Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : quagga vulnerability (USN-775-1)

It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service. Note that Tenable Network Security has extracted the preceding...

RHEL 3 / 4 / 5 : pango (RHSA-2009:0476)

Updated pango and evolution28-pango packages that fix an integer overflow flaw are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pango is a library used for the layout and rendering of...

HP-UX Update for JRE HPSBUX00141

Check for the Version of JRE OpenVAS Vulnerability Test HP-UX Update for JRE HPSBUX00141 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

HP-UX Update for IPFilter/9000 HPSBUX00181

Check for the Version of IPFilter/9000 OpenVAS Vulnerability Test HP-UX Update for IPFilter/9000 HPSBUX00181 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

HP-UX Update for CIFS Samba Server HPSBUX01086

Check for the Version of CIFS Samba Server OpenVAS Vulnerability Test HP-UX Update for CIFS Samba Server HPSBUX01086 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

HP-UX Update for xntpd(1M) HPSBUX00148

Check for the Version of xntpd1M OpenVAS Vulnerability Test HP-UX Update for xntpd1M HPSBUX00148 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

HP-UX Update for Apache HPSBUX00197

Check for the Version of Apache OpenVAS Vulnerability Test HP-UX Update for Apache HPSBUX00197 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

HP-UX Update for T1471AA Secure Shell HPSBUX00282

Check for the Version of T1471AA Secure Shell OpenVAS Vulnerability Test HP-UX Update for T1471AA Secure Shell HPSBUX00282 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandrake Security Advisory MDVSA-2009:099 (openafs)

The remote host is missing an update to openafs announced via advisory MDVSA-2009:099. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Ubuntu 8.04 LTS / 8.10 / 9.04 : Apport vulnerability (USN-768-1)

Stephane Chazelas discovered that Apport did not safely remove files from its crash report directory. If Apport had been enabled at some point, a local attacker could remove arbitrary files from the system. Note that Tenable Network Security has extracted the preceding description block directly...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:0437-02 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

MDVA-2009:026 : samba

This update fixes two minor issues with samba. Package does not install from update because of missing dependency 47979. Fix dependencies because /usr/include/tdb.h was moved from libsmbclient0-devel to libtdb-devel and this led to a file conflict and prevented a smooth upgrade. This update fixes...

MDVA-2008:101 : evince

Evince was not properly handling multi-page TIFF files and was crashing under specific conditions when requesting printing. This package update fixes those issues and includes additional translations from the GNOME 2.22.2 release. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated a...

MDVA-2008:172 : kdebase

The kdeeject command did not work, which resulted in a user being able to unmount, but not eject, removable devices. This package update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

MDVA-2008:054 : freeradius

The freeradius package included in Mandriva Linux 2008.1 had hardcoded the use of the '-y' option in its initscript, which is no longer a valid option in the new major version of 2.0. As a result, the initscript was unable to launch the service correctly. As well, a file name error in the EAP...

MDVA-2008:098 : gnome-session

Gnome-session was not migrating files from the old GNOME trash system to its new location at login, preventing old trash management with Nautilus. This package fixes the issue and provides new translations from GNOME 2.22.2. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Mandriva Linux Security Advisory : postfix (MDVSA-2008:190)

A vulnerability in Postfix 2.4 and later was discovered, when running on Linux kernel 2.6, where a local user could cause a denial of service due to Postfix leaking the epoll file descriptor when executing non-Postfix commands CVE-2008-3889. The updated packages have been patched to correct this...

Fedora 10 : ghostscript-8.63-5.fc10 (2009-2885)

Security update for integer overflows CVE-2009-0583 and upper bounds checks CVE-2009-0584 in the ICC profile handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-11.b14.fc10 (2009-2982)

Fixes important lcms security bug which gives unwarranted access to malicious users. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FreeBSD : ident2 double byte buffer overflow (99230277-8fb4-11d8-8b29-0020ed76ef5a)

Jack of RaptureSecurity reported a double byte buffer overflow in ident2. The bug may allow a remote attacker to execute arbitrary code within the context of the ident2 daemon. The daemon typically runs as user-ID nobody', but with group-ID wheel'. %NASLMINLEVEL 70300 C Tenable Network Security,...