6618 matches found
kernel security and bug fix update
2.6.9-78.0.8.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with...
USN-663-1: system-tools-backends regression
It was discovered that passwords changed or new users created via the "Users and Groups" tool were created with 3DES hashing. This reduced the security of stored user passwords, and was a regression from the correct MD5 hashing. This update fixes the problem; future password changes will correct...
CVE-2008-4864
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different...
USN-645-3: Firefox and xulrunner regression
USN-645-1 fixed vulnerabilities in Firefox and xulrunner. The upstream patches introduced a regression in the saved password handling. While password data was not lost, if a user had saved any passwords with non-ASCII characters, Firefox could not access the password database. This update fixes t...
[SECURITY] [DSA-1619-2] New python-dns package fixes regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1619-2 [email protected] http://www.debian.org/security/ Devin Carraway September 22, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1634-2] New wordnet packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1634-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 20, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1597-2] New mt-daapd package fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1597-2] New mt-daapd package fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...
thunderbird security update
1.5.0.12-14.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-13 - Respun for mozilla bugs 439035,439735,440308 1.5.0.12-12 - Update patchset to fix regression as per 1.8.1.15...
[SECURITY] [DSA 1540-3] New lighttpd packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1540-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 23, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1569-3] New cacti packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1569-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 15, 2008 http://www.debian.org/security/faq -...
firefox security update
1.5.0.12-0.19.0.1.el4 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-0.19.el4 - Respun for mozilla bugs 439035,439735,440308 1.5.0.12-0.18.el4 - Update patchset to fix regression as per 1.8.1.15...
Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : samba regression (USN-617-2)
USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. We apologize for the inconvenience. Samba developers...
USN-617-2: Samba regression
USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...
Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)
USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...
USN-612-10: OpenVPN regression
USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...
[SECURITY] [DSA 1553-2] New ikiwiki packages fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1553-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 01, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1569-2 (cacti)
The remote host is missing an update to cacti announced via advisory DSA 1569-2. OpenVAS Vulnerability Test $Id: deb15692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1569-2 cacti Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Design/Logic Flaw
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...