Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

USN-612-10: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

[SECURITY] [DSA 1553-2] New ikiwiki packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1553-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 01, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1569-2 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 1569-2. OpenVAS Vulnerability Test $Id: deb15692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1569-2 cacti Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Design/Logic Flaw

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-6)

USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...

USN-612-6: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...

kernel security and bug fix update

2.6.9-67.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

[SECURITY] [DSA 1569-2] New cacti packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1569-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 06, 2008 http://www.debian.org/security/faq -...

thunderbird security update

1.5.0.12-11.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-11 - Update patchset to fix regression as per 1.8.1.14...

firefox security update

1.5.0.12-15.el51.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-15 - Update patchset to fix regressions as per 1.8.1.14...

squid security update

2.6.STABLE6-5.el51.3 - fix for 439801 - regression introduced in fix for CVE-2007-6239 - Resolves: 439992...

squid: regression in SQUID-2007:2 / CVE-2007-6239

The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...

Ubuntu 6.06 LTS : mysql-dfsg-5.0 regression (USN-588-2)

USN-588-1 fixed vulnerabilities in MySQL. In fixing CVE-2007-2692 for Ubuntu 6.06, additional improvements were made to make privilege checks more restictive. As a result, an upstream bug was exposed which could cause operations on tables or views in a different database to fail. This update fixe...

thunderbird security update

1.5.0.12-10.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-10 - Regression fixes 1.5.0.12-9 - Update to latest snapshot of Mozilla 1.8.0 branch - Add patches for backported fixes from 1.8.1.13...

Debian Security Advisory DSA 1506-2 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 1506-2. OpenVAS Vulnerability Test $Id: deb15062.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1506-2 iceape Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1506-2] New iceape packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1506-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 20, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1485-2] New icedove packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1485-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 17, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))

The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge7 announced via advisory DSA 1503-2. OpenVAS Vulnerability Test $Id: deb15032.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-2 kernel-source-2.4.27 2.4.27-10sarge7 Authors:...

[SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1503-2 [email protected] http://www.debian.org/security/ dann frazier March 6, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...