[SECURITY] [DSA 2036-1] New jasper packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2036-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 17, 2010 http://www.debian.org/security/faq -...

Ubuntu Update for nss regression USN-927-2

Ubuntu Update for Linux kernel vulnerabilities USN-927-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9272.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for nss regression USN-927-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for thunderbird regression USN-927-3

Ubuntu Update for Linux kernel vulnerabilities USN-927-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN9273.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird regression USN-927-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 9.10 : nss regression (USN-927-2)

USN-927-1 fixed vulnerabilities in NSS. Upstream NSS 3.12.6 added an additional checksum verification on libnssdbm3.so, but the Ubuntu packaging did not create this checksum. As a result, Firefox could not initialize the security component when the NSS Internal FIPS PKCS 11 Module was enabled. Th...

Ubuntu 9.10 : thunderbird regression (USN-927-3)

USN-927-1 fixed vulnerabilities in NSS. Due to upstream changes in NSS 3.12.6, Thunderbird would be unable to initialize the security component and connect with SSL/TLS if the old libnss3-0d transition package was installed. This update fixes the problem. We apologize for the inconvenience. Marsh...

USN-927-2: NSS regression

USN-927-1 fixed vulnerabilities in NSS. Upstream NSS 3.12.6 added an additional checksum verification on libnssdbm3.so, but the Ubuntu packaging did not create this checksum. As a result, Firefox could not initialize the security component when the NSS Internal FIPS PKCS 11 Module was enabled. Th...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...

CVE-2010-0009

Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify 1 hashes or 2 passwords...

Mandriva Update for foomatic-db MDVA-2010:099 (foomatic-db)

Check for the Version of foomatic-db OpenVAS Vulnerability Test Mandriva Update for foomatic-db MDVA-2010:099 foomatic-db Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for foomatic-db MDVA-2010:099 (foomatic-db)

Check for the Version of foomatic-db OpenVAS Vulnerability Test Mandriva Update for foomatic-db MDVA-2010:099 foomatic-db Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

DSA-2012-1 linux-2.6 - several issues

Bulletin has no description...

Debian DSA-2003-1 : linux-2.6 - privilege escalation/denial of service

NOTE: This kernel update marks the final planned kernel security update for the 2.6.18 kernel in the Debian release 'etch'. Although security support for 'etch' officially ended on Feburary 15th, 2010, this update was already in preparation before that date. A final update that includes fixes for...

[SECURITY] [DSA 2003-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-2003-1 [email protected] http://www.debian.org/security/ Dann Frazier February 22, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2003-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

FreeBSD : bugzilla -- information leak (696053c6-0f50-11df-a628-001517351c22)

A Bugzilla Security Advisory reports : When moving a bug from one product to another, an intermediate page is displayed letting you select the groups the bug should be restricted to in the new product. However, a regression in the 3.4.x series made it ignore all groups which are not available in...

Bugzilla < 3.0.11 / 3.2.6 / 3.4.5 / 3.5.3 Multiple Vulnerabilities

Binary data 5331.prm...

Design/Logic Flaw

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities

Hi all; It has been brought to our attention that a number of security vulnerabilities have been noted in SQL-Ledger. Several of these affect earlier versions of LedgerSMB, and three hotfixes have been released for problems that continue to affect the LedgerSMB codebase. As always, we highly...

CVE-2010-0382

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...

bind: out-of-bailiwick data vulnerability due to regression while fixing CVE-2009-4022

ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...