8506 matches found
Fedora 14 : tomcat6-6.0.26-14.fc14 (2010-16528)
Replaces tomcat6-6.0.26-13.fc14 - Resolves rhbz640686 - Upgrade of tomcat6 wipes out directories - WARNING - Back up all files that need to be preserved before package update or uninstall - WARNING CVE-2010-2227 applied Several Bug fixes : - tomcat user shell - Multiple instances of tomcat not...
Important: Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update
Updated java-1.6.0-openjdk packages that fix several security issues and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
Fedora 14 : apr-util-1.3.10-1.fc14 (2010-16178)
This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...
Fedora 12 : pootle-2.1.2-1.fc12 (2010-16990)
Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...
Fedora 13 : pootle-2.1.2-1.fc13 (2010-16998)
Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...
Fedora 14 : pootle-2.1.2-1.fc14 (2010-17000)
Update to 2.1.2 - Fix XSS on translate page - Improved monolingual support - Improved GNU style project support - New translations: Zulu, Greek, Danish, Acoli and Fulah - Completed translations: Uighur, Chinese China, Catalan, Asturian, Akan and Ganda - Various bug fixes Note that Tenable Network...
Update : Havij v1.13 automated SQL Injection tool - New version
Update : Havij v1.13 automated SQL Injection tool - New version "Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform...
openSUSE Security Update : clamav (openSUSE-SU-2010:0921-1)
clamav version 0.96.3 fixes problems when scanning pdf files CVE-2010-3434 and also contains numerous other bug fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-3230. The text...
openSUSE Security Update : clamav (openSUSE-SU-2010:0921-1)
clamav version 0.96.3 fixes problems when scanning pdf files CVE-2010-3434 and also contains numerous other bug fixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-3230. The text...
Fedora 13 : subversion-1.6.13-1.fc13 (2010-16136)
This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...
Fedora 12 : apr-util-1.3.10-1.fc12 (2010-15916)
This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...
Fedora 13 : apr-util-1.3.10-1.fc13 (2010-15953)
This update includes the latest stable release of the APR-util library. A memory leak in the aprbrigadesplitline function allowed a denial of service attack network services using this function, such as the Apache HTTP Server. CVE-2010-1623 Bug fixes to the 'thread pool' interfaces and ODBC suppo...
Fedora 14 : subversion-1.6.13-1.fc14 (2010-16148)
This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...
Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)
Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...
Fedora 12 : poppler-0.12.4-5.fc12 (2010-15981)
Thu Oct 7 2010 Marek Kasik - 0.12.4-5 - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add poppler-0.12.4-CVE-2010-3704.patch Fix crash in broken pdf code - 0.12.4-4 - Accept 4-digit values in ToUnicode CMaps...
Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)
This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...
openSUSE Security Update : kernel (openSUSE-SU-2010:0738-1)
The updated openSUSE 11.2 kernel fixes the following security bugs : CVE-2010-3310: Local users could corrupt kernel heap memory via ROSE sockets. CVE-2010-2962: Local users could write to any kernel memory location via the i915 GEM ioctl interface. Additionally the update restores the...
Debian DSA-2120-1 : postgresql-8.3 - privilege escalation
Tim Bunce discovered that PostgreSQL, a database server software, does not properly separate interpreters for server-side stored procedures which run in different security contexts. As a result, non-privileged authenticated database users might gain additional privileges. Note that this security...
[SECURITY] [DSA 2120-1] New postgresql-8.3 packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-2120-1 [email protected] http://www.debian.org/security/ Florian Weimer October 12, 2010 http://www.debian.org/security/faq -...
