Mandriva Update for xulrunner MDVSA-2010:213 (xulrunner)

Check for the Version of xulrunner OpenVAS Vulnerability Test Mandriva Update for xulrunner MDVSA-2010:213 xulrunner Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

security update

CentOS Errata and Security Advisory CESA-2010:0817 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2010-November/079303.html Affected packages: Upstream details at: https://access.redhat.com/errata/RHSA-2010:0817...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2010:219)

A security issue was identified and fixed in mozilla-thunderbird : Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, when JavaScript is enabled, allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in October 201...

[ MDVSA-2010:218 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:218 http://www.mandriva.com/security/ Package : php Date : October 31, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities were...

MDVA-2010:213 : clamav

This is a bugfix release that upgrades clamav to the latest version 0.96.4. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=490 %NASLMINLEVEL 70300 @DEPRECATED@ This scrip...

Mandriva Update for subversion MDVSA-2010:199 (subversion)

Check for the Version of subversion OpenVAS Vulnerability Test Mandriva Update for subversion MDVSA-2010:199 subversion Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for libesmtp MDVSA-2010:195 (libesmtp)

Check for the Version of libesmtp OpenVAS Vulnerability Test Mandriva Update for libesmtp MDVSA-2010:195 libesmtp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for avahi MDVSA-2010:204 (avahi)

Check for the Version of avahi OpenVAS Vulnerability Test Mandriva Update for avahi MDVSA-2010:204 avahi Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Linux Security Advisory : subversion (MDVSA-2010:199)

A vulnerability was discovered and corrected in subversion : authz.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz shortcircuit is enabled, does not properly handle a named repository as a rule...

Oracle Critical Patch Update Advisory - October 2010

Oracle Critical Patch Update Advisory - October 2010 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...

FTPPad 1.2.0 Stack Buffer Overflow

$Id: ftppadlistreply.rb 10661 2010-10-12 18:40:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2938

arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure VMCS implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when an Intel platform without Extended Page Tables EPT functionality is used, accesses VMCS fields without verifying hardware support for these...

Mandriva Linux Security Advisory : apr-util (MDVSA-2010:192)

A denial of service attack against aprbrigadesplitline was discovered in apr-util CVE-2010-1623. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=4 90 The update...

Mandriva Linux Security Advisory : mailman (MDVSA-2010:191)

Multiple vulnerabilities has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description...

Mandriva Update for apr-util MDVSA-2010:192 (apr-util)

Check for the Version of apr-util OpenVAS Vulnerability Test Mandriva Update for apr-util MDVSA-2010:192 apr-util Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

security update

CentOS Errata and Security Advisory CESA-2010:0734 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2010-October/079194.html Affected packages: Upstream details at: https://access.redhat.com/errata/RHSA-2010:0734...

CVE-2010-2946

fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an "os2." substring at the beginning of a name...

kernel: guest crashes on non-EPT machines may crash the host as well

arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure VMCS implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when an Intel platform without Extended Page Tables EPT functionality is used, accesses VMCS fields without verifying hardware support for these...

Mandriva Linux Security Advisory : squid (MDVSA-2010:187)

A vulnerability has been found and corrected in squid : The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request CVE-2010-3072. Packages for...

MDVA-2010:199 : clamav

This is a bugfix release that upgrades clamav to the latest version 0.96.3. Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149&productsid=490 %NASLMINLEVEL 70300 @DEPRECATED@...