Fedora 9 : ipsec-tools-0.7.2-1.fc9 (2009-4291)

Minor version update from upstream fixing remote DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

RedHat Security Advisory RHSA-2009:0476

The remote host is missing updates announced in advisory RHSA-2009:0476. Pango is a library used for the layout and rendering of internationalized text. Will Drewry discovered an integer overflow flaw in Pango's pangoglyphstringsetsize function. If an attacker is able to pass an arbitrarily long...

RedHat Security Advisory RHSA-2009:0476

The remote host is missing updates announced in advisory RHSA-2009:0476. Pango is a library used for the layout and rendering of internationalized text. Will Drewry discovered an integer overflow flaw in Pango SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from...

RedHat Security Advisory RHSA-2009:0473

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0473. This update fixes the following security issues: a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POS...

RedHat Security Advisory RHSA-2009:0474

The remote host is missing updates announced in advisory RHSA-2009:0474. acpid is a daemon that dispatches ACPI Advanced Configuration and Power Interface events to user-space programs. Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw in the acpid daemon...

RedHat Security Advisory RHSA-2009:0474

The remote host is missing updates announced in advisory RHSA-2009:0474. acpid is a daemon that dispatches ACPI Advanced Configuration and Power Interface events to user-space programs. Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw in the acpid daemon's error handling...

RedHat Security Advisory RHSA-2009:0473

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0473. This update fixes the following security issues: a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POS...

RedHat Security Advisory RHSA-2009:0457

The remote host is missing updates announced in advisory RHSA-2009:0457. libwmf is a library for reading and converting Windows Metafile Format WMF vector graphics. libwmf is used by applications such as GIMP and ImageMagick. A pointer use-after-free flaw was found in the GD graphics library...

RedHat Security Advisory RHSA-2009:0457

The remote host is missing updates announced in advisory RHSA-2009:0457. libwmf is a library for reading and converting Windows Metafile Format WMF vector graphics. libwmf is used by applications such as GIMP and ImageMagick. A pointer use-after-free flaw was found in the GD graphics library...

RedHat Security Advisory RHSA-2009:0458

The remote host is missing updates announced in advisory RHSA-2009:0458. GPdf is a viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in GPdf SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and ar...

RedHat Security Advisory RHSA-2009:0459

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0459. Security fixes: a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POSIX lock was incorrectly created...

RedHat Security Advisory RHSA-2009:0451

The remote host is missing updates announced in advisory RHSA-2009:0451. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a logic error was found in the dosetlk function of the Linux kernel Network...

RedHat Security Advisory RHSA-2009:0458

The remote host is missing updates announced in advisory RHSA-2009:0458. GPdf is a viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in GPdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execu...

RedHat Security Advisory RHSA-2009:0449

The remote host is missing updates announced in advisory RHSA-2009:0449. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in the processing of malformed web content. A web page containing malicious content could...

RedHat Security Advisory RHSA-2009:0459

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0459. Security fixes: a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POSIX lock was incorrectly created...

RedHat Security Advisory RHSA-2009:0444

The remote host is missing updates announced in advisory RHSA-2009:0444. The giflib packages contain a shared library of functions for loading and saving GIF image files. This library is API and ABI compatible with libungif, the library that supported uncompressed GIF image files while the Unisys...

RedHat Security Advisory RHSA-2009:0446

The remote host is missing updates announced in advisory RHSA-2009:0446. modjk is an Apache Tomcat connector that allows Apache Tomcat and the Apache HTTP Server to communicate with each other. An information disclosure flaw was found in modjk. In certain situations, if a faulty client set the...

RedHat Security Advisory RHSA-2009:0436

The remote host is missing updates announced in advisory RHSA-2009:0436. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

Firefox nsTextFrame::ClearTextRun()函数远程内存破坏漏洞

BUGTRAQ ID: 34743 CVECAN ID: CVE-2009-1313 Firefox是一款流行的开放源码WEB浏览器。 Firefox的nsTextFrame::ClearTextRun函数中存在内存破坏漏洞，如果用户受骗打开了包含有恶意内容的网页就会导致浏览器崩溃。安装了HTML Validator附件组件的用户尤其受这个漏洞的影响。 Mozilla Firefox 3.0.9 Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...