Moderate: Red Hat Security Advisory: bind97 security and bug fix update

Updated bind97 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Design/Logic Flaw

Untrusted search path vulnerability in python-paste-script aka paster in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in the 1 current working directory or 2 its parent directories...

Oracle Linux 5 : Important: / cups (ELSA-2007-1020)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-1020 advisory. 1.2.4-11.14.el51.1 - Applied patch to fix CVE-2007-4351 STR 2561, bug 353981. 1.2.4-11.14 - Applied patch to fix cupsd crash when failing to open a file: URI ST...

CentOS 4 : openssh (CESA-2007:0703)

Updated openssh packages that fix two security issues and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. These packages include the core files...

tomcat5 security update

0:5.5.23-0jpp.40 - Related: CVE-2013-1976 It was found during additional testing - that the tomcat5 init may fail to start because the user - shell is set to sbin/nologin. Fixed in init scrip. SU now - uses -s /bin/sh during startup 0:5.5.23-0jpp.39 - Resolves: CVE-2013-1976 Improper TOMCATLOG...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

dnsmasq security, bug fix and enhancement update

2.48-13 - Fix the DHCP RELEASE problem when two or more dnsmasq instances are running rhbz887156 2.48-12 - Fixing initscript restart stop functions rhbz850944 2.48-11 - Revert previous changes because of many problems with --bind-dynamic option backport. - Dropping...

autofs security, bug fix, and enhancement update

5.0.1-0.rc2.177.0.1.el5 - apply fix from NetApp to use tcp before udp http://www.mail-archive.com/[email protected]/msg07910.html Bert Barbe orabug 6827898 5.0.1-0.rc2.177.el5 - bz714766 - autofs /net maps do not refresh list of shares exported on the NFS server - disable hosts map HUP sign...

Scientific Linux Security Update : sysstat on SL5.x i386/x86_64

The sysstat package contains a set of utilities which enable system monitoring of disks, network, and other I/O activity. It was found that the sysstat initscript created a temporary file in an insecure way. A local attacker could use this flaw to create arbitrary files via a symbolic link attack...

Mandriva Linux Security Advisory : ipmitool (MDVSA-2011:196)

A vulnerability has been discovered and corrected in ipmitool : ipmievd as used in the ipmitool package uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file CVE-2011-4339. In Mandriva the ipmievd daemon from the ipmitool...

Mandriva Linux Security Advisory : krb5-appl (MDVSA-2011:195)

A vulnerability has been discovered and corrected in krb5-appl, heimdal and netkit-telnet : An unauthenticated remote attacker can cause a buffer overflow and probably execute arbitrary code with the privileges of the telnet daemon CVE-2011-4862. In Mandriva the telnetd daemon from the...

Security fix for the ALT Linux 8 package postgresql12 version 9.0.3-alt1

Feb. 2, 2011 Vladimir V Kamarzin 9.0.3-alt1 - 9.0.3. Fixes CVE-2010-4015. - Chroot scripts: exit silently when PGCHROOTDIR is not set. - Initscript: remove LOCKFILE when stopping the service...

Security fix for the ALT Linux 9 package postgresql12 version 9.0.3-alt1

Feb. 2, 2011 Vladimir V Kamarzin 9.0.3-alt1 - 9.0.3 Fixes CVE-2010-4015. - Chroot scripts: exit silently when PGCHROOTDIR is not set. - Initscript: remove LOCKFILE when stopping the service...

Security fix for the ALT Linux 8 package postgresql11 version 9.0.3-alt1

Feb. 2, 2011 Vladimir V Kamarzin 9.0.3-alt1 - 9.0.3. Fixes CVE-2010-4015. - Chroot scripts: exit silently when PGCHROOTDIR is not set. - Initscript: remove LOCKFILE when stopping the service...

Security fix for the ALT Linux 8 package postgresql10 version 9.0.3-alt1

Feb. 2, 2011 Vladimir V Kamarzin 9.0.3-alt1 - 9.0.3 Fixes CVE-2010-4015. - Chroot scripts: exit silently when PGCHROOTDIR is not set. - Initscript: remove LOCKFILE when stopping the service...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.0.3-alt1

Feb. 2, 2011 Vladimir V Kamarzin 9.0.3-alt1 - 9.0.3 Fixes CVE-2010-4015. - Chroot scripts: exit silently when PGCHROOTDIR is not set. - Initscript: remove LOCKFILE when stopping the service...

PT-2010-1046 · Red Hat · Systemtap-Server +9

Name of the Vulnerable Software and Affected Versions: systemtap versions 0.6.2 through 1.3 systemtap-runtime versions 0.6.2 through 1.1 systemtap-testsuite versions 0.6.2 through 1.1 systemtap-client versions 1.1 through 1.2 systemtap-server versions 1.1 systemtap-initscript versions 1.1...

Mandriva Update for mmc-agent MDVA-2010:165-1 (mmc-agent)

Check for the Version of mmc-agent OpenVAS Vulnerability Test Mandriva Update for mmc-agent MDVA-2010:165-1 mmc-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Mandriva Update for mmc-agent MDVA-2010:165-1 (mmc-agent)

Check for the Version of mmc-agent OpenVAS Vulnerability Test Mandriva Update for mmc-agent MDVA-2010:165-1 mmc-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Mandriva Update for mmc-agent MDVA-2010:165 (mmc-agent)

Check for the Version of mmc-agent OpenVAS Vulnerability Test Mandriva Update for mmc-agent MDVA-2010:165 mmc-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...