SuSE 11.1 Security Update : FUSE (SAT Patch Number 4095)

The following security issues were fixed : - FUSE allowed local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem. CVE-2010-3879 - Avoid mounting a directory including...

SuSE 11.1 Security Update : Libreoffice (SAT Patch Number 4082)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

Old and Insecure, IE6 Still Popular in the Enterprise

Conventional wisdom has it that Microsoft’s Internet Explorer Web browser is on the way out: succumbing to the death of thousand cuts administered by plucky rivals like Mozilla’s Firefox, Google’s Chrome and even Opera. But data from Web security firm zScaler shows that the Old Blue Lady of the W...

Ubuntu 8.04 LTS / 8.10 : pygresql vulnerability (USN-870-1)

Steffen Joeris discovered that PyGreSQL 3.8 did not use PostgreSQL's safe string and bytea functions in its own escaping functions. As a result, applications written to use PyGreSQL's escaping functions are vulnerable to SQL injections when processing certain multi-byte character sequences. Becau...

DSA-1910-1 mysql-ocaml - missing escape function

Bulletin has no description...

DSA-1911-1 pygresql - missing escape function

Bulletin has no description...

[SECURITY] [DSA 1878-2] New devscripts packages fix regressions

------------------------------------------------------------------------ Debian Security Advisory DSA-1878-2 [email protected] http://www.debian.org/security/ Florian Weimer September 11, 2009 http://www.debian.org/security/faq -...

MDVA-2008:082-1 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

MDVA-2008:082 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

Mandriva Update for timezone MDVA-2008:082 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2008:082 timezone Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Microsoft researching new (secure) browser

Microsoft’s research unit is investing resources in a new Web browser that could eventually signal a shift away from the ubiquitous Internet Explorer. According to a research paper released this week, the project is called Gazelle and is positioned as a secure web browser constructed as a...

Microsoft Internet Explorer 56 Legacy Text Formatting - ActiveX Component Buffer Overflow

Microsoft Internet Explorer 56 Legacy Text Formatting - ActiveX Component Buffer Overflow source: https://www.securityfocus.com/bid/5558/info A buffer overflow vulnerability has been reported in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The Legacy Text Formatting Activ...

Microsoft Internet Explorer 5/6 Legacy Text Formatting - ActiveX Component Buffer Overflow

source: https://www.securityfocus.com/bid/5558/info A buffer overflow vulnerability has been reported in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The Legacy Text Formatting ActiveX control is used by Internet Explorer to display specially formatted text. Reportedly, t...

SQL Server Feature Pack

The Feature Pack is a collection of standalone install packages that provide additional value for SQL Server. It includes: Latest versions of redistributable components for SQL Server Latest versions of add-on providers for SQL Server Latest versions of backward compatibility components for SQL...