[SECURITY] [DSA 1919-2] New smarty packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1919-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 17, 2010 http://www.debian.org/security/faq -...

Fedora Update for gcc FEDORA-2010-10640

Check for the Version of gcc OpenVAS Vulnerability Test Fedora Update for gcc FEDORA-2010-10640 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 13 : dsniff-2.4-0.9.b1.fc13 / libnids-1.24-1.fc13 (2010-5562)

libnids 1.24 Mar 14 2010: - fixed another remotely triggerable NULL dereference in ipfragment.c - unofficial patch that enables tracking of already established TCP connections - missing reset of some tcp variables upon nidsexit - correct calculation of radiotap header - compilation warning fixes...

Fedora 12 : kde-l10n-4.4.3-1.fc12 / kdeaccessibility-4.4.3-1.fc12.1 / kdeadmin-4.4.3-1.fc12.1 / etc (2010-8544)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

Fedora 11 : mingw32-libltdl-1.5.26-17.fc11 (2010-2943)

Not sure whether mingw32-libltdl due to its special nature in being for cross- compilation development for an entirely different system is actually affected by CVE-2009-3736, but this should make sure everything is fixed. Note that Tenable Network Security has extracted the preceding description...

Fedora 12 : PyQt4-4.7.2-2.fc12 / kdeaccessibility-4.4.2-1.fc12 / kdeadmin-4.4.2-1.fc12 / etc (2010-6096)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.2, which has a number of improvements: Possible crashes in Plasma, Dolphin and Okular have been fixed The Microblog applet now shows the correct time in the timeline The audioplayer KRunner plugin has been fixed to not free...

Fedora 11 : kde-l10n-4.4.3-1.fc11 / kdeaccessibility-4.4.3-1.fc11.1 / kdeadmin-4.4.3-1.fc11.1 / etc (2010-8547)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

Fedora 13 : kde-l10n-4.4.3-1.fc13 / kdeaccessibility-4.4.3-1.fc13.1 / kdeadmin-4.4.3-1.fc13.1 / etc (2010-8577)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

PCRE library buffer overflow

Buffer overflow on regular expresssion compilation...

FreeBSD Ports: kdebase

The remote host is missing an update to the system as announced in the referenced advisory. VID 3987c5d1-47a9-11df-a0d5-0016d32f24fb OpenVAS Vulnerability Test $ Description: Auto generated from VID 3987c5d1-47a9-11df-a0d5-0016d32f24fb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Race condition

Race condition in backend/ctrl.c in KDM in KDE Software Compilation SC 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper...

CVE-2010-0436

CVE-2010-0436 is a KDE KDM local privilege-escalation via a race condition in backend/ctrl.c; affects KDE SC 2.2.0–4.4.2, enabling a local user to change permissions of arbitrary files by blocking removal of a directory containing a control socket (ksm interaction). The issue is acknowledged in m...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

[SECURITY] Fedora 11 Update: mingw32-libltdl-1.5.26-17.fc11

The mingw32-libltdl package contains the GNU Libtool Dynamic Module Loader, a library that provides a consistent, portable interface which simplifies the process of using dynamic modules, for the mingw32 cross compilation environment. These runtime libraries are needed by programs that link...

[SECURITY] Fedora 12 Update: mingw32-libltdl-1.5.26-20.fc12

The mingw32-libltdl package contains the GNU Libtool Dynamic Module Loader, a library that provides a consistent, portable interface which simplifies the process of using dynamic modules, for the mingw32 cross compilation environment. These runtime libraries are needed by programs that link...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

/ Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We position shellcode where is convienientbasicly anywhe...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

Mediacoder 0.7.3.4605 - Local Buffer Overflow / Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We positio...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

Exploit for unknown platform in category dos / poc ====================================================================== Nero Burning ROM v9.4.13.2 iso compilation Local Buffer Invasion PoC ====================================================================== !/usr/bin/perl Title: Nero Burning...

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion (PoC)

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion PoC !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English...