906 matches found
Security update for openoffice.org
Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: CVE-2010-2935 CVE-2010-2936: Charlie Miller has discovered two vulnerabilities in OpenOffice.org Impress, which can be exploited by malicious people to compromise a users system and execute...
[Backports-security-announce] Security Update for iceweasel
Alexander Reichle-Schmehl uploaded new packages for iceweasel which fixed the following security problems: CVE-2010-1206: The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, does not properly...
[Backports-security-announce] Security Update for git
Sebastian Harl uploaded new packages for git, a popular distributed revision control system, which fixed the following security problem: CVE-2010-2542, Debian BTS 590026 A buffer overrun was found in the way Git sanitized path of a git directory. If a local attacker would create a specially-craft...
[Backports-security-announce] Security Update for git
Sebastian Harl uploaded new packages for git, a popular distributed revision control system, which fixed the following security problem: CVE-2010-2542, Debian BTS 590026 A buffer overrun was found in the way Git sanitized path of a git directory. If a local attacker would create a specially-craft...
MDVA-2010:114 : rpmdrake
This update fixes rpmdrake to suggest packages from disabled backports media only when Backports view is used 40556. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...
[Backports-security-announce] Security Update for nsrp
Alexander Reichle-Schmehl uploaded new packages for nspr which fixed the following security problems: CVE-2009-0689 Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and...
[Backports-security-announce] Security update for openoffice.org
Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problem: CVE-2010-0395 It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for MicrosoftR Office, is not properly handling python macro...
[Backports-security-announce] Security Update for postgresql-8.4
Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...
[Backports-security-announce] Security Update for postgresql-8.4
Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...
[Backports-security-announce] Security Update for pidgin
Jan Wagner uploaded a new package for pidgin which fixed the following security problem: CVE-2010-16241 It was discovered that the msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service application crash...
[Backports-security-announce] Security Update for pidgin
Jan Wagner uploaded a new package for pidgin which fixed the following security problem: CVE-2010-16241 It was discovered that the msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service application crash...
Mandriva Update for rpmdrake MDVA-2010:113 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2010:113 rpmdrake Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for rpmdrake MDVA-2010:114 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2010:114 rpmdrake Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for rpmdrake MDVA-2010:114 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2010:114 rpmdrake Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[Backports-security-announce] Security Update for drupal6
Luigi Gangitano uploaded new packages for drupal6 which fixed the following security problems: SA-CORE-2010-001 Multiple vulnerabilities and weaknesses were discovered in Drupal. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious us...
[Backports-security-announce] Security Update for drupal6
Luigi Gangitano uploaded new packages for drupal6 which fixed the following security problems: SA-CORE-2010-001 Multiple vulnerabilities and weaknesses were discovered in Drupal. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious us...
[Backports-security-announce] Security Update for dovecot
Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE not assigned jet Fetching a message with a huge header could have resulted in Dovecot eating a lot of CPU. An evil attacker could cause a DoS by sending forged messages. For the lenny-backports...
[Backports-security-announce] Security Update for dovecot
Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE not assigned jet Fetching a message with a huge header could have resulted in Dovecot eating a lot of CPU. An evil attacker could cause a DoS by sending forged messages. For the lenny-backports...
[Backports-security-announce] Security Update for xulrunner
Alexander Reichle-Schmehl uploaded new packages for packagename which fixed the following security problems: CVE-2010-0159...
[Backports-security-announce] Security Update for roundcube
Holger Levsen uploaded a new package for roundcube which fixed the following security problems: CVE-2010-0464 Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determi...