libguestfs security, bug fix, and enhancement update

1.7.17-17 - Remove dependency on gfs2-utils. resolves: rhbz695138 1.7.17-16 - Canonicalize /dev/vd paths in virt-inspector code. resolves: rhbz691724 1.7.17-15 - Fix trace segfault for non-daemon functions. resolves: rhbz676788 1.7.17-14 - Add explicit BuildRequires for latest augeas. RHBZ677616...

sssd security, bug fix, and enhancement update

1.5.1-34 - Resolves: rhbz701700 - sssd client libraries use select but should use - poll instead 1.5.1-33 - Related: rhbz693818 - Automatic TGT renewal overwrites cached password - Fix segfault in TGT renewal 1.5.1-32 - Related: rhbz693818 - Automatic TGT renewal overwrites cached password - Fix...

Fedora 13 : maniadrive-1.2-27.fc13 / php-5.3.6-1.fc13 / php-eaccelerator-0.9.6.1-6.fc13 (2011-3666)

Security Enhancements and Fixes in PHP 5.3.6 : - Fixed bug 54247 format-string vulnerability on Phar. CVE-2011-1153 - Fixed bug 54193 Integer overflow in shmopread. CVE-2011-1092 - Fixed bug 54055 buffer overrun with high values for precision ini setting. - Fixed bug 54002 crash on crafted tag in...

FreeBSD : php -- ZipArchive segfault with FL_UNCHANGED on empty archive (fe853666-56ce-11e0-9668-001fd0d616cf)

US-CERT/NIST reports : The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service application crash via an empty ZIP archive that is...

Fedora 15 : maniadrive-1.2-29.fc15 / php-5.3.6-1.fc15 / php-eaccelerator-0.9.6.1-6.fc15 (2011-3614)

Security Enhancements and Fixes in PHP 5.3.6 : - Enforce security in the fastcgi protocol parsing with fpm SAPI. - Fixed bug 54247 format-string vulnerability on Phar. CVE-2011-1153 - Fixed bug 54193 Integer overflow in shmopread. CVE-2011-1092 - Fixed bug 54055 buffer overrun with high values fo...

php -- ZipArchive segfault with FL_UNCHANGED on empty archive

US-CERT/NIST reports: The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service application crash via an empty ZIP archive that is...

GNU libc/regcomp(3) Multiple Vulnerabilities

Exploit for linux platform in category dos / poc -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GNU libc/regcomp3 Multiple Vulnerabilities Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 01.10.2010 - - Pub.: 07.01.2011 CERT: VU912279 CVE: CVE-2010-4051...

Fedora 13 : maniadrive-1.2-23.fc13 / php-5.3.4-1.fc13.1 / php-eaccelerator-0.9.6.1-3.fc13 (2010-19011)

Security Enhancements and Fixes in PHP 5.3.4 : - Fixed crash in zip extract method possible CWE-170. - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed a possible double free in imap extension Identified by Mateusz Kocielski. CVE-2010-4150. - Fixed NULL...

GNU InetUtils 1.8-1 - FTP Client Heap Overflow

GNU InetUtils 1.8-1 - FTP Client Heap Overflow -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: GNU inetutils 1.8-1 ftp client Heap Overflow Date: Dec 07 2010 Author: Rew Software Link: http://ftp.gnu.org/gnu/inetutils/inetutils-1.8.tar.gz Version: 1.8-1 Tested on: Arch Linux up to date CVE: ...

Mandriva Update for perl-URPM MDVA-2010:214 (perl-URPM)

Check for the Version of perl-URPM OpenVAS Vulnerability Test Mandriva Update for perl-URPM MDVA-2010:214 perl-URPM Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:214 : perl-URPM

This update fixes several major issues in perl-URPM: - it fixes a crash in rpmdrake 40309, 54521 - it fixes a segfault in rpmdrake & urpmi on 32bit machines 61144 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

openSUSE Security Update : perl (openSUSE-SU-2010:0519-1)

perl Safe.pm module was affected by two problems where attackers could break out of such a safed execution. CVE-2010-1447 , CVE-2010-1168 This update fixes this problem. Also the following bugs were fixed : - fix tell cornercase bnc596167 - fix regex memory leak bnc557636 - also run h2ph on...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for net-snmp MDVA-2010:184 (net-snmp)

Check for the Version of net-snmp OpenVAS Vulnerability Test Mandriva Update for net-snmp MDVA-2010:184 net-snmp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:184 : net-snmp

It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

openldap security update

2.3.43-12.1 - fixed segfault issues in modrdn 606375 - added patch handling null char in TLS to compat package 606375, patch backported by Jan Vcelak...

openldap security update

2.2.13-12.3 - fixed modrdn segfault issues 606399 - fixed handling of null character when using TLS 606399, patches for both main and compat library backported by Jan Vcelak...

Fedora 12 : gv-3.7.1-1.fc12 (2010-10660)

Update to 3.7.1 to fix CVE-2010-2055 and CVE-2010-2056 - Disable international support to avoid segfault on exit Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 13 : gv-3.7.1-1.fc13 (2010-10642)

Update to 3.7.1 to fix CVE-2010-2055 and CVE-2010-2056 - Disable international support to avoid segfault on exit Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 12 : znc-0.090-2.fc12 (2010-10078)

Bug 603915 - znc: NULL pointer dereference flaw leads to segfault under certain conditions A Debian bug report 1 noted that ZNC would segfault under certain conditions, such as clicking 'traffic' in the webadmin pages or issuing the traffic command on the /znc shell. This has been corrected...