FreeBSD Ports: tiff

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SuSE9 Security Update : libvorbis (YOU Patch Number 12620)

This update of libvorbis fixes a memory corruption while parsing OGG files. The bug is exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. The issue has been tracked as CVE-2009-2663. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libvorbis (openSUSE-SU-2010:0351-1)

This update of libvorbis fixes a memory corruption while parsing OGG files. This bug was exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. CVE-2009-2663: CVSS v2 Base Score: 6.8 important AV:N/AC:M/Au:N/C:P/I:P/A:P: Resource...

openSUSE Security Update : libvorbis (openSUSE-SU-2010:0351-1)

This update of libvorbis fixes a memory corruption while parsing OGG files. This bug was exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. CVE-2009-2663: CVSS v2 Base Score: 6.8 important AV:N/AC:M/Au:N/C:P/I:P/A:P: Resource...

CVE-2009-4924

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

CVE-2009-4924

The provided connected documents confirm that CVE-2009-4924 affects python-cjson 1.0.5, where an improper handling of the '/' argument to cjson.encode can enable certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element. The vulnerability is described consis...

Fedora 11 : pidgin-2.6.5-1.fc11 (2010-0429)

CVE-2010-0013 - A few other bug fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 11 : systemtap-1.1-2.fc11 (2010-1373)

Add systemtap-1.1-cfi-cfaops-fixes.patch - Resolves RHBZ 564429 - Add systemtap-1.1-getargv.patch - Resolves CVE-2010-0411 - Add systemtap-1.1 -tighten-server-params.patch excluding testsuite - Resolves CVE-2010-0412, CVE-2009-4273 Note that Tenable Network Security has extracted the preceding...

Fedora 12 : seamonkey-2.0.3-1.fc12 (2010-1932)

Update to new upstream SeaMonkey version 2.0.3, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey20.htmlseamonkey2.0.3 Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 12 : automake15-1.5-29.fc12.1 (2010-3563)

Tue Feb 16 2010 Karsten Hopp 1.5-29.1 - update CVE-2009-4029 patch - Tue Feb 9 2010 Karsten Hopp 1.5-29 - add disttag - Tue Feb 9 2010 Karsten Hopp 1.5-28 - add fix for CVE-2009-4029 - add buildrequirement flex Note that Tenable Network Security has extracted the preceding description block...

Fedora 12 : sendmail-8.14.4-3.fc12 (2010-5470)

This new version of sendmail fixes security bug - handling of bogus certificates with NULLs in CNs. Also many other bugs have been fixed, for complete list please see: http://www.sendmail.org/releases/8.14.4 Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 11 : openldap-2.4.15-7.fc11 (2010-0752)

Fixed security issue CVE-2009-3767, F12 and 13 already contain the fix, since it has been fixed in openldap-2.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Fedora 11 : automake-1.11.1-1.fc11.1 (2010-1216)

Fixes CVE-2009-4029 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 11 : automake15-1.5-29.fc11.1 (2010-1174)

Tue Feb 16 2010 Karsten Hopp 1.5-29.1 - update CVE-2009-4029 patch - Tue Feb 9 2010 Karsten Hopp 1.5-29 - add disttag - Tue Feb 9 2010 Karsten Hopp 1.5-28 - add fix for CVE-2009-4029 - add buildrequirement flex - Fri Jul 24 2009 Fedora Release Engineering - 1.5-27 - Rebuilt for...

Fedora 12 : gzip-1.3.12-14.fc12 (2010-0884)

This update fixes CVE-2009-2624 and CVE-2010-0001 vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : systemtap-1.1-1.fc11 (2010-0671)

Fixes CVE-2009-4273 Bugzilla 550172: https://bugzilla.redhat.com/showbug.cgi?id=CVE-2009-4273 New upstream release containing new features and bug fixes: better support for gcc 4.5 richer DWARF debuginfo, new preprocessor conditional for kernel 'CONFIG' testing, improved experimental unprivileged...

Fedora 12 : gnu-smalltalk-3.1-8.fc12 (2010-4339)

Remove embedded ltdl to fix CVE-2009-3736 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 12 : GraphicsMagick-1.3.7-4.fc12 (2010-0036)

Mon Dec 28 2009 Rex Dieter - 1.3.7-4 - CVE-2009-1882 503017 - Fri Dec 4 2009 Stepan Kasal - 1.3.7-3 - rebuild against perl 5.10.1 - Fri Nov 6 2009 Rex Dieter - 1.3.7-2 - cleanup/uncruftify .spec Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 13 : gnu-smalltalk-3.1-8.fc13 (2010-4340)

Remove embedded ltdl to fix CVE-2009-3736 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 12 : krb5-1.7-18.fc12 (2010-0503)

This update incorporates fixes from upstream which correct integer underflow problems in the AES and RC4 decryption routines CVE-2009-4212. It also corrects a failure in 'kdb5util load' which could occur when the database files being created did not previously exist. Note that Tenable Network...