firefox security update

1.5.0.12-0.19.0.1.el4 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-0.19.el4 - Respun for mozilla bugs 439035,439735,440308 1.5.0.12-0.18.el4 - Update patchset to fix regression as per 1.8.1.15...

seamonkey security update

1.0.9-16.3.0.1.el46 - Added mozilla-oracle-default-prefs.js, mozilla-oracle-default-bookmarks.html, and mozilla-home-page.patch 1.0.9-16.3.el4 - Ensure the correct headers are exported 1.0.9-16.2.el4 - Respun for mozilla bugs 439035,439735,440308 1.0.9-16.1.el4 - Update patchset to fix regression...

CVE-2008-2952

liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams that trigger an assertion error...

Crashes with evidence of memory corruption (rv:1.8.1.15) — Mozilla

Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be...

linkara-xss.txt

+==========================================================================+ + Copyright 2004/2008 - Linkara & XSS Remote evil cOD3 + +==========================================================================+ Authors: Ivan Sanchez Product: © Copyright 2004/2008 - Linkara, S.L...

gnome-screensaver security update

2.16.1-8 Resolves: 436522 - rebuild against 5.1 nss 2.16.1-7 Resolves: 436522 - dont unlock the screen when pwent lookup fails 2.16.1-6 Resolves: 245345 - Add missing BuildRequires to fix fade in...

hordekrono-xss.txt

+==========================================================================+ + Horde & Kronolith Calendar Application & XSS Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: Kronolith Calendar Application Web:...

RHEL 5 : nss_ldap (RHSA-2008:0389)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

Low: Red Hat Security Advisory: vsftpd security and bug fix update

An updated vsftpd package that fixes a security issue and several bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The vsftpd package includes a Very Secure File Transfer Protocol FTP daemon. A...

RHEL 5 : kernel (RHSA-2008:0275)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2008-1419

Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...

CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

CVE-2008-2149

Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0237 Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

CentOS 3 : kernel (CESA-2008:0211)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 5 : kernel (RHSA-2008:0233)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 3 : kernel (RHSA-2008:0211)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5225)

Sun Java was updated to 1.6.0u6 to fix several bugs and potentially also security problems. Sun has however not published any details regarding Security Vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Mozilla Thunderbird < 2.0.0.14 Multiple Vulnerabilities

The installed version of Thunderbird is affected by various security issues : - A series of vulnerabilities exist that allow for JavaScript privilege escalation and arbitrary code execution. - Several stability bugs exist leading to crashes which, in some cases, show traces of memory corruption. ...

CVE-2008-0599

The initrequestinfo function in sapi/cgi/cgimain.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATHTRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI...