RHEL 6 : flash-plugin (RHSA-2010:0867)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0867 advisory. - flash-plugin: security bulletin APSB10-26 CVE-2010-3636, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,...

RHEL 6 : pidgin (RHSA-2010:0890)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0890 advisory. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple NULL...

RHEL 6 : krb5 (RHSA-2010:0863)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0863 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted...

RHEL 6 : kernel (RHSA-2010:0842)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Missi...

RHEL 6 : freetype (RHSA-2010:0889)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0889 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Mozilla Firefox LookupGetterOrSetter函数悬停指针漏洞

BUGTRAQ ID: 44249 CVE ID: CVE-2010-3183 Firefox是一款非常流行的开源WEB浏览器。 Firefox的js3250.dll库中存在安全漏洞。在创建和删除JavaObject时，由于没有对LookupGetterorSetter 函数执行过滤检查，可能导致向JSValueToId函数传送悬停指针。远程攻击者可以利用这个漏洞以SYSTEM用户权限执行任意代码。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x...

RHEL 4 / 5 : quagga (RHSA-2010:0785)

Updated quagga packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

RHEL 4 / 5 : thunderbird (RHSA-2010:0780)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0780 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content...

RHEL 5 : java-1.6.0-openjdk (RHSA-2010:0768)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0768 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. defaultReadObject of the...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix two security issues and three bugs are now available for Red Hat Enterprise MRG 1.2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 4 : cups (RHSA-2010:0755)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0755 advisory. - xpdf/poppler: ImageStream::ImageStream integer overflow CVE-2009-3609 - xpdf: uninitialized Gfx::parser pointer dereference CVE-2010-3702...

Important: Red Hat Security Advisory: xpdf security update

An updated xpdf package that fixes one security issue is now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 4 : kernel (RHSA-2010:0718)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0718 advisory. - kernel: 64-bit Compatibility Mode Stack Pointer Underflow CVE-2010-3081 Note that Nessus has not tested for this issue but has instead relied only ...

RHEL 5 : kernel (RHSA-2010:0723)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0723 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

RHEL 5 : kernel (RHSA-2010:0704)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0704 advisory. - kernel: 64-bit Compatibility Mode Stack Pointer Underflow CVE-2010-3081 Note that Nessus has not tested for this issue but has instead relied only ...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 5 : sudo (RHSA-2010:0675)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2010:0675 advisory. - sudo: incorrect handling of RunAs specification with both user and group lists CVE-2010-2956 Note that Nessus has not tested for this issue but has...

Moderate: Red Hat Security Advisory: qspice-client security update

An updated qspice-client package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Linux kernel 2.6.x KVM Intel VT-x扩展空指针引用拒绝服务漏洞

BUGTRAQ ID: 42582 CVE ID: CVE-2010-0435 Linux Kernel是开放源码操作系统Linux所使用的内核。 主机系统上的处理器启用了Intel VT-x扩展时存在空指针引用漏洞。如果模拟器受骗模拟了mov to/from DR指令，由于没有初始化kvmx86ops-set|getdr，可能会触发这个空指针引用，导致主机崩溃。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://patchwork.kernel.org/patch/95725/...