PHP 5.3 Update Fixes 100 Bugs

PHP 5.3.3 contains approximately 100 bug fixes. Among the security-relevant bugs are buffer overflows in the native MySQL driver. Support for 5.2 ends. Read the full article. The H Security...

Firefox 3.6.x < 3.6.7 Multiple Vulnerabilities

Binary data 800780.prm...

Google Ups the Bug Bounty Ante to $3133.7

Just four days after Mozilla announced it was increasing the bounty paid for critical security bugs in its software to $3,000, Google has upped the ante, saying that it will now pay $3133.70 for the most severe bugs researchers find in Chromium. “The maximum reward for a single bug has been...

Miscellaneous memory safety hazards (rv:1.9.2.7/ 1.9.1.11) — Mozilla

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2010:0358-2)

Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once...

Fedora 12 : gcc-4.4.4-10.fc12 / libtool-2.2.6-18.fc12.1 (2010-10640)

The remote Fedora host is missing one or more security updates : gcc-4.4.4-10.fc12 : - Wed Jun 30 2010 Jakub Jelinek 4.4.4-10 - update from gcc-44-branch - PRs fortran/43841, fortran/43843, tree-optimization/44683 - fix qualified-id as template argument handling 605761, PR c++/44587 -...

Mandriva Update for bind MDVA-2010:179 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDVA-2010:179 bind Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for bind MDVA-2010:179 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDVA-2010:179 bind Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 12 : libtiff-3.9.4-1.fc12 (2010-10333)

Fix numerous crashing bugs, including CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, and CVE-2010-2233 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)

$Id: ms06057webviewsetslice.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 13 : libtiff-3.9.4-1.fc13 (2010-10334)

Fix numerous crashing bugs, including CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, and CVE-2010-2233 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

SuSE Update for samba SUSE-SA:2010:025

Check for the Version of samba OpenVAS Vulnerability Test SuSE Update for samba SUSE-SA:2010:025 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 13 : viewvc-1.1.4-1.fc13 (2010-4239)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...

Fedora 13 : moin-1.9.3-1.fc13 (2010-10550)

Update moin to 1.9.3, which fixes multiple XSS vulnerabilities and includes some bug fixes and new features. More information on the fixed XSS vulnerabilities is available at http://moinmo.in/MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg For a list of bug fixes and new features refer to...

Fedora 11 : bugzilla-3.2.6-2.fc11 (2010-1458)

This version of Bugzilla fixes security issues that were found in previous versions of the software where private bugs could be made public and configuration files were exposed to the world. CVE Numbers: CVE-2009-3989 and CVE-2009-3387 See upstream security advisory for additional details:...

Fedora 11 : viewvc-1.1.4-1.fc11 (2010-4326)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0346-1)

"This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chainreply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0346-1)

"This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chainreply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra...

Google Won't Allow Out-of-Date Chrome Plug-Ins

Google security engineers announced that Chrome would refuse to run plug-ins if they were found to be out of date, and thus, potentially vulnerable to exploitation of known bugs. Read the full article. Computerworld...

openSUSE Security Update : aria2 (openSUSE-SU-2010:0338-1)

This aria2 update to 1.9.3 fixes a metalink name Directory Traversal issue CVE-2010-1512. The version was also bumped from 1.8.2 to 1.9.3 to fix lots of bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...