Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : expat (SSA:2011-041-02)

New expat packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2011-041-02. The text...

Fedora 14 : libtlen-0-0.10.20060309.fc14 (2010-17720)

This update unbundles the old copy of expat included in libtlen, fixing CVE-2009-3720 and possibly other vulnerabilities already fixed in system expat. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempte...

Fedora 12 : libtlen-0-0.10.20060309.fc12 (2010-17762)

This update unbundles the old copy of expat included in libtlen, fixing CVE-2009-3720 and possibly other vulnerabilities already fixed in system expat. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempte...

SuSE 10 Security Update : expat (ZYPP Patch Number 6765)

The previous expat security update CVE-2009-3560 caused parse errors with some xml documents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49850;...

SuSE 10 Security Update : expat (ZYPP Patch Number 6703)

Specially crafted XML files could crash applications that use expat to parse such files. CVE-2009-3560 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49849;...

SuSE 10 Security Update : expat (ZYPP Patch Number 6619)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat. CVE-2009-3720 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

apr -- multiple vunerabilities

Secunia reports: Multiple vulnerabilities have been reported in APR-util, which can be exploited by malicious people to cause a DoS Denial of Service. Two XML parsing vulnerabilities exist in the bundled version of expat. An error within the "aprbrigadesplitline" function in buckets/aprbrigade.c...

Ubuntu Update for cmake vulnerabilities USN-890-6

Ubuntu Update for Linux kernel vulnerabilities USN-890-6 OpenVAS Vulnerability Test $Id: gbubuntuUSN8906.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for cmake vulnerabilities USN-890-6 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 8.04 LTS / 8.10 / 9.04 : cmake vulnerabilities (USN-890-6)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for CMake. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening a crafted XML...

USN-890-6: CMake vulnerabilities

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for CMake. Original advisory details: Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked in...

Debian DSA-1977-1 : python2.4 python2.5 - several vulnerabilities

Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that the embedded Expat copy in the interpreter for the Python language, does not properly process malformed or crafted XML files. CVE-2009-3560 CVE-2009-3720 This vulnerability could allow an attacker to cause a denial of service while...

Debian DSA-1921-1 : expat - denial of service

Peter Valchev discovered an error in expat, an XML parsing C library, when parsing certain UTF-8 sequences, which can be exploited to crash an application using the library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Debian DSA-1953-1 : expat - denial of service

Jan Lieskovsky discovered an error in expat, an XML parsing C library, when parsing certain UTF-8 sequences, which can be exploited to crash an application using the library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Ubuntu Update for xmlrpc-c vulnerabilities USN-890-5

Ubuntu Update for Linux kernel vulnerabilities USN-890-5 OpenVAS Vulnerability Test $Id: gbubuntuUSN8905.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for xmlrpc-c vulnerabilities USN-890-5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-890-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.10 : xmlrpc-c vulnerabilities (USN-890-5)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for XML-RPC for C and C++. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening ...

Ubuntu 6.06 LTS : python-xml vulnerabilities (USN-890-4)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for PyXML. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening a crafted XML...

USN-890-4: PyXML vulnerabilities

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for PyXML. Original advisory details: Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked in...

DSA-1977-1 python - several vulnerabilities

Bulletin has no description...

Ubuntu Update for python2.4 vulnerabilities USN-890-3

Ubuntu Update for Linux kernel vulnerabilities USN-890-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN8903.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for python2.4 vulnerabilities USN-890-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...