.fc8 (2007-2800)

Wed Oct 24 2007 Radek Brich 2:1.17-4 - upstream patch for CVE-2007-4476 tar stack crashing in safernamesuffix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

[ MDKSA-2007:207 ] - Updated perl packages fix vulnerability

Package : perl Date : November 5, 2007 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Tavis Ormandy and Will Drewry discovered a flaw in Perl's regular expression engine. Specially crafted input to a regular expression can cause Per...