llvm unsafe rpath

rpath is set to /tmp...

[slackware-security] llvm

New llvm packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/llvm-3.3-i486-3slack14.1.txz: Rebuilt. The LLVM package included binaries with an rpath pointing to the build location in /tmp...

python security, bug fix, and enhancement update

2.6.6-51 - Fixed memory leak in ssl.getpeeraltnames Resolves: rhbz1002983 2.6.6-50 - Added fix for CVE-2013-4238 Resolves: rhbz998784 2.6.6-49 - Fix shebangs in several files in python-tools subpackage Resolves: rhbz521898 2.6.6-48 - Fix sqlite3.Cursor.lastrowid under a Turkish locale. Resolves:...

ESXi 5.0 < Build 515841 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - A security bypass vulnerability exists in the e1000 driver in the Linux kernel due to improper handling of Ethernet frames that exceed the MTU. An unauthenticated, remote attacker can exploit this, via...

Oracle Linux 5 : glibc (ELSA-2011-0412)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0412 advisory. - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpat...

RHEL 5 : flash-plugin (RHSA-2009:0332)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2009:0332 advisory. The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in. Multiple input validation flaws were found in...

Scientific Linux Security Update : sblim on SL4.x, SL5.x i386/x86_64

It was discovered that certain sblim libraries had an RPATH runtime library search path set in the ELF Executable and Linking Format header. This RPATH pointed to a sub-directory of a world-writable, temporary directory. A local user could create a file with the same name as a library required by...

Scientific Linux Security Update : ibutils on SL5.x i386/x86_64 (20120221)

The ibutils packages provide InfiniBand network and path diagnostics. It was found that the ibmssh executable had an insecure relative RPATH runtime library search path set in the ELF Executable and Linking Format header. A local user able to convince another user to run ibmssh in an...

Ubuntu: Security Advisory (USN-1396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-1396-1] GNU C Library vulnerabilities

========================================================================== Ubuntu Security Notice USN-1396-1 March 09, 2012 eglibc, glibc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

PyPAM Python bindings for PAM - Double-Free Corruption

PyPAM Python bindings for PAM - Double-Free Corruption === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat...

PyPAM Python bindings for PAM - Double-Free Corruption

=== LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM = 0.5.0-12 Debian python-pam = 0.4.2-12.2 Ubuntu...

USN-1396-1: GNU C Library vulnerabilities

It was discovered that the GNU C Library did not properly handle integer overflows in the timezone handling code. An attacker could use this to possibly execute arbitrary code by convincing an application to load a maliciously constructed tzfile. CVE-2009-5029 It was discovered that the GNU C...

PyPAM 0.4.2 Double-Free Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption - - --------------------------------------------------------- Affected Versio...

RHEL 5 : ibutils (RHSA-2012:0311)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0311 advisory. - ibutils: insecure relative RPATH CVE-2008-3277 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RedHat Update for ibutils RHSA-2012:0311-03

Check for the Version of ibutils OpenVAS Vulnerability Test RedHat Update for ibutils RHSA-2012:0311-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for ibutils RHSA-2012:0311-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Security fix for the ALT Linux 8 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

Security fix for the ALT Linux 9 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

Security fix for the ALT Linux 6 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...