USN-617-2: Samba regression

USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-10)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

USN-612-10: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

[SECURITY] [DSA 1553-2] New ikiwiki packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1553-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 01, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1569-2 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 1569-2. OpenVAS Vulnerability Test $Id: deb15692.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1569-2 cacti Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Design/Logic Flaw

uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn regression (USN-612-6)

USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...

USN-612-6: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and keys generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS, multi-client/server mode, and specifying a user or group which caused OpenVPN to not start...

kernel security and bug fix update

2.6.9-67.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

[SECURITY] [DSA 1569-2] New cacti packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1569-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 06, 2008 http://www.debian.org/security/faq -...

thunderbird security update

1.5.0.12-11.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-11 - Update patchset to fix regression as per 1.8.1.14...

firefox security update

1.5.0.12-15.el51.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-15 - Update patchset to fix regressions as per 1.8.1.14...

squid security update

2.6.STABLE6-5.el51.3 - fix for 439801 - regression introduced in fix for CVE-2007-6239 - Resolves: 439992...

squid: regression in SQUID-2007:2 / CVE-2007-6239

The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...

Ubuntu 6.06 LTS : mysql-dfsg-5.0 regression (USN-588-2)

USN-588-1 fixed vulnerabilities in MySQL. In fixing CVE-2007-2692 for Ubuntu 6.06, additional improvements were made to make privilege checks more restictive. As a result, an upstream bug was exposed which could cause operations on tables or views in a different database to fail. This update fixe...

thunderbird security update

1.5.0.12-10.el4.0.1 - Add thunderbird-oracle-default-prefs.js for errata rebuild 1.5.0.12-10 - Regression fixes 1.5.0.12-9 - Update to latest snapshot of Mozilla 1.8.0 branch - Add patches for backported fixes from 1.8.1.13...

Debian Security Advisory DSA 1506-2 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 1506-2. OpenVAS Vulnerability Test $Id: deb15062.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1506-2 iceape Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1506-2] New iceape packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1506-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 20, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1485-2] New icedove packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1485-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 17, 2008 http://www.debian.org/security/faq -...