Oracle Linux 6 : nspr / nss / nss-util (ELSA-2012-0973)

From Red Hat Security Advisory 2012:0973 : Updated nss, nss-util, and nspr packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact...

Oracle Linux 5 : firefox (ELSA-2010-0681)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0681 advisory. firefox: 3.6.9-2.0.1.el5 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones...

Oracle Linux 5 : firefox (ELSA-2008-0978)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0978 advisory. devhelp: 0.12-20 - Rebuild against xulrunner firefox: 3.0.4-1.0.1.el5 - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html...

Oracle Linux 4 / 5 / 6 : nspr / nss (ELSA-2011-1282)

From Red Hat Security Advisory 2011:1282 : Updated nss and nspr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of...

Oracle Linux 5 : nss / and / nspr (ELSA-2012-1090)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1090 advisory. nspr 4.9.1-4 - Resolves: rhbz834219 - Fix postinstall scriptlet failures - Fix %post and %postun lines per packaging guidelines - Updated License: to MPLv2.0 pe...

Oracle Linux 5 : nspr / and / nss (ELSA-2009-1184)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1184 advisory. nspr: 4.7.4-1.el53.1 - create z-stream version 4.7.4-1 - Update to NSPR 4.7.4 nss: 3.12.3.99.3-1.el53.2 - adjust ssl cipher count constant bug 505650...

Oracle Linux 5 : nss (ELSA-2010-0165)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0165 advisory. nspr: 4.8.4-1 - Update to NSPR 4.8.4 nss: 3.12.6-1.0.1.el54 - Update clean.gif in the nss-3.12.6-stripped.tar.bz2 tarball 3.12.6-1 - Update to 3.12.6...

Oracle Linux 6 : nss (ELSA-2010-0862)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0862 advisory. nss: 3.12.8-1.0.1.el6 - Update expired PayPalEE.cert to fix build failure - Use blank image instead of clean.gif in nss-3.12.8-stripped.tar.bz2 3.12.8-1 - Updat...

Oracle Linux 6 : nss-pam-ldapd (ELSA-2013-0590)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0590 advisory. 0.7.5-18.1 - Apply upstream r1926 to resolve FDSET array index error - Resolves: rhbz915361 Tenable has extracted the preceding description block directly from...

CentOS 5 : nss (CESA-2013:0214)

Updated nss and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of libraries designe...

[SECURITY] [DSA 2628-2] nss-pam-ldapd update

------------------------------------------------------------------------- Debian Security Advisory DSA-2628-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 18, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2628-1 (nss-pam-ldapd - buffer overflow)

Garth Mollett discovered that a file descriptor overflow issue in the use of FDSET in nss-pam-ldapd, which provides NSS and PAM modules for using LDAP as a naming service, can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to cause a process that...

Debian: Security Advisory (DSA-2628-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox security update

firefox 17.0.6-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.6-1 - Update to 17.0.6 ESR 17.0.5-2 - Updated XulRunner check xulrunner 17.0.6-2.0.1.el64 - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js - Removed...

Mozilla Network Security Services Regexp Heap Overflow - Improved Performance (CVE-2009-2404)

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. it is used by applications such as Mozilla Firefox and Mozilla Thunderbird. A remote code execution vulnerability has been reported within Mozilla...

Mandriva Linux Security Advisory : nss-pam-ldapd (MDVSA-2013:106)

Updated nss-pam-ldapd packages fixes the following security vulnerability : Garth Mollett discovered that a file descriptor overflow issue in the use of FDSET in nss-pam-ldapd can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to cause a process...

Mandriva Linux Security Advisory : nss (MDVSA-2013:050)

Google reported to Mozilla that TURKTRUST, a certificate authority in Mozillas root program, had mis-issued two intermediate certificates to customers. The issue was not specific to Firefox but there was evidence that one of the certificates was used for man-in-the-middle MITM traffic management ...

Mandriva Linux Security Advisory : python-httplib2 (MDVSA-2013:119)

python-httplib2 ships its own copy of the Mozilla NSS certificates, but it should use the system-wide ones provided by the rootcerts package instead. This has been corrected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

java-1.7.0-openjdk security update

1.7.0.19-2.3.9.1.0.1.el64 - Update DISTRONAME in specfile 1.7.0.19-2.3.9.1.el6 - updated to updated IcedTea 2.3.9 with fix to one of security fixes - fixed font glyph offset - Resolves: rhbz950380 1.7.0.9-2.3.9.0.el6 - updated to IcedTea 2.3.9 with latest security patches - buildver sync to b19 -...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7599)

Mozilla Firefox has been updated to the 17.0.5ESR release fixing bugs and security issues. Also Mozilla NSS has been updated to version 3.14.3 and Mozilla NSPR to 4.9.6. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other...