Debian DSA-1625-1 : cupsys - buffer overflows

Several remote vulnerabilities have been discovered in the Common Unix Printing System CUPS. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0053 Buffer overflows in the HP-GL input filter allowed to possibly run arbitrary code through crafted HP-GL...

[SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...

Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl of Apple Product Security reported several integer overflows in core modules such as stringobject, unicodeobject, bufferobject,...

Debian DSA-1620-1 : python2.5 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2052 Piotr Engelking discovered that the strxfrm function of the locale module miscalculates the length of an...

DSA-1620-1 python2.5 - several vulnerabilities

Bulletin has no description...

Debian DSA-1613-1 : libgd2 - multiple vulnerabilities

Multiple vulnerabilities have been identified in libgd2, a library for programmatic graphics creation and manipulation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2445 Grayscale PNG files containing invalid tRNS chunk CRC values could cause a...

Buffer length checks in MIME processing — Mozilla

As a follow-up to vulnerability reported in MFSA 2008-12 Mozilla has checked similar constructs in the rest of the MIME handling code. Although no further buffer overflows were found we changed several function calls to use safer versions of the string routines that will be more robust in the fac...

DSA-1613-1 libgd2 - multiple vulnerabilities

Bulletin has no description...

CentOS 3 : ruby (CESA-2008:0562)

Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for quick and easy object-oriented...

RHEL 4 / 5 : ruby (RHSA-2008:0561)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0561 advisory. Ruby is an interpreted scripting language for quick and easy object-oriented programming. Multiple integer overflows leading to a heap...

CVE-2008-3169

Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a "coordinate normalization bug." NOTE: some of these details are obtained from third party information...

CVE-2008-3169

Empire Server (before version 4.3.15) is affected by heap-based buffer overflows due to a coordinate normalization bug. The vulnerability allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. Remediation is to upgrade to 4.3.15 or apply v...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0561 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting...

ruby: Integer overflows in rb_ary_store()

Multiple integer overflows in the rbarystore function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than...

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for quick and easy object-oriented...

libxine -- denial of service vulnerability

xine team reports: A new xine-lib version is now available. This release contains some security fixes, notably a DoS via corrupted Ogg files CVE-2008-3231, some related fixes, and fixes for a few possible buffer overflows...

Novell eDirectory multiple security vulnerabilities

Integer overflows, memory corruptions...

CVE-2008-3126

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

Fedora 9 : sipp-3.1-2.fc9 (2008-6219)

This update fixes : - Bug 446182 - CVE-2008-2085 sipp: buffer overflows in getremoteipmedia and getremoteipv6media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Fedora 8 : sipp-3.1-2.fc8 (2008-6210)

This update fixes : - Bug 446182 - CVE-2008-2085 sipp: buffer overflows in getremoteipmedia and getremoteipv6media Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...