Debian: Security Advisory (DSA-2433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2437-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2437-1. OpenVAS Vulnerability Test $Id: deb24371.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2437-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2434-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2437-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2458-2 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2012-0455 Soroush Dalili discovered that a cross-site scripting countermeasure related to JavaScript URLs could be bypassed. - CVE-2012-0456 Atte Kettunen discovered an out of bounds re...

DSA-2458-1 iceape - several

Bulletin has no description...

Memory disclosure with specially crafted backend responses

Memory disclosure with specially crafted backend responses Severity: major CVE-2012-1180 Not vulnerable: 1.1.17+, 1.0.14+ Vulnerable: 0.1.0-1.1.16...

Debian DSA-2437-1 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2012-0455 Soroush Dalili discovered that a cross-site scripting countermeasure related to JavaScript URLs could be bypassed. - CVE-2012-0456 Atte Kettunen discovered an out of...

[SECURITY] [DSA 2437-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2437-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 21, 2012 http://www.debian.org/security/faq -...

[BSA-066] Security Update for nginx

I uploaded new packages for nginx which fixed the following security problems: DSA-2434-1 nginx -- sensitive information leak Matthew Daley discovered a memory disclosure vulnerability in nginx. In previous versions of this web server, an attacker can receive the content of previously freed memor...

DSA-2437-1 icedove - several

Bulletin has no description...

nginx < 1.0.14 / 1.1.17 HTTP Header Response Memory Disclosure

The remote web server is running nginx, a lightweight, high performance web server / reverse proxy and email IMAP/POP3 proxy. The installed version of nginx is earlier than 1.0.14 or is 1.1.x before 1.1.17 and is, therefore, affected by a memory disclosure vulnerability. An issue related to the...

Debian DSA-2434-1 : nginx - sensitive information leak

Matthew Daley discovered a memory disclosure vulnerability in nginx. In previous versions of this web server, an attacker can receive the content of previously freed memory if an upstream server returned a specially crafted HTTP response, potentially exposing sensitive information. %NASLMINLEVEL...

[SECURITY] [DSA 2434-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2434-1 [email protected] http://www.debian.org/security/ Luciano Bello March 19, 2012 http://www.debian.org/security/faq -...

DSA-2434-1 nginx - sensitive information leak

Bulletin has no description...

nginx information leakage

Invalid server response can lead to server memory content disclosure...

Debian DSA-2433-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. - CVE-2012-0455 Soroush Dalili discovered that a cross-site scripting countermeasure related to...

[SECURITY] [DSA 2433-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2433-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2012 http://www.debian.org/security/faq -...

DSA-2433-1 iceweasel - several

Bulletin has no description...

nginx -- potential information leak

nginx development team reports: Matthew Daley recently discovered a security problem which may lead to a disclosure of previously freed memory on specially crafted response from an upstream server, potentially resulting in sensitive information leak...