Fedora 13 : apr-util-1.3.10-1.fc13 (2010-15953)

This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...

Fedora 12 : apr-util-1.3.10-1.fc12 (2010-15916)

This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...

Fedora 13 : subversion-1.6.13-1.fc13 (2010-16136)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

Fedora 14 : subversion-1.6.13-1.fc14 (2010-16148)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)

Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...

Fedora 12 : poppler-0.12.4-5.fc12 (2010-15981)

Thu Oct 7 2010 Marek Kasik - 0.12.4-5 - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add poppler-0.12.4-CVE-2010-3704.patch Fix crash in broken pdf code - 0.12.4-4 - Accept 4-digit values in ToUnicode CMaps...

Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

openSUSE Security Update : kernel (openSUSE-SU-2010:0738-1)

The updated openSUSE 11.2 kernel fixes the following security bugs : CVE-2010-3310: Local users could corrupt kernel heap memory via ROSE sockets. CVE-2010-2962: Local users could write to any kernel memory location via the i915 GEM ioctl interface. Additionally the update restores the...

Debian DSA-2120-1 : postgresql-8.3 - privilege escalation

Tim Bunce discovered that PostgreSQL, a database server software, does not properly separate interpreters for server-side stored procedures which run in different security contexts. As a result, non-privileged authenticated database users might gain additional privileges. Note that this security...

[SECURITY] [DSA 2120-1] New postgresql-8.3 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2120-1 [email protected] http://www.debian.org/security/ Florian Weimer October 12, 2010 http://www.debian.org/security/faq -...

Fedora 14 : ghostscript-8.71-16.fc14 (2010-14549)

This package fixes a security problem CVE-2010-2055 in ghostscript whereby gs uses the current working directory to look for certain types of system file. This has been fixed by changing the default behaviour. Additionally, several other bugs have been fixed: scripts defining GSEXECUTABLE have be...

DSA-2120-1 postgresql-8.3 - privilege escalation

Bulletin has no description...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Xorg (ZYPP Patch Number 7126)

The X.Org X11 Server was updated to fix several bugs and 2 security issues : - This fix adds a workaround for overlapping stacks and heaps in case of OOM conditions.This workaround is necessary if the kernel is not properly adding guard or gap-pages below the stack. CVE-2010-2240 - The fbComposit...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6637)

This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3238: The getrandomint function in drivers/char/random.c in the Linux kernel produces insufficiently random numbers, which allows attackers to...

SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7133)

This SUSE Linux Enterprise 10 SP3 kernel update contains several bug fixes and fixes for the following security issues : - the stack of a process could grow into other mapped areas, therefore overwriting memory instead of terminating the process. CVE-2010-2240 - specially crafted requests could...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging security and bug fix update 1.2.2

Updated Red Hat Enterprise MRG Messaging packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Fedora 14 : mysql-5.1.50-2.fc14 (2010-15147)

Update to mysql 5.1.50, for numerous bug fixes including some low-grade security issues. See upstream release notes at : - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.htm l Note that Tenable Network Security has extracted the...

Fedora 13 : mysql-5.1.50-2.fc13 (2010-15166)

Update to mysql 5.1.50, for numerous bug fixes including some low-grade security issues. See upstream release notes at : - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.htm l Note that Tenable Network Security has extracted the...

Low: Red Hat Bug Fix Advisory: JBoss Enterprise Web Platform 5.1.0 update

Updated JBoss Enterprise Web Platform packages that fix various bugs are now available. The Enterprise Web Platform is for mid-size workloads, focusing on light and rich Java applications. Web Platform is a slimmed down profile of the JBoss Enterprise Application Platform. Web Platform builds upo...