RHEL 4 : gcc (RHSA-2007:0220)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0220 advisory. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support libraries. Jrgen Weigert discovered a...

tomcat -- multiple vulnerabilities

Apache Project reports: The Apache Tomcat team is proud to announce the immediate availability of Tomcat 4.1.36 stable. This build contains numerous library updates, A small number of bug fixes and two important security fixes...

Critical: krb5 security update

1.3.4-46 - fix bug ID in changelog 1.3.4-45 - add preliminary patch to fix buffer overflow in krb5kdc and kadmind 231528, CVE-2007-0957 - add preliminary patch to fix double-free in kadmind 231537, CVE-2007-1216 1.3.4-44 - temporarily disable bug fixes for 143289, 179062, 180671, 202191, 223669 f...

CentOS 4 : spamassassin (CESA-2007:0074)

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incoming...

Slackware 10.2 / 11.0 : php (SSA:2007-053-01)

New php packages are available for Slackware 10.2 and 11.0 to improve the stability and security of PHP. Quite a few bugs were fixed -- please see http://www.php.net for a detailed list. All sites that use PHP are encouraged to upgrade. Please note that we haven't tested all PHP applications for...

Important: spamassassin security update

3.1.8-2 - Fix sa-learn regression 228968 3.1.8-1 - 3.1.8 CVE-2007-0451 3.1.7-9 - silence sa-update cron script 3.1.7-8 - only restart spamd if necessary after sa-update 227756 3.1.7-7 - requires gnupg 227738 3.1.7-6 - explicit requires on perlHTTP::Date and perlLWP::UserAgent Bug 193100 3.1.7-5 -...

MDKA-2005:044 : postgresql

A number of bugs are corrected in PostgreSQL version 8.0.4 so an update for Mandrivalinux 2006 is now available PostgreSQL 8.0.3 was provided. Fixes include various memory leakage fixes, improved checking for partially-written WAL pages, a fix for an error that allowed 'VACUUM' to remove ctid...

MDKA-2005:045 : ghostscript

New ghostscript packages are now available that provide ghostscript 8.15.1 final and provide a number of bug fixes, including: A fix for vertical japanese text. A memory overflow in the 'lips4' driver was fixed. A double-free in gsdevice.c was fixed. A SEGV in the 'inferno' driver was fixed; this...

MDKA-2005:053 : drakxtools

A number of bugs have been fixed in this new drakxtools package, primarily within the drakconnect and XFdrake programs: The package requires perl-suid for fileshareset and filesharelist. Drakconnect fixes include: - don't duplicate variables MTU, NETMASK, IPADDR in ifcfg files - don't let...

Fedora Core 5 : kernel-2.6.19-1.2288.fc5 (2007-225)

CVE-2006-0007: The key serial number collision avoidance code in the keyallocserial function in Linux kernel 2.6.9 up to 2.6.20 allows remote attackers to cause a denial of service crash via vectors that trigger a null dereference, as originally reported as 'spinlock CPU recursion.' Major rebase ...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0013-01 Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 32 bit architectures This security advisory has been rated as having moderate security impact by the Red Hat...

Moderate: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a number of security issues as well as other bugs are now available for Red Hat Enterprise Linux 2.1 64 bit architectures This security advisory has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the...

Fedora Core 5 : spamassassin-3.1.3-1.fc5 (2006-598)

3.1.3 Resolves CVE-2006-2447. Note that you are affected by this bug only if you launched spamd with both --vpopmail and --paranoid, which is not a common configuration. Also included are bug fixes from 3.1.2. Note that Tenable Network Security has extracted the preceding description block direct...

CentOS 4 : PHP (CESA-2005:406)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

Heart empty Forum(CKong) v2. 5 SQL injection vulnerability-vulnerability warning-the black bar safety net

Program: heart empty ForumCKong Version:=2.5 Type: sql injection Vulnerability analysis 1, The post.php | ? requireonce"include/config.inc.php"; requireonce'include/functions.inc.php'; $fid=intval$fid; $tid=intval$tid; $pid=intval$pid; ......... if!$ Cerrormsg if$postid $sql='select...

CentOS 4 : kernel (CESA-2006:0575)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...

RHEL 3 / 4 : httpd (RHSA-2006:0619)

Updated Apache httpd packages that correct security issues and resolve bugs are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server available for fre...

RHEL 4 : kernel (RHSA-2006:0575)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...

CentOS 3 : kernel (CESA-2006:0437)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the eighth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles...

RHEL 3 : kernel (RHSA-2006:0437)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the eighth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles...