krb5 security update

CentOS Errata and Security Advisory CESA-2009:0409 Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system...

Linux Kernel 'NFS filename'本地拒绝服务漏洞

BUGTRAQ ID: 34390 CNCAN ID：CNCAN-2009040701 Linux是一款开放源代码的操作系统。 在结构nfsserver初始化过程中没有正确限制NFS文件名，可导致NFS客户端崩溃。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux Desktop version 4 Linux kernel 2.6.21 4 Linux kernel 2.6.21 .7 Linux kernel...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RedHat Security Advisory RHSA-2009:0397

The remote host is missing updates announced in advisory RHSA-2009:0397. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

RedHat Security Advisory RHSA-2009:0397

The remote host is missing updates announced in advisory RHSA-2009:0397. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A...

pam_ssh用户名枚举漏洞

BUGTRAQ ID: 34333 CNCAN ID：CNCAN-2009040207 pamssh是一款结合SSH密钥和SSH客户端使用的PAM模块，允许使用SSH密钥为UNIX提供登录服务。 pamssh在处理基于SSH KEY的用户验证时存在问题，远程攻击者可以利用漏洞获得敏感用户信息。 当PAM使用USE=ssh编译时，攻击者连接pam+ssh启用的服务器时，如果用户不存在SSH客户端会显示"Password:"，而如果是存在用户，则显示"SSH passphrase:"，攻击者借此可获得敏感用户信息。 RedHat Fedora 9 RedHat Fedora 10...

Ghostscript CCITTFax Decoding Filter - Denial of Service

Ghostscript CCITTFax Decoding Filter - Denial of Service Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has no...

Ghostscript 'CCITTFax' Decoding Filter Denial of Service Vulnerability

No description provided by source. Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed...

Ghostscript 'CCITTFax' Decoding Filter - Denial of Service

Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed. Vulnerable: Ubuntu Ubuntu Linux 8.10...

RedHat Security Advisory RHSA-2009:0295

The remote host is missing updates announced in advisory RHSA-2009:0295. The Simple Network Management Protocol SNMP is a protocol used for network management. It was discovered that the snmpd daemon did not use TCP wrappers correctly, causing network hosts access restrictions defined in...

RedHat Security Advisory RHSA-2009:0336

The remote host is missing updates announced in advisory RHSA-2009:0336. GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop,...

RedHat Security Advisory RHSA-2009:0373

The remote host is missing updates announced in advisory RHSA-2009:0373. SystemTap is an instrumentation infrastructure for systems running version 2.6 of the Linux kernel. SystemTap scripts can collect system operations data, greatly simplifying information gathering. Collected data can then...

RedHat Security Advisory RHSA-2009:0258

The remote host is missing updates announced in advisory RHSA-2009:0258. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...

RedHat Security Advisory RHSA-2009:0376

The remote host is missing updates announced in advisory RHSA-2009:0376. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple input validation flaws were discovered in the JBIG2 compressed images decoder used by Adobe Reader. A malicious PDF file could...

RedHat Security Advisory RHSA-2009:0360

The remote host is missing updates announced in advisory RHSA-2009:0360. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages address the following security issues: a memory leak exists in keyctl handling. A local, unprivileged user could...

RedHat Security Advisory RHSA-2009:0361

The remote host is missing updates announced in advisory RHSA-2009:0361. NetworkManager is a network link manager that attempts to keep a wired or wireless network connection active at all times. An information disclosure flaw was found in NetworkManager's D-Bus interface. A local attacker could...

RedHat Security Advisory RHSA-2009:0362

The remote host is missing updates announced in advisory RHSA-2009:0362. NetworkManager is a network link manager that attempts to keep a wired or wireless network connection active at all times. An information disclosure flaw was found in NetworkManager's D-Bus interface. A local attacker could...

RedHat Security Advisory RHSA-2009:0258

The remote host is missing updates announced in advisory RHSA-2009:0258. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...