FreeBSD Ports: node, node-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID a1d0911f-987a-11e1-a2ef-001fd0af1a4c OpenVAS Vulnerability Test $ Description: Auto generated from VID a1d0911f-987a-11e1-a2ef-001fd0af1a4c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: node, node-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: WebCalendar-devel

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

SuSE 10 Security Update : popt (ZYPP Patch Number 8093)

Multiple security vulnerabilities were reported in RPM which could have been exploited via specially crafted RPM files to cause a denial of service application crash or potentially allow attackers to execute arbitrary code. Additionally, a non-security issue was fixed that could cause a division ...

RHEL 5 / 6 : php (RHSA-2012:0546)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0546 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the php-cgi executable processe...

FreeBSD Ports: libtasn1

The remote host is missing an update to the system as announced in the referenced advisory. VID 2e7e9072-73a0-11e1-a883-001cc0a36e12 OpenVAS Vulnerability Test $ Description: Auto generated from VID 2e7e9072-73a0-11e1-a883-001cc0a36e12 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: portupgrade-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID b428e6b3-926c-11e1-8d7b-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID b428e6b3-926c-11e1-8d7b-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD : portupgrade-devel -- lack of distfile checksums (b428e6b3-926c-11e1-8d7b-003067b2972c)

Ports security team reports : The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This means that it is possible that packages built using this port may not match the one vetted by the maintainer. Users are advised to rebuild...

FreeBSD Ports: mutt-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID 49314321-7fd4-11e1-9582-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID 49314321-7fd4-11e1-9582-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

portupgrade-devel -- lack of distfile checksums

Ports security team reports: The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This means that it is possible that packages built using this port may not match the one vetted by the maintainer. Users are advised to rebuild...

FreeBSD Ports: mutt-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libtasn1

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: portupgrade-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : mutt-devel -- failure to check SMTP TLS server certificate (49314321-7fd4-11e1-9582-001b2134ef46)

Dave B reports on Full Disclosure : It seems that mutt fails to check the validity of a SMTP servers certificate during a TLS connection. ... This means that an attacker could potentially MITM a mutt user connecting to their SMTP server even when the user has forced a TLS connection. %NASLMINLEVE...

FreeBSD : libtasn1 -- ASN.1 length decoding vulnerability (2e7e9072-73a0-11e1-a883-001cc0a36e12)

Mu Dynamics, Inc. reports : Various functions using the ASN.1 length decoding logic in Libtasn1 were incorrectly assuming that the return value from asn1getlengthder is always less than the length of the enclosing ASN.1 structure, which is only true for valid structures and not for intentionally...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0387 Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

mutt-devel -- failure to check SMTP TLS server certificate

Dave B reports on Full Disclosure: It seems that mutt fails to check the validity of a SMTP servers certificate during a TLS connection. ... This means that an attacker could potentially MITM a mutt user connecting to their SMTP server even when the user has forced a TLS connection...

Mandriva Update for kdeedu4 MDVA-2012:026 (kdeedu4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MDVA-2012:025 : kdegraphics4

In kdegraphics4-4.4.5-0.2 there is subpackage kdegraphics4-devel. It has 3 unversioned Obsoletes. These obsoletes cause problems for future updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

Mandriva Linux Security Advisory : libxslt (MDVSA-2012:028)

A vulnerability has been found and corrected in libxslt : libxslt allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors CVE-2011-3970. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...