openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6291)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID da185955-5738-11de-b857-000f20797ede OpenVAS Vulnerability Test $ Description: Auto generated from VID da185955-5738-11de-b857-000f20797ede Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: dokuwiki

The remote host is missing an update to the system as announced in the referenced advisory. VID 4f838b74-50a1-11de-b01f-001c2514716c OpenVAS Vulnerability Test $ Description: Auto generated from VID 4f838b74-50a1-11de-b01f-001c2514716c Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 9 FEDORA-2009-5552 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5552. OpenVAS Vulnerability Test $Id: fcore20095552.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5552 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6268)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

CentOS Security Advisory CESA-2009:1061 (freetype)

The remote host is missing updates to freetype announced in advisory CESA-2009:1061. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE 10 Security Update : ganglia-monitor-core (ganglia-monitor-core-6259)

A stack-based buffer overflow in ganglia's buffer processpath function has been fixed. CVE-2009-0241 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : xine-devel (xine-devel-6230)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 9 : giflib-4.1.3-10.fc9 (2009-5118)

CVE-2005-2974: NULL pointer dereference crash 494826 - CVE-2005-3350: Memory corruption via a crafted GIF 494823 - Solved multilib problems with documentation 465208, 474538 - Removed static library from giflib-devel package 225796 c1 Note that Tenable Network Security has extracted the preceding...

openSUSE 10 Security Update : ghostscript-devel (ghostscript-devel-6246)

Specially crafted file could cause a heap-overflow in JBIG2 decoder CVE-2009-0196, an integer overflow in ICC library CVE-2009-0792, a buffer overflow in BaseFont writer module CVE-2008-6679 or crash the CCITTFax decoder CVE-2007-6725. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CentOS Security Advisory CESA-2009:0476 (pango)

The remote host is missing updates to pango announced in advisory CESA-2009:0476. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6173)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

CentOS Security Advisory CESA-2009:0436 (firefox)

The remote host is missing updates to firefox announced in advisory CESA-2009:0436. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

MDKA-2007:033 : xmlrpc-epi

The xmlrpc-epi package was using an old internal copy of the expat XML parser, which caused random crashes in second-life. The updated packages provided fix this by relying on the expat system library. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is no...

Mandriva Linux Security Advisory : libxslt (MDVSA-2008:151)

A buffer overflow vulnerability in libxslt could be exploited via an XSL style sheet file with a long XLST transformation match condition, which could possibly lead to the execution of arbitrary code CVE-2008-1767. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 ...

Mandrake Linux Security Advisory : pcre (MDKSA-2007:211)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

Mandriva Linux Security Advisory : tk (MDVSA-2008:041)

The ReadImage function in Tk did not check codeSize read from GIF images prior to initializing the append array, which could lead to a buffer overflow with unknown impact. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : gedit (MDVSA-2009:039)

Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current gedit working directory CVE-2009-0314. This update...

MDVA-2008:153 : phonon

In Mandriva Linux 2009.0, phonon's signal availableAudioCaptureDevicesChanged was not connected, causing the KDE4 desktop to be unable to play OGG files. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...