icu, libicu security update

CentOS Errata and Security Advisory CESA-2008:0090 Updated icu packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The International Components for Unicode ICU...

Reachable Assertion

Overview Affected versions of this package are vulnerable to Reachable Assertion via perlmatchernonrecursive.hpp when processing regular expressions. A remote attacker could provide specially crafted regular expressions to an application using Boost, resulting in a denial of service. Remediation...

Debian: Security Advisory (DSA-1139-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-800-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-819-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1463-1 : postgresql-7.4 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3278 It was discovered that the DBLink module performed insufficient credential validation. This iss...

USN-568-1: PostgreSQL vulnerabilities

Nico Leidecker discovered that PostgreSQL did not properly restrict dblink functions. An authenticated user could exploit this flaw to access arbitrary accounts and execute arbitrary SQL queries. CVE-2007-3278, CVE-2007-6601 It was discovered that the TCL regular expression parser used by...

[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1463-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 14, 2008 http://www.debian.org/security/faq -...

DSA-1463-1 postgresql-7.4 - several

Bulletin has no description...

DSA-1460-1 postgresql-8.1 - several

Bulletin has no description...

PT-2008-1536 · Postgresql +3 · Postgresql +3

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 8.2.6 PostgreSQL versions prior to 8.1.11 PostgreSQL versions prior to 8.0.15 PostgreSQL versions prior to 7.4.19 TCL versions prior to 8.4.17 Description: The issue allows remote authenticated users to cause a...

openSUSE 10 Security Update : pcre (pcre-4750)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code CVE-2006-7230. %NASLMINLEVEL 70300 C Tenable...

horde-disclose.txt

---- Horde Web-Mail Remote File Disclosure ... ITDefence.ru Antichat.ru Horde Web-Mail Remote File Disclosure Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ ...

postgresql -- multiple vulnerabilities

The PostgreSQL developers report: PostgreSQL allows users to create indexes on the results of user-defined functions, known as "expression indexes". This provided two vulnerabilities to privilege escalation: 1 index functions were executed as the superuser and not the table owner during VACUUM an...

Break ray client figure ASP webmaster Safety assistant-vulnerability warning-the black bar safety net

To Lake2 website and 1. 5 the source code, found this version indeed improved a lot, and increase the killing function: 1:killing by the Unicode encoding of the ASP Trojan 2:killing the useOpen|CreateTextFile, And SaveToFile, Save, set Server, Server. Transfer|Execute, the ShellExecute, Exec, the...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

CVE-2006-7226

Perl-Compatible Regular Expression PCRE library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of...

pcre security update

CentOS Errata and Security Advisory CESA-2007:1063 Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular...

pcre regular expression flaws

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...