FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID b0911985-6e2a-11d9-9557-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 2797b27a-f55b-11d8-81b0-000347a4fa7d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: ja-kdelibs, kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 8 Update: kdebase-3.5.8-31.fc8

Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...

[SECURITY] Fedora 7 Update: kdebase-3.5.8-31.fc7

Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...

Debian Security Advisory DSA 948-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 948-1. Maksim Orlovich discovered that the kjs Javascript interpreter, used in the Konqueror web browser and in other parts of KDE, performs insufficient bounds checking when parsing UTF-8 encoded Uniform Resource...

Design/Logic Flaw

KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which make...

CVE-2007-6591

KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which make...

CVE-2007-6591

KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which make...

CVE-2007-6591

CVE-2007-6591 affects KDE Konqueror 3.5.5 and 3.95.00. When a user accepts an SSL certificate based on the CN in the DN, Konqueror also treats it as valid for all names in subjectAltName:dNSName, even though SANs cannot be examined in the product. This enables attackers to trick users into accept...

CVE-2007-6591

KDE Konqueror 3.5.5 and 3.95.00, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, even though these fields cannot be examined in the product, which make...

openSUSE 10 Security Update : flash-player (flash-player-4855)

This flash player update to version 9.0.115.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-4324, CVE-2007-4768, CVE-2007-5275, CVE-2007-6242, CVE-2007-6243, CVE-2007-6244,...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 4856)

This flash player update to version 9.0.115.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-4324 / CVE-2007-4768 / CVE-2007-5275 / CVE-2007-6242 / CVE-2007-6243 / CVE-2007-6244 /...

SuSE 10 Security Update : Qt (ZYPP Patch Number 3047)

qt wongly accepts overly long UTF-8 sequences due to a bug in the UTF-8 decoder. This may lead to security problems unter certain circumstances. The bug for example allows for script tag injection in konqueror. CVE-2007-0242 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

SuSE 10 Security Update : kdebase3 (ZYPP Patch Number 3407)

A problem with the interaction between the Flash Player and the Konqueror webbrowser was fixed. The problem could lead to keypresses leaking to the applet instead of the browser. CVE-2007-2022 This update of khcindexbuilder also restricts the commands that can be executed with EGID 'man'...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 3890)

The Adobe Flash Player was updated to version 7.0.70.0 for Novell Linux Desktop 9 and to version 9.0.48.0 on SUSE Linux Enterprise Desktop 10 to fix several security problems : - An input validation error has been identified in Flash Player 9.0.45.0 and earlier versions that could lead to the...

SuSE 10 Security Update : kdelibs3,kdelibs3-devel,CVE-2007-1564 (ZYPP Patch Number 3988)

A bug in konqueror allowed attackers to abuse the FTP passive mode for portscans. CVE-2007-1564 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29483;...

RHEL 5 : pcre (RHSA-2007:1059)

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

pcre security update

CentOS Errata and Security Advisory CESA-2007:1063 Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...