RHEL 3 : kernel (RHSA-2004:255)

Updated kernel packages for Red Hat Enterprise Linux 3 that fix security vulnerabilities are now available. The Linux kernel handles the basic functions of the operating system. A flaw was found in Linux kernel versions 2.4 and 2.6 for x86 and x8664 that allowed local users to cause a denial of...

RHEL 2.1 : postgresql (RHSA-2003:314)

Updated PostgreSQL packages that correct a buffer overflow in the toascii routines are now available. PostgreSQL is an advanced Object-Relational database management system DBMS. Two bugs that can lead to buffer overflows have been found in the PostgreSQL abstract data type to ASCII conversion...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages for Red Hat Enterprise Linux 2.1 that fix security vulnerabilities are now available. The Linux kernel handles the basic functions of the operating system. A flaw was found in Linux kernel versions 2.4 and 2.6 for x86 and x8664 that allowed local users to cause a denial of...

cvs

New cvs packages that have been upgraded to cvs-1.11.17 are available for Slackware 8.1, 9.0, 9.1, and -current to fix various security issues. Sites running a CVS server should upgrade to the new CVS package right away. More details about the issues may be found in the Common Vulnerabilities and...

Moderate: Red Hat Security Advisory: krb5 security update

Updated Kerberos 5 krb5 packages which correct buffer overflows in the krb5anametolocalname function are now available. Kerberos is a network authentication system. Bugs have been fixed in the krb5anametolocalname library function. Specifically, buffer overflows were possible for all Kerberos...

Moderate: Red Hat Security Advisory: ethereal security update

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The MMSE dissector in Ethereal releases 0.10.1 through 0.10.3 contained a buffer overflow flaw. On a system where Ethereal is running, a remote attacker cou...

cvs

New cvs packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a buffer overflow vulnerability which could allow an attacker to run arbitrary programs on the CVS server. Sites running a CVS server should upgrade to the new CVS package right away. More details about this issue may...

Important: Red Hat Security Advisory: mc security update

Updated mc packages that resolve several buffer overflow vulnerabilities, one format string vulnerability and several temporary file creation vulnerabilities are now available. Midnight Commander mc is a visual shell much like a file manager. Several buffer overflows, several temporary file...

Critical: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes a server vulnerability that could be exploited by a malicious client is now available. CVS is a version control system frequently used to manage source code repositories. Stefan Esser discovered a flaw in cvs where malformed "Entry" lines could cause a heap...

mc

New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in t...

libpng update

New libpng packages are available for Slackware 9.0, 9.1, and -current to fix an issue where libpng could be caused to crash, perhaps creating a denial of service issue if network services are linked with it. More details about this issue may be found in the Common Vulnerabilities and Exposures C...

kernel security updates

New kernel packages are available for Slackware 9.1 and -current to fix security issues. Also available are new kernel modules packages including alsa-driver, and a new version of the hotplug package for Slackware 9.1 containing some fixes for using 2.4.26 and 2.6.x kernel modules. The most serio...

Important: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix a minor denial of service vulnerability are now available. XFree86 is an implementation of the X Window System, providing the core graphical user interface and video drivers. Flaws in XFree86 4.1.0 allows local or remote attackers who are able to connect to the X...

[SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips)

-------------------------------------------------------------------------- Debian Security Advisory DSA 491-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2004 http://www.debian.org/security/faq -...

tcpdump denial of service

Upgraded tcpdump packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix denial-of-service issues. Sites using tcpdump should upgrade to the new packages. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

[SECURITY] [DSA 482-1] New Linux 2.4.17 packages fix local root exploit (source+powerpc/apus+s390)

-------------------------------------------------------------------------- Debian Security Advisory DSA 482-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 480-1] New Linux 2.4.17 and 2.4.18 packages fix local root exploit (hppa)

-------------------------------------------------------------------------- Debian Security Advisory DSA 480-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

DSA-479 linux-kernel-2.4.18-alpha+i386+powerpc - several vulnerabilities

Bulletin has no description...

OpenSSL security update

Upgraded OpenSSL packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix two potential denial-of-service issues in earlier versions of OpenSSL. We recommend sites that use OpenSSL upgrade to the fixed packages right away. More details about this issue may be found in the Commo...

Important: Red Hat Security Advisory: openssl security update

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography...