[Full-Disclosure] Cafelog WordPress / b2 SQL injection vulnerabilities discovered and fixed in CVS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor: Cafelog Product: WordPress formerly b2 http://www.wordpress.org/ Vulnerable Versions: CVS versions before October 1, 2003 Vulnerability affects code inherited from b2, so all versions of wordpress released before CVS fix are affected and many...

Moderate: Red Hat Security Advisory: : Updated httpd packages fix Apache security vulnerabilities

Updated httpd packages that fix several minor security issues are now available for Red Hat Linux 8.0 and 9. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl included with Apache 2...

[CLA-2003:711] Conectiva Security Announcement - mnogosearch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : mnogosearch SUMMARY : Remote buffer overflow...

[ANNOUNCE][SECURITY] Apache 2.0.47 released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Apache 2.0.47 Released The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the tenth public release of the Apache 2.0 HTTP Server. This Announcement notes the significant changes in 2.0.47 as compared to 2.0.46...

[ANNOUNCE][SECURITY] Apache 2.0.47 released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Apache 2.0.47 Released The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the tenth public release of the Apache 2.0 HTTP Server. This Announcement notes the significant changes in 2.0.47 as compared to 2.0.46...

Important: Red Hat Security Advisory: netscape security update

Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...

Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes

XFree86 is an implementation of the X Window System providing the core graphical user interface and video drivers. Updated XFree86 packages for Red Hat Linux 7.3 are now available which include several security fixes, bug fixes, enhancements, and driver updates. Security fixes: - Xterm, provides ...

Important: Red Hat Security Advisory: : Updated XFree86 4.1.0 packages are available

Updated XFree86 packages that resolve various security issues and additionally provide a number of bug fixes and enhancements are now available for Red Hat Linux 7.1 and 7.2. XFree86 is an implementation of the X Window System, which provides the graphical user interface, video drivers, etc. for...

Important: Red Hat Security Advisory: : Updated XFree86 packages provide security and bug fixes

New XFree86 packages for Red Hat Linux 8.0 are now available which include several security fixes, bug fixes, enhancements, and driver updates. Updated: June 30, 2003 The XFree86 4.2.1-20 packages which were originally released in this advisory were accidentally built with debugging info enabled...

MDKSA-2003:066 - Updated kernel packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: kernel Advisory ID: MDKSA-2003:066 Date: June 11th, 2003 Affected versions: 9.1 Problem Description: Multiple vulnerabilities were discovered and fixed in the Linux kernel. CAN-2003-0001: Multiple...

Important: Red Hat Security Advisory: : Updated Netscape packages are now available

Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages for Red Hat Enterprise Linux are now available which address several security vulnerabilities. The Linux kernel handles the basic functions of the operating system. Several security issues have been found that affect the Linux kernel: Al Viro found a security issue in the...

PHP 4.3.2 released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After a lengthy QA process, PHP 4.3.2 is finally out! This maintenance release solves a lot of bugs found in earlier PHP versions and is a strongly recommended upgrade for all PHP users. PHP 4.3.2 contains, among others, following important fixes,...

(RHSA-2003:177) Updated up2date and rhn_register clients available

The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates improvements in handling package dependencies and "obsoletes" processing, along with many other bug fixes. This release also includes an updated...

[ANNOUNCE] Apache 2.0.45 Released

-----BEGIN PGP SIGNED MESSAGE----- Apache 2.0.45 Released The Apache Software Foundation and The Apache HTTP Server Project are pleased to announce the eighth public release of the Apache 2.0 HTTP Server. This Announcement notes the significant changes in 2.0.45 as compared to 2.0.44. OS2 users;...

Samba-TNG 0.3.1 Security Release (fwd)

---------- Forwarded message ---------- Date: Sat, 22 Mar 2003 21:03:11 +0100 CET From: Stephan Lauffer [email protected] To: [email protected] Subject: ANNOUNCE Samba-TNG 0.3.1 Security Release Samba-TNG-0.3.1 released ========================== Mar 22th 2003 Today the...

Important: Red Hat Security Advisory: apache, openssl, php, tomcat security update for Stronghold

Updated versions of Stronghold 4 cross-platform are available to fix a number of vulnerabilities in OpenSSL, Apache, PHP, and Tomcat. Also included in this update are bug fixes for modproxy and the modauthzldap package. Stronghold 4 cross platform contains a number of open source technologies suc...

SIGCHLD problem in Stunnel

Date: Sun, 12 Jan 2003 16:57:02 +0100 From: Michal Trojnara [email protected] To: [email protected], [email protected], [email protected] Subject: Stunnel 4.04 released -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Version 4.04, 2003.01.12, urgency: MEDIUM: New feature...

[SECURITY] [DSA 191-1] New squirrelmail packages fix cross site scripting bugs

-------------------------------------------------------------------------- Debian Security Advisory DSA 191-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2002 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: kernel security update

This kernel update for Red Hat Linux Advanced Server 2.1 addresses some security issues and provides minor bug fixes. The Linux kernel handles the basic functions of the operating system. A number of vulnerabilities were found in the Red Hat Linux Advanced Server kernel. These vulnerabilities cou...