FreeBSD : portupgrade-devel -- lack of distfile checksums (b428e6b3-926c-11e1-8d7b-003067b2972c)

Ports security team reports : The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This means that it is possible that packages built using this port may not match the one vetted by the maintainer. Users are advised to rebuild...

VM Right-Sizing report fails with error "Query execution failed for dataset ‘AnalysisDS’"

Challenge VM Right-Sizing report fails with the following error: Query execution failed for dataset 'AnalysisDS'. Error converting data type varchar to numeric. Cause The error occurs because of unsupported decimal separator format on the Collector machine. A dot . is expected as the decimal...

libxml2: User-assisted execution of arbitrary code

Background libxml2 is the XML C parser and toolkit developed for the Gnome project. Description The "xmlStringLenDecodeEntities" function in parser.c contains a boundary error which could possibly cause a heap-based buffer overflow. Impact A remote attacker could entice a user to open a specially...

VMware Objects are not visible in Ops Mgr

Challenge Either of the following scenarios apply: 1. No virtual infrastructure objects e.g., Clusters, Hosts, or VMs appear in the OpsMgr Console. Additionally, you may receive an alert in Ops Mgr from the Veeam Management Pack for Microsoft System Center Collector as follows: Alert Name: Agent...

MPlayer SAMI Subtitle File Overflow

Added: 09/07/2011 BID: 49149 OSVDB: 74604 Background MPlayer is an open source media player with support for many operating systems. Problem MPlayer does not properly validate the contents of Synchronized Accessible Media Interchange SAMI caption files. If a video references a malformed SAMI file...

[SECURITY] Fedora 14 Update: pure-ftpd-1.0.32-1.fc14

Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...

Fedora 14 : moin-1.9.3-4.fc14 (2011-2156)

Thu Feb 24 2011 Ville-Pekka Vainio - 1.9.3-4 - Fixes CVE-2011-1058 rhbz679523 - Tue Feb 8 2011 Fedora Release Engineering - 1.9.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora15MassRebuild Note that Tenable Network Security has extracted the preceding description block directly from the...

[BSA-025] Security Update for openafs

Russ Allbery uploaded new packages for openafs which fixed the following security problems: CVE-2011-0430 DSA-2168-1 Andrew Deason discovered that a double free in the Rx server process could lead to denial of service or the execution of arbitrary code. This affects the server components of the...

CentOS Update for kernel CESA-2010:0936 centos4 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2010:0936 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

thunderbird security update

1.5.0.12-34.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js Replaced clean.gif in tarball 1.5.0.12-34 - Added fixes from 1.9.1.16...

RedHat Update for kernel RHSA-2010:0936-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0936-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

MDVA-2009:193 : php

This is a bugfix and maintenance release for php that upgrades php to 5.3.1RC3 and fixes some bugs: - fix 54993 - With latest php-5.3.xx, it's not needed to build a separate binary for FastCGI SAPI support, this is always enabled in the php-cgi binary. This obsoletes the php-fcgi package and also...

Mandriva Linux Security Advisory : php (MDVSA-2009:302)

Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...

Fedora 11 : automake16-1.6.3-18.fc11.1 (2010-1148)

Tue Feb 16 2010 Karsten Hopp 1.6.3-18.1 - fix CVE-2009-4029 - Fri Jul 31 2009 Karsten Hopp 1.6.3-18 - rebuild - Thu Jul 30 2009 Karsten Hopp 1.6.3-17 - fix build problem - Fri Jul 24 2009 Fedora Release Engineering - 1.6.3-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note...

Fedora 11 : automake15-1.5-29.fc11.1 (2010-1174)

Tue Feb 16 2010 Karsten Hopp 1.5-29.1 - update CVE-2009-4029 patch - Tue Feb 9 2010 Karsten Hopp 1.5-29 - add disttag - Tue Feb 9 2010 Karsten Hopp 1.5-28 - add fix for CVE-2009-4029 - add buildrequirement flex - Fri Jul 24 2009 Fedora Release Engineering - 1.5-27 - Rebuilt for...

Fedora 11 : GraphicsMagick-1.3.7-4.fc11 (2010-0001)

Mon Dec 28 2009 Rex Dieter - 1.3.7-4 - CVE-2009-1882 503017 - Fri Dec 4 2009 Stepan Kasal - 1.3.7-3 - rebuild against perl 5.10.1 - Fri Nov 6 2009 Rex Dieter - 1.3.7-2 - cleanup/uncruftify .spec - Thu Sep 17 2009 Rex Dieter - 1.3.7-1 - GraphicsMagick-1.3.7 - Mon Aug 3 2009 Ville Skytta - 1.3.6-2...

Fedora 11 : automake17-1.7.9-13.fc11.1 (2010-3569)

Tue Feb 16 2010 Karsten Hopp 1.7.9-13.1 - fix CVE-2009-4029 - Fri Jul 24 2009 Fedora Release Engineering - 1.7.9-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

firefox security update

firefox: 3.0.16-1.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.16-1 - Update to 3.0.16 xulrunner: 1.9.0.16-2.0.1.el5...

Fedora 10 : jasper-1.900.1-13.fc10 (2009-10737)

Tue Oct 13 2009 Rex Dieter - 1.900.1-13 - CVE-2008-3520 jasper: multiple integer overflows in jasalloc calls 461476 - CVE-2008-3522 jasper: possible buffer overflow in jasstreamprintf 461478 - Fri Jul 24 2009 Fedora Release Engineering - 1.900.1-12 - Rebuilt for...

gdm security and bug fix update

1:2.16.0-56 - Resolves: 239818 181302 - Fix tcp wrappers detection on 64-bit 1:2.16.0-55 Resolves: 196054 - Fix docs subpackage Requires 1:2.16.0-53 Resolves: 196054 - Add docs subpackage 1:2.16.0-52 Resolves: 226931 - Add teIN translations 1:2.16.0-51 Resolves: 441971 - Make ctrl-alt-backspace a...