6634 matches found
Sql injection
gnome-power-manager 2.27.92 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a relate...
CVE-2009-4997
gnome-power-manager 2.27.92 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a relate...
CVE-2009-4997
gnome-power-manager 2.27.92 does not properly implement the lockonsuspend and lockonhibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a relate...
Ubuntu Update for linux regression USN-974-2
Ubuntu Update for Linux kernel vulnerabilities USN-974-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9742.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for linux regression USN-974-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.ne...
Ubuntu 8.04 LTS : linux regression (USN-974-2)
USN-974-1 fixed vulnerabilities in the Linux kernel. The fixes for CVE-2010-2240 caused failures for Xen hosts. This update fixes the problem. We apologize for the inconvenience. Gael Delalleu, Rafal Wojtczuk, and Brad Spengler discovered that the memory manager did not properly handle when...
FreeBSD : firefox -- Dangling pointer crash regression from plugin parameter array fix (c2eac2b5-9a7d-11df-8e32-000f20797ede)
The Mozilla Project reports : MFSA 2010-48 Dangling pointer crash regression from plugin parameter array fix %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...
openSUSE Security Update : kernel (openSUSE-SU-2010:0481-1)
The openSUSE 11.1 Kernel was updated fixing a single regression : The previous update contained an erronous fix which broke the IPv4 GRE tunneling module. This regression is fixed by this update. No other change is contained in this update, if you are not using the module, this update is not...
Ubuntu Update for likewise-open regression USN-964-2
Ubuntu Update for Linux kernel vulnerabilities USN-964-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9642.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for likewise-open regression USN-964-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
MDVA-2010:018 : fetchmail
A regression was discovered in fetchmail 6.3.12 The multiline SMTP error fix in release 6.3.12 caused fetchmail to lose message codes 400..599 and treat all of these as temporary error. This would cause messages to be left on the server even if softbounce was turned off. Reported by Thomas Jarosc...
MDVA-2009:258 : webkit
MDVA-2009:252 introduced a regression with the newer version of the webkit package, which made the Mandriva Control Center crash. This update reverts the webkit package to the previous version. Also this update reintroduces the issue fixed by MDVA-2009-252. %NASLMINLEVEL 70300 @DEPRECATED@ This...
MDVA-2009:261 : kdepim4
In Mandriva 2010.0, because of a regression, the KTimetracker menu was missing many options, which made it unusable. Also in Mandriva 2010.0, when using Knotes inside Kontact the note title was left-cutted when using a long title. This update fixes these issues. %NASLMINLEVEL 70300 @DEPRECATED@...
MDVA-2010:023 : kde4-style-iaora
The last iaora update introduced a litlle regression in some IaOra color schemes, like Iaora-Gray, this new package is correcting this. Also in iaora, the application's name in the titlebar wasn't correctly centered. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associat...
Ubuntu 9.04 / 9.10 : firefox, firefox-3.0, xulrunner-1.9.2 vulnerability (USN-930-6)
USN-957-1 fixed vulnerabilities in Firefox and Xulrunner. Daniel Holbert discovered that the fix for CVE-2010-1214 introduced a regression which did not properly initialize a plugin pointer. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browse...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix a regression. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.8-i686-1.txz: Upgraded. This fixes a regression in Firefox 3.6.7. For more information, see:...
Mozilla Foundation Security Advisory 2010-48
Mozilla Foundation Security Advisory 2010-48 Title: Dangling pointer crash regression from plugin parameter array fix Impact: Critical Announced: July 20, 2010 Reporter: Daniel Holbert Products: Firefox 3.6.7 Fixed in: Firefox 3.6.8 Description Mozilla developer Daniel Holbert reported that the f...
Dangling pointer crash regression from plugin parameter array fix — Mozilla
Mozilla developer Daniel Holbert reported that the fix to the plugin parameter array crash that was fixed in Firefox 3.6.7 caused a crash showing signs of memory corruption. In certain circumstances, properties in the plugin instance's parameter array could be freed prematurely leaving a dangling...
Ubuntu Update for firefox regression USN-930-3
Ubuntu Update for Linux kernel vulnerabilities USN-930-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN9303.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for firefox regression USN-930-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu 8.04 LTS : firefox regression (USN-930-3)
USN-930-1 fixed vulnerabilities in Firefox. Due to a software packaging problem, the Firefox 3.6 update could not be installed when the firefox-2 package was also installed. This update fixes the problem and updates apturl for the change. If was discovered that Firefox could be made to access fre...
perl: File:: Path rmtree race condition (CVE-2004-0452) reintroduced after upstream rebase to 5.8.8-1
Race condition in the rmtree function in File::Path 1.08 lib/File/Path.pm in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. ...
perl: File:: Path rmtree race condition (CVE-2005-0448) reintroduced after upstream rebase to 5.8.8-1
Race condition in the rmtree function in File::Path 1.08 and 2.07 lib/File/Path.pm in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error...