gegl security update

CentOS Errata and Security Advisory CESA-2012:1455 Updated gegl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score...

PT-2012-1069 · Kde +3 · Konqueror +4

Name of the Vulnerable Software and Affected Versions: kdelibs versions 4.3.4 kdelibs-devel version 4.3.4 kdelibs-debuginfo version 4.3.4 kdelibs-apidocs version 4.3.4 kdelibs-common version 4.3.4 Description: The issue concerns multiple vulnerabilities in the kdelibs package, which can lead to a...

Fedora 17 : bind-9.9.1-9.P3.fc17 (2012-14106)

Update to the 9.9.1-P3 security release. This update also fixes following issues : - named NetworkManager dispatcher script contained wrong path to systemcl utility. BZ837173 - named-chroot.service unit didn't work properly. BZ825869 - bind-devel package wasn't multilib clean. BZ478718 Note that...

CentOS Update for libexif CESA-2012:1255 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Slackware Advisory SSA:2006-123-01 xorg server overflow

The remote host is missing an update as announced via advisory SSA:2006-123-01. OpenVAS Vulnerability Test $Id: esoftslkssa200612301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2006-123-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8264)

This update changes the default configuration to use FilesMatch with 'SetHandler' rather than 'AddHandler' to protect weakly written web applications from content confusion. Since this is a hardening measure, no CVE was assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Mandrake Linux Security Advisory : inn (MDKSA-2000:023)

A vulnerability exists when verifycancels is enabled in /etc/news/inn.conf. This vulnerability could be used to gain root access on any system with inn installed. This new version also does not install inews as setgid news or rnews as setuid root. Many other security paranoia fixes have been made...

Mandrake Linux Security Advisory : gpm (MDKSA-2001:006)

WireX discovered a potential temporary file condition in the gpm program. This update corrects the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2001:006. The text...

Mandrake Linux Security Advisory : inn (MDKSA-2000:016)

A vulnerability exists when verifycancels is enabled in /etc/news/inn.conf. This vulnerability could be used to gain root access on any system with inn installed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandra...

Mandriva Linux Security Advisory : freeradius (MDVSA-2012:047)

A vulnerability has been found and corrected in freeradius : The ocspcheck function in rlmeaptls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked...

CentOS Update for krb5-devel CESA-2012:1131 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for krb5-devel CESA-2012:1131 centos6

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2012:1131 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for file MDVSA-2012:035 (file)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE Update for libpng12 openSUSE-SU-2012:0316-1 (libpng12)

Check for the Version of libpng12 OpenVAS Vulnerability Test $Id: gbsuse201203161.nasl 8253 2017-12-28 06:29:51Z teissa $ SuSE Update for libpng12 openSUSE-SU-2012:0316-1 libpng12 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Scientific Linux Security Update : cyrus-sasl on SL4.x, SL3.x i386/x86_64

A bug was found in cyrus-sasl's DIGEST-MD5 authentication mechanism. As part of the DIGEST-MD5 authentication exchange, the client is expected to send a specific set of information to the server. If one of these items the 'realm' was not sent or was malformed, it was possible for a remote...

Scientific Linux Security Update : gd on SL4.x, SL5.x i386/x86_64

A missing input sanitization flaw, leading to a buffer overflow, was discovered in the gd library. A specially crafted GD image file could cause an application using the gd library to crash or, possibly, execute arbitrary code when opened. CVE-2009-3546 %NASLMINLEVEL 70300 C Tenable Network...

Scientific Linux Security Update : libgcrypt on SL5.0 - 5.3 i386/x86_64

gnutls-1.4.1-3.el54.8 is a moderate security update that required /usr/libm/libgcrypt.so.11 to have the symbol gcryciphersetkey This is only available in the newer libgcrypt that was released with SL 5.4. This update updates libgcrypt in the older SL 5 releases so that the gnutls security update...

Scientific Linux Security Update : libvirt on SL5.x i386/x86_64

It was found that several libvirt API calls did not honor the read-only permission for connections. A local attacker able to establish a read-only connection to libvirtd on a server could use this flaw to execute commands that should be restricted to read-write connections, possibly leading to a...

Scientific Linux Security Update : libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

A heap-based buffer overflow flaw was found in the way libxml2 handled long XML entity names. If an application linked against libxml2 processed untrusted malformed XML content, it could cause the application to crash or, possibly, execute arbitrary code. CVE-2008-3529 %NASLMINLEVEL 70300 C Tenab...