Security fix for the ALT Linux 5 package gnome-vfs version 1:2.24.4-alt0.M50P.1

Nov. 13, 2010 Andrey Cherepanov 1:2.24.4-alt0.M50P.1 - backport to p5 branch fixed CVE-2009-2473...

Security fix for the ALT Linux 5 package memcached version 1.4.5-alt1.M50P.1

Nov. 12, 2010 Andrey Cherepanov 1.4.5-alt1.M50P.1 - backport to p5 fixed CVE-2010-1152...

Security fix for the ALT Linux 5 package subversion version 1.6.13-alt0.M50P.1

Nov. 12, 2010 Andrey Cherepanov 1.6.13-alt0.M50P.1 - backport to p5 branch fixed CVE-2010-3315...

FreeBSD Ports: p5-libwww

The remote host is missing an update to the system as announced in the referenced advisory. VID 3a7c5fc4-b50c-11df-977b-ecc31dd8ad06 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3a7c5fc4-b50c-11df-977b-ecc31dd8ad06 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD : p5-libwww -- possibility to remote servers to create file with a .(dot) character (3a7c5fc4-b50c-11df-977b-ecc31dd8ad06)

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a .' dot character, which allows remote servers to create or overwrite files via a 3xx redirect to a URL with a crafted filename or a Content-Disposition header that suggests a crafted filename, and...

Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt0.M50P.1

July 1, 2010 Andrey Cherepanov 2.4.23-alt0.M50P.1 - backport to p5 branch security fixes: CVE-2010-0212 and CVE-2010-0211...

p5-libwww -- possibility to remote servers to create file with a .(dot) character

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a .' dot character, which allows remote servers to create or overwrite files via a 3xx redirect to a URL with a crafted filename or a Content-Disposition header that suggests a crafted filename, and...

openSUSE Security Update : bind (bind-1843)

bind when configured for DNSSEC could incorrectly cache NXDOMAIN responses CVE-2010-0097. Moreover, the fix for CVE-2009-4022 was incomplete. Despite the previous fix CNAME and DNAME responses could be incorrectly cached CVE-2010-0290. bind was updated to version 9.4.3-P5 in order to fix those...

FreeBSD Ports: p5-HTML-Parser

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: subversion, subversion-freebsd, p5-subversion, py-subversion

The remote host is missing an update to the system as announced in the referenced advisory. VID bce1f76d-82d0-11de-88ea-001a4d49522b OpenVAS Vulnerability Test $ Description: Auto generated from VID bce1f76d-82d0-11de-88ea-001a4d49522b Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: subversion, subversion-freebsd, p5-subversion, py-subversion

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : p5-Archive-Zip -- virus detection evasion (a5742055-300a-11d9-a9e7-0001020eed82)

An AMaViS Security Announcement reports that a vulnerability exist in the Archive::Zip Perl module which may lead to bypass of malicious code in anti-virus programs by creating specially crafted ZIP files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

FreeBSD Ports: p5-File-Path

The remote host is missing an update to the system as announced in the referenced advisory. VID 13b0c8c8-bee0-11dd-a708-001fc66e7203 OpenVAS Vulnerability Test $ Description: Auto generated from VID 13b0c8c8-bee0-11dd-a708-001fc66e7203 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: p5-File-Path

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : p5-File-Path -- rmtree allows creation of setuid files (13b0c8c8-bee0-11dd-a708-001fc66e7203)

Jan Lieskovsky reports : perl-File-Path rmtree race condition CVE-2005-0448 was assigned to address this This vulnerability was fixed in 5.8.4-7 but re-introduced in 5.8.8-1. It's also present in File::Path 2.xx, up to and including 2.07 which has only a partial fix. %NASLMINLEVEL 70300 C Tenable...

FreeBSD Ports: p5-Imager

The remote host is missing an update to the system as announced in the referenced advisory. VID 632c98be-aad2-4af2-849f-41a6862afd6a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: p5-DBI, p5-DBI-137

The remote host is missing an update to the system as announced in the referenced advisory. VID 8cfb6f42-d2b0-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: p5-Mail-SpamAssassin

The remote host is missing an update to the system as announced in the referenced advisory. VID 0d3a5148-f512-11d8-9837-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: p5-Mail-SpamAssassin

The remote host is missing an update to the system as announced in the referenced advisory. VID cc4ce06b-e01c-11d9-a8bd-000cf18bbe54 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: p5-Net-DNS

The remote host is missing an update to the system as announced in the referenced advisory. VID d2b8a963-3d59-11dc-b3d3-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...