[SECURITY] Fedora 14 Update: php-eaccelerator-0.9.6.1-3.fc14

eAccelerator is a further development of the MMCache PHP Accelerator & Enco der. It increases performance of PHP scripts by caching them in compiled state, so that the overhead of compiling is almost completely eliminated...

USN-1024-2: OpenJDK regression

USN-1024-1 fixed vulnerabilities in OpenJDK. Some of the additional backported improvements could interfere with the compilation of certain Java software. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that certain system property...

Fedora 14 : krb5-1.8.2-6.fc14 (2010-15803)

This update incorporates the upstream patch to fix an uninitialized pointer crash in the KDC's authorization data handling routines CVE-2010-1322. It also pulls up a few backports and compilation flag changes from F15. Note that Tenable Network Security has extracted the preceding description blo...

Microsoft .Net JIT memory corruption

Memory corruption during SMIL code compilation on 64 bit architecture...

CVE-2010-3735

The "Query Compiler, Rewrite, Optimizer" component in IBM DB2 UDB 9.5 before FP6a allows remote authenticated users to cause a denial of service CPU consumption via a crafted query involving certain UNION ALL views, leading to an indefinitely large amount of compilation time...

[SECURITY] [DSA 1919-2] New smarty packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1919-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 17, 2010 http://www.debian.org/security/faq -...

Fedora Update for gcc FEDORA-2010-10640

Check for the Version of gcc OpenVAS Vulnerability Test Fedora Update for gcc FEDORA-2010-10640 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 12 : PyQt4-4.7.2-2.fc12 / kdeaccessibility-4.4.2-1.fc12 / kdeadmin-4.4.2-1.fc12 / etc (2010-6096)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.2, which has a number of improvements: Possible crashes in Plasma, Dolphin and Okular have been fixed The Microblog applet now shows the correct time in the timeline The audioplayer KRunner plugin has been fixed to not free...

Fedora 12 : kde-l10n-4.4.3-1.fc12 / kdeaccessibility-4.4.3-1.fc12.1 / kdeadmin-4.4.3-1.fc12.1 / etc (2010-8544)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

Fedora 11 : kde-l10n-4.4.3-1.fc11 / kdeaccessibility-4.4.3-1.fc11.1 / kdeadmin-4.4.3-1.fc11.1 / etc (2010-8547)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

Fedora 11 : mingw32-libltdl-1.5.26-17.fc11 (2010-2943)

Not sure whether mingw32-libltdl due to its special nature in being for cross- compilation development for an entirely different system is actually affected by CVE-2009-3736, but this should make sure everything is fixed. Note that Tenable Network Security has extracted the preceding description...

Fedora 13 : kde-l10n-4.4.3-1.fc13 / kdeaccessibility-4.4.3-1.fc13.1 / kdeadmin-4.4.3-1.fc13.1 / etc (2010-8577)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

Fedora 13 : dsniff-2.4-0.9.b1.fc13 / libnids-1.24-1.fc13 (2010-5562)

libnids 1.24 Mar 14 2010: - fixed another remotely triggerable NULL dereference in ipfragment.c - unofficial patch that enables tracking of already established TCP connections - missing reset of some tcp variables upon nidsexit - correct calculation of radiotap header - compilation warning fixes...

PCRE library buffer overflow

Buffer overflow on regular expresssion compilation...

FreeBSD Ports: kdebase

The remote host is missing an update to the system as announced in the referenced advisory. VID 3987c5d1-47a9-11df-a0d5-0016d32f24fb OpenVAS Vulnerability Test $ Description: Auto generated from VID 3987c5d1-47a9-11df-a0d5-0016d32f24fb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Race condition

Race condition in backend/ctrl.c in KDM in KDE Software Compilation SC 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper...

CVE-2010-0436

Race condition in backend/ctrl.c in KDM in KDE Software Compilation SC 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper...

CVE-2010-0436

CVE-2010-0436 is a KDE KDM local privilege-escalation via a race condition in backend/ctrl.c; affects KDE SC 2.2.0–4.4.2, enabling a local user to change permissions of arbitrary files by blocking removal of a directory containing a control socket (ksm interaction). The issue is acknowledged in m...

CVE-2010-0436: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in backend/ctrl.c in KDM in KDE Software Compilation SC 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...