CVE-2008-4864

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different...

USN-645-3: Firefox and xulrunner regression

USN-645-1 fixed vulnerabilities in Firefox and xulrunner. The upstream patches introduced a regression in the saved password handling. While password data was not lost, if a user had saved any passwords with non-ASCII characters, Firefox could not access the password database. This update fixes t...

[SECURITY] [DSA-1619-2] New python-dns package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1619-2 [email protected] http://www.debian.org/security/ Devin Carraway September 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1634-2] New wordnet packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1634-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 20, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1597-2] New mt-daapd package fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1597-2] New mt-daapd package fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...

thunderbird security update

1.5.0.12-14.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-13 - Respun for mozilla bugs 439035,439735,440308 1.5.0.12-12 - Update patchset to fix regression as per 1.8.1.15...

[SECURITY] [DSA 1540-3] New lighttpd packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1540-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 23, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1569-3] New cacti packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1569-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 15, 2008 http://www.debian.org/security/faq -...

firefox security update

1.5.0.12-0.19.0.1.el4 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-0.19.el4 - Respun for mozilla bugs 439035,439735,440308 1.5.0.12-0.18.el4 - Update patchset to fix regression as per 1.8.1.15...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : samba regression (USN-617-2)

USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. We apologize for the inconvenience. Samba developers...

USN-617-2: Samba regression

USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

USN-612-10: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

[SECURITY] [DSA 1553-2] New ikiwiki packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1553-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 01, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1569-2 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 1569-2. OpenVAS Vulnerability Test $Id: deb15692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1569-2 cacti Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Design/Logic Flaw

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-6)

USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...

USN-612-6: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...