php53 security, bug fix and enhancement update

5.3.3-21 - add security fix for CVE-2013-4248 5.3.3-20 - add security fix for CVE-2013-4113 5.3.3-19 - add upstream reproducer for errorhandler 951075 5.3.3-18 - add security fixes for CVE-2006-7243 5.3.3-17 - reorder security patches - add security fixes for CVE-2012-2688, CVE-2012-0831,...

SuSE 11.2 / 11.3 Security Update : Apache2 (SAT Patch Numbers 8137 / 8138)

This collective update for Apache provides the following fixes : - Make sure that input that has already arrived on the socket is not discarded during a non-blocking read read2 returns 0 and errno is set to -EAGAIN. bnc815621 - Close the connection just before an attempted re-negotiation if data...

libtiff 3.9.5 - Integer Overflow

libtiff 3.9.5 - Integer Overflow / Exploit Title: libtiff include include include "tiffio.h" int tiffintegeroverflowtest TIFF tif = TIFFOpen"/home/x90c/samplespp.tif", "r"; int samples = 0; / for instance, TIFFGetField library function will called with malicious samplesperpixel field value...

FreeBSD : apache24 -- several vulnerabilities (ca4d63fb-f15c-11e2-b183-20cf30e32f6d)

Apache HTTP SERVER PROJECT reports : moddav: Sending a MERGE request against a URI handled by moddavsvn with the source href sent as part of the request body as XML pointing to a URI that is not configured for DAV will trigger a segfault. modsessiondbd: Make sure that dirty flag is respected when...

subversion -- remotely triggerable "Assertion failed" DoS vulnerability or read overflow.

Subversion Project reports: Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If assertions are disabled it will trigger a read overflow which may cause a SEGFAULT or equivalent or undefined behavior...

Fedora 17 : php-5.4.16-1.fc17 (2013-10233)

06 Jun 2013, PHP 5.4.16 Core : - Fixed bug 64879 Heap based buffer overflow in quotedprintableencode, CVE-2013-2110. Stas - Fixed bug 64853 Use of no longer available ini directives causes crash on TS build. Anatol - Fixed bug 64729 compilation failure on x32. Gustavo - Fixed bug 64720 SegFault o...

Oracle Linux 5 : openldap (ELSA-2010-0542)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0542 advisory. 2.3.43-12.1 - fixed segfault issues in modrdn 606375 - added patch handling null char in TLS to compat package 606375, patch backported by Jan Vcelak...

Oracle Linux 6 : openssh (ELSA-2013-0519)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0519 advisory. 5.3p1-84.1 - Add a 'netcat mode' ssh -W 860809 5.3p1-83 - fix the required authentications patch 869903 5.3p1-82 - check return value of PK11Authenticate in...

apache24 -- several vulnerabilities

Apache HTTP SERVER PROJECT reports: moddav: Sending a MERGE request against a URI handled by moddavsvn with the source href sent as part of the request body as XML pointing to a URI that is not configured for DAV will trigger a segfault. modsessiondbd: Make sure that dirty flag is respected when...

FreeBSD : apache22 -- several vulnerabilities (f3d24aee-e5ad-11e2-b183-20cf30e32f6d)

Apache HTTP SERVER PROJECT reports : The modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a...

apache22 -- several vulnerabilities

Apache HTTP SERVER PROJECT reports: The modrewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via an HTTP request containing an escape sequence for a...

Apache Subversion 'mod_dav_svn' Module Multiple DoS Vulnerabilities

Apache Subversion is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Subversion 'mod_dav_svn' log REPORT Request DoS Vulnerability

Apache Subversion is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY][CVE-2013-2765][ModSecurity] Remote Null Pointer Dereference

CVE Number: CVE-2013-2765 / ModSecurity Remote Null Pointer Dereference When ModSecurity receives a request body with a size bigger than the value set by the "SecRequestBodyInMemoryLimit" and with a "Content-Type" that has no request body processor mapped to it, ModSecurity will systematically...

Fedora 17 : gypsy-0.9-1.fc17 (2013-8705)

New upstream 0.9 release - add patch to fix FTBSF due to deprecated gtypeinit - Fix CVE-2011-0523 - read arbitrary files as the root user on behalf of a regular user - Fix CVE-2011-0524 - buffer overflow in nmea device input handling code no longer in existence - aarch64 support - Fix segfault...

Fedora 19 : gypsy-0.9-1.fc19 (2013-8659)

New upstream 0.9 release - add patch to fix FTBSF due to deprecated gtypeinit - Fix CVE-2011-0523 - read arbitrary files as the root user on behalf of a regular user - Fix CVE-2011-0524 - buffer overflow in nmea device input handling code no longer in existence - aarch64 support - Fix segfault...

Memcached < 1.4.17 Remote DoS Vulnerability

Memcached is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:memcached:memcached"...

Apache Httpd < 2.4.6 : mod_dav crash

Sending a MERGE request against a URI handled by moddavsvn with the source href sent as part of the request body as XML pointing to a URI that is not configured for DAV will trigger a segfault...

sssd security, bug fix and enhancement update

1.9.2-82 - Resolves: rhbz888614 - Failure in memberof can lead to failed database update 1.9.2-81 - Resolves: rhbz903078 - TOCTOU race conditions by copying and removing directory trees 1.9.2-80 - Resolves: rhbz903078 - Out-of-bounds read flaws in autofs and ssh services responders 1.9.2-79 -...

hplip security, bug fix and enhancement update

3.12.4-4 - Applied patch to fix CVE-2013-0200, temporary file vulnerability bug 902163. - Fixed hpijs-marker-supply patch. 3.12.4-3 - Make 'hp-check' check for hpaio set-up correctly bug 683007. 3.12.4-2 - Added more fixes from Fedora bug 731900. 3.12.4-1 - Re-based to 3.12.4 with fixes from Fedo...