kernel security and bug fix update

2.6.9-89.0.23.0.1 - XEN fix cpu hotplug crash Joe Jin orabug 7521308 - XEN Bring up vcpus before khelper init Joe Jin orabug 7521308 - XEN flush the tlb cache immediately Dave McCracken, Scott Shi orabug 9138767 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug...

Ubuntu Update for gnome-screensaver vulnerabilities USN-907-1

Ubuntu Update for Linux kernel vulnerabilities USN-907-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9071.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for gnome-screensaver vulnerabilities USN-907-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-907-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Discuz! v7. 2 injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Vulnerability analysis: 文件 ./manyou/sources/notice.php The relevant code: if$option == 'del' $appid = intval$GET'appid'; $db-query"DELETE FROM $tablepremyinvite WHERE appid='$appid' AND touid='$discuzuid'"; showmessage'manyou:done', 'userapp. php? script=notice&action=invite'; elseif$option ==...

[USN-907-1] gnome-screensaver vulnerabilities

=========================================================== Ubuntu Security Notice USN-907-1 March 08, 2010 gnome-screensaver vulnerabilities CVE-2010-0285, CVE-2010-0422 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.1...

Ubuntu 8.10 / 9.04 / 9.10 : gnome-screensaver vulnerabilities (USN-907-1)

It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. CVE-2010-0285 It was discovered that gnome-screensaver did not correctly handle keyboard grab when...

USN-907-1: gnome-screensaver vulnerabilities

It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. CVE-2010-0285 It was discovered that gnome-screensaver did not correctly handle keyboard grab when...

CVE-2010-0422

gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connectin...

FreeBSD Ports: gnome-screensaver

The remote host is missing an update to the system as announced in the referenced advisory. VID 0a82ac0c-1886-11df-b0d1-0015f2db7bde OpenVAS Vulnerability Test $ Description: Auto generated from VID 0a82ac0c-1886-11df-b0d1-0015f2db7bde Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

[USN-898-1] gnome-screensaver vulnerability

=========================================================== Ubuntu Security Notice USN-898-1 February 10, 2010 gnome-screensaver vulnerability CVE-2010-0414 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 This advisor...

Ubuntu Update for gnome-screensaver vulnerability USN-898-1

Ubuntu Update for Linux kernel vulnerabilities USN-898-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8981.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for gnome-screensaver vulnerability USN-898-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-898-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4642

The vulnerability CVE-2009-4642 affects gnome-screensaver 2.26.1, which relies on the gnome-session D-Bus interface to determine session idle time. This occurs even on Xfce environments (e.g., Xubuntu/Mythbuntu), enabling physically proximate attackers to access an unattended workstation where sc...

CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

Code injection

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

USN-898-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not correctly handle monitor hotplugging. An attacker with physical access could cause gnome-screensaver to crash and gain access to the locked session...

openSUSE Security Update : acl (acl-1803)

the setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acl-1803. The text...

openSUSE Security Update : acl (acl-1803)

the setfacl tool followed symbolic links in recursive -R mode even if the --physical -P option was specified CVE-2009-4411. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update acl-1803. The text...