openSUSE 10 Security Update : gnutls (gnutls-5275)

Multiple issues have been fixed in gnutls: CVE-2008-1948 GNUTLS-SA-2008-1-1, CVE-2008-1949 GNUTLS-SA-2008-1-2 and CVE-2008-1950 GNUTLS-SA-2008-1-3 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

libxml XML实体名堆缓冲区溢出漏洞

BUGTRAQ ID: 31126 CVE ID：CVE-2008-3529 CNCVE ID：CNCVE-20083529 libxml软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml处理畸形XML内容时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当libxml2处理超长XML实体名时存在基于堆的缓冲区溢出，如果应用程序链接libxml2处理不可信的畸形XML内容，可导致应用程序崩溃或任意代码执行。 XMLSoft Libxml2 2.6.31 XMLSoft Libxml2 2.6.30 XMLSoft Libxm...

Fedora 8 : amarok-1.4.10-1.fc8 (2008-7719)

Amarok 1.4.10 has been released to fix a security problem. For more information please see http://amarok.kde.org/en/node/535/ Please update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

openSUSE 10 Security Update : opera (opera-5537)

This is a version upgrade for opera to version 9.52 to fix possible security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5537. The text description of this plugin is...

openSUSE 10 Security Update : asterisk (asterisk-5524)

This security update fixes multiple security vulnerabilities in asterisk CVE-2008-1897, CVE-2008-2119, CVE-2008-3263, CVE-2008-3264. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

[SECURITY] Fedora 8 Update: kazehakase-0.5.4-2.fc8.3

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...

Fedora 8 : drupal-5.8-1.fc8 (2008-6411)

Update to 5.8, security fixes: SA-2008-044 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security has extracted the preceding description...

Fedora 9 : sipp-3.1-2.fc9 (2008-6219)

This update fixes : - Bug 446182 - CVE-2008-2085 sipp: buffer overflows in getremoteipmedia and getremoteipv6media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Fedora 9 : jetty-5.1.14-1jpp.2.fc9 (2008-6141)

Bug 417411 - CVE-2007-5615: jetty CRLF injection - Bug 417391 - CVE-2007-5613: jetty cross site scripting - Bug 417401 - CVE-2007-5614: jetty session hijacking issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

SuSE 10 Security Update : speex (ZYPP Patch Number 5364)

Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code. CVE-2008-1686 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : freetype2, (ZYPP Patch Number 5361)

This update of freetype2 fixes several potential vulnerabilities reported by iDefense. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33431; scriptversion"1.18...

Fedora 8 : openldap-2.3.39-4.fc8 (2008-6029)

This update fixes CVE-2008-2952 - remote unauthenticated slapd DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 9 Update: snort-2.8.1-3.fc9

Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows,...

Fedora 8 : imlib2-1.4.0-7.fc8 (2008-4842)

Fix CVE-2008-2426 / SA30401 - buffer overflow in the XPM loader. http://secunia.com/advisories/30401/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

openSUSE 10 Security Update : libvorbis (libvorbis-5258)

Several security problems were fixed in libvorbis : - CVE-2008-1419 - Division by zero - CVE-2008-1420 - integer overflow - CVE-2008-1423 - integer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : squid (squid-5155)

A flaw in a previous previous security update could cause squid to crash under certain circumstances CVE-2008-1612. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update squid-5155. The text...

Fedora 7 : wordpress-2.5.1-1.fc7 (2008-3319)

This updates contains security fixes: http://wordpress.org/development/2008/04/wordpress-251/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : dbmail-2.2.9-1.fc7 (2008-3371)

Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 443019. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 8 : moin-1.5.9-1.fc8 (2008-3301)

This update fixes various security issues present in moin 1.5.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 8 : nagios-plugins-1.4.11-2.fc8 (2008-3061)

Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...