Debian DSA-779-2 : mozilla-firefox - several vulnerabilities

We experienced that the update for Mozilla Firefox from DSA 779-1 unfortunately was a regression in several cases. Since the usual praxis of backporting apparently does not work, this update is basically version 1.0.6 with the version number rolled back, and hence still named 1.0.4-. For...

DSA-779-1 mozilla-firefox - several

Bulletin has no description...

DSA-779-2 mozilla-firefox - several

Bulletin has no description...

[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 761-2 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...

Fedora Core 3 : perl-5.8.5-14.FC3 (2005-600)

Paul Szabo discovered another vulnerability in the File::Path::rmtree function of perl, the popular scripting language. When a process is deleting a directory tree, a different user could exploit a race condition to create setuid binaries in this directory tree, provided that he already had write...

security flaw

A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site, aka the frame injection spoofing vulnerability, a re-introduction of a vulnerability that was originally identified and addressed by...

Debian DSA-698-1 : mc - buffer overflow

An unfixed buffer overflow has been discovered by Andrew V. Samoilov in mc, the midnight commander, a file browser and manager. This update also fixes a regression from DSA 497. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

USN-95-1: Linux kernel vulnerabilities

A remote Denial of Service vulnerability was discovered in the Netfilter IP packet handler. This allowed a remote attacker to crash the machine by sending specially crafted IP packet fragments. CAN-2005-0209 The Netfilter code also contained a memory leak. Certain locally generated packet fragmen...

[SECURITY] [DSA 662-2] New squirrelmail package fixes regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-2 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0090

CVE-2005-0090 relates to a missing access check regression in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch. The issue allows a local unprivileged user to cause a denial of service (crash) on hugemem configurations. The RHSA-2005:092 advisory documents the kernel security update that ...

security flaw

A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service crash...

Fedora Core 2 : postgresql-7.4.7-1.FC2.2 (2005-125)

Mon Feb 07 2005 Tom Lane 7.4.7-1.FC2.2 - Put regression tests under /usr/lib64 on 64-bit archs, since .so files are not architecture-independent. - Mon Feb 07 2005 Tom Lane 7.4.7-1.FC2.1 - Update to PostgreSQL 7.4.7 fixes CVE-2005-0227 and other issues. - Update to PyGreSQL 3.6.1. - Add...

Fedora Core 3 : postgresql-7.4.7-1.FC3.2 (2005-124)

Mon Feb 07 2005 Tom Lane 7.4.7-1.FC3.2 - Put regression tests under /usr/lib64 on 64-bit archs, since .so files are not architecture-independent. - Mon Feb 07 2005 Tom Lane 7.4.7-1.FC3.1 - Update to PostgreSQL 7.4.7 fixes CVE-2005-0227 and other issues. - Update to PyGreSQL 3.6.1. - Add...

Fedora Core 3 : enscript-1.6.1-28.0.3 (2005-092)

This update fixes a regression introduced by the last update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

DSA-662-1 squirrelmail - several

Bulletin has no description...

proftpd IP address access control list breakage

Jindrich Makovicka reports a regression in proftpd's handling of IP address access control lists IP ACLs. Due to this regression, some IP ACLs are treated as allow all''...

R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0012 Lotus Notes/Domino R6-beta PROTOS LDAP Deni...

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...

Re-release: Microsoft Security Bulletin MS00-086

============================================================ Issue: Regression error in IIS 5.0 patch re-exposes previous vulnerability. Date: November 30, 2000 Affected Software: IIS 5.0 Impact: Execute system commands on server Bulletin ID: MS00-086 Bulletin:...

Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

More info at https://symfony.com/blog/cve-2026-48805-sandbox-state-regression-in-deprecated-internal-wrappers-in-src-resources-core-php...