535 matches found
Mandriva Linux Security Advisory : mediawiki (MDVSA-2013:235)
Multiple vulnerabilities has been discovered and corrected in mediawiki : Full path disclosure in MediaWiki before 1.20.7, when an invalid language is specified in ResourceLoader CVE-2013-4301. Several API modules in MediaWiki before 1.20.7 allowed anti-CSRF tokens to be accessed via JSONP...
Updated mediawiki packages fix security vulnerabilities
This update provides MediaWiki 1.20.6, fixing several unspecified security issues. This replaces the MediaWiki 1.16.5 version, which has been EOL upstream for quite some time now, that was shipped with Mageia 2. MediaWiki removed the Math extension for the 1.18 release, but it is now available...
MGASA-2013-0226 Updated mediawiki packages fix security vulnerabilities
This update provides MediaWiki 1.20.6, fixing several unspecified security issues. This replaces the MediaWiki 1.16.5 version, which has been EOL upstream for quite some time now, that was shipped with Mageia 2. MediaWiki removed the Math extension for the 1.18 release, but it is now available...
Scientific Linux Security Update : graphviz on SL5.x i386/x86_64
Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitrary code via a DOT file with a large number of Agrapht...
MDVA-2009:254 : graphviz
This update fixes an issue with graphviz: graphviz isn't properly upgraded to a newer version when upgrading from a 2009.0 system %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...
SA-CONTRIB-2010-016 - Graphviz Filter - arbitrary code execution
Graphviz Filter does not properly filter user input via @command option in node body, leading to a possible Arbitrary Shell Code Execution vulnerability. This vulnerability allows a remote attacker with the ability to create content using a Graphviz input filter to execute an arbitrary shell code...
Mandriva Security Advisory MDVSA-2009:254-1 (graphviz)
The remote host is missing an update to graphviz announced via advisory MDVSA-2009:254-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandriva Security Advisory MDVSA-2009:254-1 (graphviz)
The remote host is missing an update to graphviz announced via advisory MDVSA-2009:254-1. OpenVAS Vulnerability Test $Id: mdksa20092541.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:254-1 graphviz Authors: Thomas Reinke Copyright: Copyright c 2009...
Mandrake Security Advisory MDVSA-2009:254 (graphviz)
The remote host is missing an update to graphviz announced via advisory MDVSA-2009:254. OpenVAS Vulnerability Test $Id: mdksa2009254.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:254 graphviz Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
Mandrake Security Advisory MDVSA-2009:254 (graphviz)
The remote host is missing an update to graphviz announced via advisory MDVSA-2009:254. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandriva Linux Security Advisory : graphviz (MDVSA-2009:254-1)
A vulnerability was discovered and corrected in graphviz : Stack-based buffer overflow in the pushsubg function in parser.y lib/graph/parser.c in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service memory corruption or execute arbitra...
openSUSE Security Update : graphviz (graphviz-249)
This update of graphviz fixes a buffer overflow that occurs while parsing a DOT file. CVE-2008-4555 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update graphviz-249. The text description of this...
MDVA-2008:179 : graphviz
The graphviz package shipped in Mandriva Linux 2008.1 has a bug in its builtin ps renderer: included images are displayed as blank area. An upstream patch fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...
Fedora Update for graphviz FEDORA-2008-1643
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for graphviz FEDORA-2008-1643
Check for the Version of graphviz OpenVAS Vulnerability Test Fedora Update for graphviz FEDORA-2008-1643 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Gentoo Security Advisory GLSA 200811-04 (graphviz)
The remote host is missing updates announced in advisory GLSA 200811-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200811-04 (graphviz)
The remote host is missing updates announced in advisory GLSA 200811-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200811-04 : Graphviz: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200811-04 Graphviz: User-assisted execution of arbitrary code Roee Hay reported a stack-based buffer overflow in the pushsubg function in parser.y when processing a DOT file with a large number of Agrapht elements. Impact : A remo...
[ GLSA 200811-04 ] Graphviz: User-assisted execution of arbitrary code
Gentoo Linux Security Advisory GLSA 200811-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...