openssl: Security update (2 CVEs)

The openssl package has been rebuilt and was uploaded to the Barrier Breaker 14.07 repository due to multiple security issues. VERSION 1.0.2e-1 = 1.0.2f-1 CHANGELOG Fri, 29 Jan 2016 13:25:24 +0000 b763ba2 Openssl: update to 1.0.2f fixes CVE-2016-0701, CVE-2015-3197 CHANGES...

Users Unable to Connect After Rebuilding Licensing Server With qfarm Showing Load of 20000

After rebuilding the XenApp licensing server users are unable to connect. XenApp Licensing installed without issueand its services are running. Running qfarm /load on any of the XenApp servers in the farm shows a load of 20000 meaning the servers are unable to acquire a connection license for the...

Updated rsync package fixes security vulnerability

Updated rsync package fixes security vulnerability: Ryan Finnie discovered that rsync 3.1.0 contains a denial of service issue when attempting to authenticate using a nonexistent username. A remote attacker could use this flaw to cause a denial of service via CPU consumption CVE-2014-2855. The...

Updated php packages fix multiple vulnerabilities

Updated php packages fix security vulnerabilities: The unserialize function in PHP before 5.4.30 and 5.5.14 has a Type Confusion issue related to the SPL ArrayObject and SPLObjectStorage Types CVE-2014-3515. It was discovered that PHP is vulnerable to a heap-based buffer overflow in the DNS TXT...

Mandriva Linux Security Advisory : php (MDVSA-2014:115)

Updated php packages fix security vulnerabilities : A flaw was found in the way file's Composite Document Files CDF format parser handle CDF files with many summary info entries. The cdfunpacksummaryinfo function unnecessarily repeatedly read the info from the same offset. This led to many...

Updated php packages fix CVE-2014-0237-8

Updated php packages fix security vulnerabilities: A flaw was found in the way file's Composite Document Files CDF format parser handle CDF files with many summary info entries. The cdfunpacksummaryinfo function unnecessarily repeatedly read the info from the same offset. This led to many...

MGASA-2014-0178 Updated php packages fix security vulnerability

Updated php packages fix security vulnerability: The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a...

Updated php packages fix security vulnerability

Updated php packages fix security vulnerability: The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a...

Mandriva Linux Security Advisory : php (MDVSA-2013:016)

Multiple vulnerabilities has been discovered and corrected in php : PHP does not validate the configration directive soap.wsdlcachedir before writing SOAP wsdl cache files to the filesystem. Thus an attacker is able to write remote wsdl files to arbitrary locations CVE-2013-1635. PHP allows the u...

Mandriva Linux Security Advisory : mozilla (MDVSA-2011:133-1)

Security issues were identified and fixed in mozilla firefox and thunderbird : As more information has come to light about the attack on the DigiNotar Certificate Authority we have improved the protections added in MFSA 2011-34. The main change is to add explicit distrust to the DigiNotar root...

Mandriva Linux Security Advisory : mozilla (MDVSA-2011:129)

Security issues were identified and fixed in mozilla firefox and thunderbird : Google Chrome user alibo encountered an active man in the middle MITM attack on secure SSL connections to Google servers. The fraudulent certificate was mis-issued by DigiNotar, a Dutch Certificate Authority. DigiNotar...

Fedora 14 : firefox-3.6.20-1.fc14 / galeon-2.0.7-42.fc14.1 / gnome-python2-extras-2.25.3-32.fc14.1 / etc (2011-11084)

Update to new upstream Firefox version 3.6.20 and Thunderbird version 3.1.12, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/announce/2011/mfsa2011-3 0.html - http://www.mozilla.org/security/announce/2011/mfsa2011 -32.html This update also...

Fedora 14 : moin-1.9.3-4.fc14 (2011-2156)

Thu Feb 24 2011 Ville-Pekka Vainio - 1.9.3-4 - Fixes CVE-2011-1058 rhbz679523 - Tue Feb 8 2011 Fedora Release Engineering - 1.9.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora15MassRebuild Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 14 : collectd-4.9.4-1.fc14 (2010-19031)

Fri Dec 17 2010 Alan Pevec 4.9.4-1 - New upstream version 4.9.4 http://collectd.org/news.shtmlnews86 - fixes CVE-2010-4336 rhbz663799 - Wed Sep 29 2010 jkeating - 4.9.2-1.1 - Rebuilt for gcc bug 634757 - Tue Jun 8 2010 Alan Pevec 4.9.2-1 - New upstream version 4.9.2...

Mandriva Linux Security Advisory : php (MDVSA-2009:303)

Some vulnerabilities were discovered and corrected in php-5.2.11 : The tempnam function in ext/standard/file.c in PHP 5.2.11 and earlier, and 5.3.x before 5.3.1, allows context-dependent attackers to bypass safemode restrictions, and create files in group-writable or world-writable directories, v...

Fedora 11 : automake15-1.5-29.fc11.1 (2010-1174)

Tue Feb 16 2010 Karsten Hopp 1.5-29.1 - update CVE-2009-4029 patch - Tue Feb 9 2010 Karsten Hopp 1.5-29 - add disttag - Tue Feb 9 2010 Karsten Hopp 1.5-28 - add fix for CVE-2009-4029 - add buildrequirement flex - Fri Jul 24 2009 Fedora Release Engineering - 1.5-27 - Rebuilt for...

[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and 13.0 to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/samba-3.2.15-i486-2slack13.0.txz: Rebuilt. Patched a buffer overflow in smbd that allows remote...

Mandriva Update for logcheck MDVA-2010:028 (logcheck)

Check for the Version of logcheck OpenVAS Vulnerability Test Mandriva Update for logcheck MDVA-2010:028 logcheck Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Security Advisory MDVSA-2009:290 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:290. OpenVAS Vulnerability Test $Id: mdksa2009290.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:290 firefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:236)

Security issues were identified and fixed in firefox 3.0.x : Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vecto...