6618 matches found
[SECURITY] [DSA 1871-2] New wordpress packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1871-2 [email protected] http://www.debian.org/security/ Steffen Joeris August 27, 2009 http://www.debian.org/security/faq -...
DSA-1871-2 wordpress - regression fix
Bulletin has no description...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : gnutls12, gnutls13, gnutls26 vulnerabilities (USN-809-1)
Moxie Marlinspike and Dan Kaminsky independently discovered that GnuTLS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : apache2 regression (USN-802-2)
USN-802-1 fixed vulnerabilities in Apache. The upstream fix for CVE-2009-1891 introduced a regression that would cause Apache children to occasionally segfault when moddeflate is used. This update fixes the problem. We apologize for the inconvenience. It was discovered that modproxyhttp did not...
USN-809-1: GnuTLS vulnerabilities
Moxie Marlinspike and Dan Kaminsky independently discovered that GnuTLS did not properly handle certificates with NULL characters in the certificate name. An attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...
USN-802-2: Apache regression
USN-802-1 fixed vulnerabilities in Apache. The upstream fix for CVE-2009-1891 introduced a regression that would cause Apache children to occasionally segfault when moddeflate is used. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered...
CVE-2009-1721
The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...
[SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1834-2 [email protected] http://www.debian.org/security/ Stefan Fritsch July 31, 2009 http://www.debian.org/security/faq -...
openSUSE Security Update : gnutls (gnutls-605)
The previous security fix for gnutls CVE-2008-4989 introduced a regression in the X.509 validation code for self-signed certificates. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
openSUSE Security Update : gnutls (gnutls-605)
The previous security fix for gnutls CVE-2008-4989 introduced a regression in the X.509 validation code for self-signed certificates. This update fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
[SECURITY] [DSA 1829-2] New sork-passwd-h3 packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1829-2 [email protected] http://www.debian.org/security/ Steffen Joeris July 14, 2009 http://www.debian.org/security/faq -...
CVE-2009-2297
Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...
thunderbird security update
1.5.0.12-23.0.1.el4 - Add thunderbird-oracle-default-prefs.js for errata rebuild and remove thunderbird-redhat-default-prefs.js - Replaced clean.gif in tarball 1.5.0.12-23 - Added fix for mozbz495057 1.5.0.12-22 - Added build fix 1.5.0.12-21 - Update patchset to fix regression as per 1.9.0.11...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : quagga regression (USN-775-2)
USN-775-1 fixed vulnerabilities in Quagga. The preventative fixes introduced in Quagga prior to Ubuntu 9.04 could result in BGP service failures. This update fixes the problem. We apologize for the inconvenience. It was discovered that the BGP service in Quagga did not correctly handle certain AS...
CVE-2009-1904
The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173 allows context-dependent attackers to cause a denial of service application crash via a string argument that represents a large number, as demonstrated by an attempted conversion to the Float data type...
USN-775-2: Quagga regression
USN-775-1 fixed vulnerabilities in Quagga. The preventative fixes introduced in Quagga prior to Ubuntu 9.04 could result in BGP service failures. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the BGP service in Quagga did not...
Ubuntu USN-765-1 (xulrunner-1.9)
The remote host is missing an update to xulrunner-1.9 announced via advisory USN-765-1. OpenVAS Vulnerability Test $Id: ubuntu7651.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7651.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-765-1 xulrunner-1.9 Author...
Ubuntu: Security Advisory (USN-765-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1809-1 : linux-2.6 - denial of service, privilege escalation
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1630 Frank Filz discovered that local users may be able to execute files...