MDKA-2007:074 : dhcp

The dhcp server from the x8664 package did not offer dhcp replies, this package update fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script w...

RHEL 3 : httpd (RHSA-2007:0533)

Updated Apache httpd packages that correct two security issues and two bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in th...

Low: Red Hat Bug Fix Advisory: htdig bug fix update

An updated htdig package that fix various bugs is now available. The htdig system is a complete world wide web indexing and searching system for a small domain or intranet. This system is not meant to replace the need for powerful internet-wide search systems like Lycos, Infoseek, Webcrawler and...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

[slackware-security] Slackware 11.0 x11-6.9.0 patch fix

A new x11-6.9.0-i486-14slack11.0.tgz patch is available for Slackware 11.0 to fix the inadvertent inclusion of two old fontconfig binaries. Installing the original fontconfig patch followed by the original x11 patch would cause fc-cache and fc-list to be overwritten by old versions, breaking...

[slackware-security] qt

New qt packages are available for Slackware 10.2, 11.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-0242 Here are the details from the Slackware 11.0 ChangeLog:...

Debian DSA-1269-1 : lookup-el - insecure temporary file

Tatsuya Kinoshita discovered that Lookup, a search interface to electronic dictionaries on emacsen, creates a temporary file in an insecure fashion when the ndeb-binary feature is used, which allows a local attacker to craft a symlink attack to overwrite arbitrary files. %NASLMINLEVEL 70300 C...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, and 11.0 to fix security issues. Here are the details from the Slackware 11.0 ChangeLog: xap/mozilla-thunderbird-1.5.0.10-i686-1.tgz: Upgraded to thunderbird-1.5.0.10. This upgrade fixes several possible security bugs. For more...

MDKA-2006:043 : subversion

One of subversion's operating modes, svnserve, needs some entries in the /etc/services file. These entries are created during package installation, but under some conditions this procedure fails and /etc/services remains without them. The updated packages correct this issue. %NASLMINLEVEL 999999...

MDKA-2007:010 : wvstreams

In Mandriva 2007.0, the wvstreams package was built with openssl 0.9.7, which was not available in the final 2007.0 release. This made the wvstreams package impossible to install on Mandriva 2007.0 bug 26240. This update is built with openssl 0.9.8, so that it can be installed on a Mandriva 2007....

MDKA-2006:006 : xorg-x11

Issues have been reported with display corruption for various cards, including several ATI and Nvidia cards when using the free drivers. There was also an issue with the Greek keyboard layout. These should be corrected by the upstream 6.9.0 final, which this package is based on. Updated packages...

[ MDKSA-2007:028 ] - Updated ulogd packaged to address buffer overflow vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:028 http://www.mandriva.com/security/ Package : ulogd Date : January 26, 2007 Affected: Corporate 4.0 Problem Description: Buffer overflow in ulogd has unknown impact and attack vectors related to "improper...

[ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:019 http://www.mandriva.com/security/ Package : pdftohtml Date : January 18, 2007 Affected: 2006.0, 2007.0 Problem Description: The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in...

[ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:017 http://www.mandriva.com/security/ Package : wget Date : January 15, 2007 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: The ftpsyst function in...

[SECURITY] [DSA 1200-1] New Qt packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1200-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 30, 2006 - ------------------------------------------------------------------------ Package : qt-x11-free...

Debian DSA-1098-1 : horde3 - missing input sanitising

Michael Marek discovered that the Horde web application framework performs insufficient input sanitising, which might lead to the injection of web script code through cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian DSA-974-1 : gpdf - buffer overflows

SuSE researchers discovered heap overflow errors in xpdf, the Portable Document Format PDF suite, which is also present in gpdf, the GNOME version of the Portable Document Format viewer, and which can allow attackers to cause a denial of service by crashing the application or possibly execute...

[SECURITY] [DSA 1185-1] New openssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1185-1 [email protected] http://www.debian.org/security/ Noah Meyerhans September 28th, 2006 http://www.debian.org/security/faq -...

[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:140 http://www.mandriva.com/security/ Package : ncompress Date : August 9, 2006 Affected: 2006.0, Corporate 3.0 Problem Description: Tavis Ormandy, of the Google Security Team, discovered that ncompress, whe...

Slackware 10.0 / 10.1 / 10.2 / 9.0 / 9.1 / current : gnupg (SSA:2006-215-01)

New GnuPG packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues which could allow an attacker to crash gnupg and possibly overwrite memory which could lead to an integer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...