105 matches found
CVE-2022-32981 affecting package kernel 5.10.123.1-1
CVE-2022-32981 affecting package kernel 5.10.123.1-1. A patched version of the package is available...
CVE-2021-20270 affecting package python-pygments for versions less than 2.4.2-7
CVE-2021-20270 affecting package python-pygments for versions less than 2.4.2-7. A patched version of the package is available...
CVE-2018-6951 affecting package patch for versions less than 2.7.6-7
CVE-2018-6951 affecting package patch for versions less than 2.7.6-7. A patched version of the package is available...
CVE-2018-1000156 affecting package patch for versions less than 2.7.6-7
CVE-2018-1000156 affecting package patch for versions less than 2.7.6-7. A patched version of the package is available...
CVE-2021-20231 affecting package gnutls for versions less than 3.6.14-5
CVE-2021-20231 affecting package gnutls for versions less than 3.6.14-5. A patched version of the package is available...
CVE-2021-4093 affecting package kernel 5.10.161.1-1
CVE-2021-4093 affecting package kernel 5.10.161.1-1. A patched version of the package is available...
CVE-2021-3421 affecting package rpm 4.14.2-15
CVE-2021-3421 affecting package rpm 4.14.2-15. A patched version of the package is available...
CVE-2020-11869 affecting package qemu-kvm 4.2.0-48
CVE-2020-11869 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
CVE-2020-14364 affecting package qemu-kvm 4.2.0-48
CVE-2020-14364 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
CVE-2022-39377 affecting package sysstat 12.3.3-2
CVE-2022-39377 affecting package sysstat 12.3.3-2. A patched version of the package is available...
CVE-2018-6952 affecting package patch 2.7.6-7
CVE-2018-6952 affecting package patch 2.7.6-7. A patched version of the package is available...
CVE-2018-20969 affecting package patch 2.7.6-7
CVE-2018-20969 affecting package patch 2.7.6-7. A patched version of the package is available...
CVE-2018-1000156 affecting package patch 2.7.6-7
CVE-2018-1000156 affecting package patch 2.7.6-7. A patched version of the package is available...
CVE-2018-6951 affecting package patch 2.7.6-7
CVE-2018-6951 affecting package patch 2.7.6-7. A patched version of the package is available...
Updated nagios packages fix security vulnerabilities
The nagios package has been patched to fix the following issues: Improper sanitization of RSS feed input enables unauthenticated remote read and write of arbitrary files CVE-2016-9565. Unsafe logfile handling allows unprivileged users to escalate their privileges to root CVE-2016-9566...
Mandriva Linux Security Advisory : xrdb (MDVSA-2011:076)
A vulnerability has been found and corrected in xrdb : xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a 1 DHCP or 2 XDMCP message CVE-2011-0465. Packages for 2009.0 are provided as...
Mandriva Linux Security Advisory : gcc (MDVSA-2008:066)
Jurgen Weigert found a directory traversal vulnerability in fastjar versions prior to 0.93. This vulnerability allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filename with ../ sequences. The updated packages have been patched to correct this issue...
Mandrake Linux Security Advisory : evince (MDKSA-2006:229)
Stack-based buffer overflow in ps.c for evince allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the DocumentMedia header. Packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2005:226)
A bug in enigmail, the GPG support extension for Mozilla MailNews and Mozilla Thunderbird was discovered that could lead to the encryption of an email with the wrong public key. This could potentially disclose confidential data to unintended recipients. The updated packages have been patched to...
Mandrake Linux Security Advisory : apache (MDKSA-2005:130)
Watchfire reported a flaw that occured when using the Apache server as a HTTP proxy. A remote attacker could send an HTTP request with both a 'Transfer-Encoding: chunked' header and a 'Content-Length' header which would cause Apache to incorrectly handle and forward the body of the request in a w...