SLES9: Security update for Apache2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-worker apache2 apache2-prefork For more information, please visit the referenced security advisories. More details may also be found by searching for...

SLES9: Security update for jasper

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: jasper libjasper For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5038720 withi...

[SECURITY] Fedora 10 Update: deltarpm-3.4-11.fc10.1

A deltarpm contains the difference between an old and a new version of a rpm, which makes it possible to recreate the new rpm from the deltarpm and the old one. You don't have to have a copy of the old rpm, deltarpms can also work with installed rpms...

[SECURITY] Fedora 11 Update: deltarpm-3.4-17.fc11

A deltarpm contains the difference between an old and a new version of a rpm, which makes it possible to recreate the new rpm from the deltarpm and the old one. You don't have to have a copy of the old rpm, deltarpms can also work with installed rpms...

MDVA-2009:182 : gnucash

The widget to change a date field in gnucash did not react to keyboard input. This upgrades to the fixed version 2.2.7. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

openSUSE 10 Security Update : xerces-j2 (xerces-j2-6445)

The xerces-j2 package was vulnerable to various bugs while parsing XML.CVE-2009-2625 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xerces-j2-6445. The text...

openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-6365)

The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documents. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 10 : gnutls-2.4.2-5.fc10 (2009-8622)

This update fixes handling of NUL characters in certificate Common Name or subjectAltName fields especially in regards to comparsion to hostnames. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : xmp-2.7.1-1.fc11 (2009-9675)

Update to latest stable release. Multiple bugfixes and memory leak fixes. Fixes for buffer overflows in DTT and OXM loaders. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

MDVA-2009:170 : ldetect

This update fixes a very trivial issue with lspcidrake displaying warnings about some USB devices. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

SuSE9 Security Update : libgsf (YOU Patch Number 11342)

Specially crafted OLE documents enabled attackers to use a heap buffer overlow for executing code. CVE-2006-4514 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 6237)

The Linux kernel on SUSE Linux Enterprise 10 Service Pack 2 was updated to fix various security issues and several bugs. The following security issues were fixed: CVE-2009-0834: The auditsyscallentry function in the Linux kernel on the x8664 platform did not properly handle 1 a 32-bit process...

SuSE 10 Security Update : postgresql-pl (ZYPP Patch Number 6208)

Due to tight package dependencies postgresql-pl has to be updated to match the recently released postgresql packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : MySQL (YOU Patch Number 12456)

This update is provided as RPM packages that can easily be installed onto a running system by using the YaST online update module. - the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities. CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks...

SuSE9 Security Update : imap (YOU Patch Number 9885)

This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5. Due to this mistake a remote attacker can gain access to the IMAP server as arbitrary user. CVE-2005-0198 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE9 Security Update : nagios-www (YOU Patch Number 10984)

An integer overflow exists within the handling of HTTP headers by CGIs. This could lead to arbitrary code execution by remote attackers on behalf of the Nagios CGI scripts. CVE-2006-2162 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

SuSE9 Security Update : ethereal (YOU Patch Number 12225)

Various vulnerabilities have been fixed in ethereal: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11 Security Update : Kerberos (SAT Patch Number 738)

Clients sending negotiation requests with invalid flags could crash the kerberos server. CVE-2009-0845 GSS-API clients could crash when reading from an invalid address space. CVE-2009-0844 Invalid length checks could crash applications using the kerberos ASN.1 parser. CVE-2009-0847 Under certain...

SuSE9 Security Update : subdomain-parser (YOU Patch Number 11787)

The following patch supports new language features in AppArmor which have been added to improve the confinement provided to applications executing other applications will confined by AppArmor. Two new execute modifiers: 'P' and 'U' are provided and are flavors of the exisiting 'p' and 'u' modifie...

SuSE 10 Security Update : Linux Kernel (x86) (ZYPP Patch Number 5565)

This kernel security update fixes lots of bugs and some %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41534; scriptversion"1.12";...