DSA-809-3 squid - assertion error

Bulletin has no description...

Fedora Core 3 : kernel-2.6.12-1.1380_FC3 (2005-1007)

This update fixes the outstanding kernel security issues for FC3, and fixes a number of regressions in the previous update kernel. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Low: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues and contain several bug fixes are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system...

[SECURITY] [DSA 809-2] New squid packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-2 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 816-1] New XFree86 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 816-1 [email protected] http://www.debian.org/security/ Martin Schulze September 19th, 2005 http://www.debian.org/security/faq -...

DSA-816-1 xfree86 - integer overflow

Bulletin has no description...

Fedora Core 4 : xorg-x11-6.8.2-37.FC4.48.1 (2005-894)

Updated xorg-x11 packages that fix several integer overflows, various bugs, are now available for Fedora Core 4. X.Org X11 is an implementation of the X Window System, which provides the core functionality for the Linux graphical desktop. Several integer overflow bugs were found in the way X.Org...

Debian DSA-779-2 : mozilla-firefox - several vulnerabilities

We experienced that the update for Mozilla Firefox from DSA 779-1 unfortunately was a regression in several cases. Since the usual praxis of backporting apparently does not work, this update is basically version 1.0.6 with the version number rolled back, and hence still named 1.0.4-. For...

DSA-779-2 mozilla-firefox - several

Bulletin has no description...

DSA-779-1 mozilla-firefox - several

Bulletin has no description...

[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 761-2 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...

Fedora Core 3 : perl-5.8.5-14.FC3 (2005-600)

Paul Szabo discovered another vulnerability in the File::Path::rmtree function of perl, the popular scripting language. When a process is deleting a directory tree, a different user could exploit a race condition to create setuid binaries in this directory tree, provided that he already had write...

security flaw

A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by...

Debian DSA-698-1 : mc - buffer overflow

An unfixed buffer overflow has been discovered by Andrew V. Samoilov in mc, the midnight commander, a file browser and manager. This update also fixes a regression from DSA 497. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

USN-95-1: Linux kernel vulnerabilities

A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...

[SECURITY] [DSA 662-2] New squirrelmail package fixes regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-2 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0090

CVE-2005-0090 relates to a missing access check regression in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch. The issue allows a local unprivileged user to cause a denial of service (crash) on hugemem configurations. The RHSA-2005:092 advisory documents the kernel security update that ...

security flaw

A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service crash...

Fedora Core 2 : postgresql-7.4.7-1.FC2.2 (2005-125)

Mon Feb 07 2005 Tom Lane 7.4.7-1.FC2.2 - Put regression tests under /usr/lib64 on 64-bit archs, since .so files are not architecture-independent. - Mon Feb 07 2005 Tom Lane 7.4.7-1.FC2.1 - Update to PostgreSQL 7.4.7 fixes CVE-2005-0227 and other issues. - Update to PyGreSQL 3.6.1. - Add...

Fedora Core 3 : postgresql-7.4.7-1.FC3.2 (2005-124)

Mon Feb 07 2005 Tom Lane 7.4.7-1.FC3.2 - Put regression tests under /usr/lib64 on 64-bit archs, since .so files are not architecture-independent. - Mon Feb 07 2005 Tom Lane 7.4.7-1.FC3.1 - Update to PostgreSQL 7.4.7 fixes CVE-2005-0227 and other issues. - Update to PyGreSQL 3.6.1. - Add...