SLES9: Security update for glibc and timezone

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: glibc glibc-devel glibc-html glibc-i18ndata glibc-info glibc-locale glibc-profile nscd timezone More details may also be found by searching for keyword 50619...

SecurityReason: glibc x<=2.10.1 stdio/strfmon.c Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 glibc x=2.10.1 stdio/strfmon.c Multiple vulnerabilities Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - Dis.: 10.03.2008 - - Pub.: 17.09.2009 CVE: CVE-2008-1391 Risk: High Affected Software tested 27.08.2009: - - Fedora 11 - -...

GNU glibc 2.x - 'strfmon()' Integer Overflow

source: https://www.securityfocus.com/bid/36443/info GNU glibc is prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

GNU glibc 2.x - strfmon() Integer Overflow

GNU glibc 2.x - strfmon Integer Overflow source: https://www.securityfocus.com/bid/36443/info GNU glibc is prone to an integer-overflow weakness. An attacker can exploit this issue through other applications such as PHP to execute arbitrary code within the context of the affected application...

MDVA-2009:116 : glibc

New glibc release to fix some issues found in glibc 2.8 present in Mandriva 2009.0: - ulimitULSETFSIZE does not return the integer part of the new file size limit divided by 512 http://linuxtesting.org/results/report?num=S0167, Mandriva bug 51685 - When including pthread.h and using...

GNU glibc - Timezone Parsing Remote Integer Overflow

GNU glibc - Timezone Parsing Remote Integer Overflow // source: https://www.securityfocus.com/bid/50898/info GNU glibc is prone to an remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that use...

GNU glibc - Timezone Parsing Remote Integer Overflow

// source: https://www.securityfocus.com/bid/50898/info GNU glibc is prone to an remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that uses the affected library. include include include inclu...

Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 7 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

CVE-2009-1515

Heap-based buffer overflow in the cdfreadsat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third...

MDKA-2007:114 : eclipse

The Eclipse IDE provided with 2008.0 does not run, instead outputting a glibc error or JVM termination error. This update fixes that, and some other bugs in the package. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDVA-2009:017 : glibc

regexp.h header shipped with glibc 2.8, in Mandriva Linux 2009, had an error which caused the build of programs using the regexp compile function to fail. This update addresses the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2009:019 : glibc

The glibc packages released with Mandriva Linux 2008 and Mandriva Linux 2008 Spring had the /etc/ld.so.conf file using relative paths to include other config files at /etc/ld.so.conf.d, breaking usage of ldconfig -r, for example when you have chroot environments. This update fixes ld.so.conf to u...

Slackware 8.1 / 9.0 : glibc XDR overflow fix (SSA:2003-141-03)

An integer overflow in the xdrmemgetbytes function found in the glibc library has been fixed. This could allow a remote attacker to execute arbitrary code by exploiting RPC service that use xdrmemgetbytes. None of the default RPC services provided by Slackware appear to use this function, but...

Mandriva Update for glibc MDKA-2007:111 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDKA-2007:111 glibc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for glibc MDKA-2007:012 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDKA-2007:012 glibc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for glibc MDKA-2007:111 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDKA-2007:111 glibc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for eclipse MDKA-2007:114 (eclipse)

Check for the Version of eclipse OpenVAS Vulnerability Test Mandriva Update for eclipse MDKA-2007:114 eclipse Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for glibc MDKA-2007:012 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDKA-2007:012 glibc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...