RedHat Security Advisory RHSA-2009:1540

The remote host is missing updates to kernel-rt packages announced in advisory RHSA-2009:1540. For details on the issues addressed in this update, please visit the referenced security advisories. These updated packages also include bug fixes and enhancements. Users are directed to the Realtime...

Security Fixes for Java, BlackBerry Desktop

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...

Mandriva Linux Security Advisory : squidGuard (MDVSA-2009:293-1)

Multiple vulnerabilities has been found and corrected in squidGuard : Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to emergency mode...

RHEL 5 : kernel (RHSA-2009:1548)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kmod, kvm security update

CentOS Errata and Security Advisory CESA-2009:1465 Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual...

Fedora 10 : slim-1.3.1-9.fc10 (2009-10461)

Sat Oct 10 2009 Lorenzo Villani - 1.3.1-9 - rebuilt - Sat Oct 10 2009 Lorenzo Villani - 1.3.1-8 - Fix BZ 518068 - Sun Jul 26 2009 Fedora Release Engineering - 1.3.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild - Sun Jun 21 2009 Anders F Bjorklund 1.3.1-6 - exclude current...

CentOS 4 : kernel (CESA-2009:1522)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

Mandriva Linux Security Advisory : python-django (MDVSA-2009:275)

A vulnerability has been found and corrected in python-django : The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected static media files, which allows remote attackers to conduct directory traversal attacks and read arbitrary fil...

Mandriva Linux Security Advisory : python-django (MDVSA-2009:276-1)

Multiple vulnerabilities has been found and corrected in python-django : The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected static media files, which allows remote attackers to conduct directory traversal attacks and read...

RHEL 5 : kernel (RHSA-2009:1455)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:1455 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fix: a NULL pointer dereference flaw was found in the...

SuSE 11 Security Update : MozillaFirefox (SAT Patch Number 1001)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - Crashes with evidence of memory corruption rv:1.9.0.11. MFSA 2009-24 / CVE-2009-1392 / CVE-2009-1832 / CVE-2009-1833 - bmo479413 URL spoofing with invalid unicode characters. MFSA 2009-25 /...

SuSE 11 Security Update : open-iscsi (SAT Patch Number 1240)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files. CVE-2009-1297 Also some non-security bugs have been fixed : - synchronize startup settings - fix daemon segfault with CHAP %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 713 / 715 / 716)

This Linux kernel update for SUSE Linux Enterprise 11 fixes lots of bugs and some security issues. The kernel was also updated to the 2.6.27.21 stable release. - nfsd in the Linux kernel does not drop the CAPMKNOD capability before handling a user request in a thread, which allows local users to...

SuSE 11 Security Update : KDE4 PIM packages (SAT Patch Number 808)

This kdepim4 and kdepimlibs4 update fixes lots of bugs and one security issue : KMail 4.1.x executes links in mail without confirmation. no cve assigned yet It also fixes lots of non-security bugs : kdepim4 : - kdepim: make sure we initially create items for subresources - kdepim: fix...

SuSE 11 Security Update : KVM (SAT Patch Number 1166)

The KVM technology available as Technical Preview in SUSE Linux Enterprise has been updated to version 0.10.5. While a minor security issue was fixed, this mainly is a huge version update. Changelog : - 'info chardev' monitor command - automatic port allocation for vnc and similar - improved cdro...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6109)

This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1212 / 1218 / 1219)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.29 fixing various bugs and security issues. The following security issues were fixed : - A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2692 - A kernel stack...

lftp security update

CentOS Errata and Security Advisory CESA-2009:1278 An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file...

Fedora 11 : puppet-0.24.8-4.fc11 (2009-8477)

This update fixes a number of bugs in both the packaging and upstream source. See the package changelog and bug reports for complete details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...