RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

RedHat Security Advisory RHSA-2009:1688

The remote host is missing updates announced in advisory RHSA-2009:1688. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Cond...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 5.2 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the...

CentOS Security Advisory CESA-2009:1651 (ntp)

The remote host is missing updates to ntp announced in advisory CESA-2009:1651. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Adobe Flash Player ActionScript异常处理器整数溢出漏洞

BUGTRAQ ID: 37267 CVE ID: CVE-2009-3799 Flash Player是一款非常流行的FLASH播放器。 Flash Player在生成ActionScript异常处理器期间过大的exceptioncount值会在Verifier::parseExceptionHandlers函数中触发整数溢出，导致以当前登录用户的权限执行任意代码。 Adobe Flash Player 10.x Adobe AIR 1.5.2 厂商补丁： Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CentOS Security Advisory CESA-2009:1625 (expat)

The remote host is missing updates to expat announced in advisory CESA-2009:1625. CESA-2009:1625 66468 6 $Id: ovcesa20091625.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1625 expat Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 Extras and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox...

RHEL 4 / 5 : expat (RHSA-2009:1625)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1625 advisory. Expat is a C library written by James Clark for parsing XML documents. Two buffer over-read flaws were found in the way Expat handled...

Moderate: Red Hat Security Advisory: xerces-j2 security update

Updated xerces-j2 packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xerces-j2 packages provide the Apache Xerces2 Java Parser, a high-performance XML parser....

Critical: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs packages provide libraries for the K Desktop Environment KDE. A buffer...

CUPS文件描述符处理远程拒绝服务漏洞

BUGTRAQ ID: 37048 CVE ID: CVE-2009-3553 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的scheduler/select.c文件中的cupsdDoSelect函数在处理其文件描述符处理接口中引用的方式存在释放后使用错误，远程攻击者可以通过以特殊方式查询特定打印机的当前打印任务列表导致cupsd崩溃。 Easy Software Products CUPS 1.3.7...

RedHat Security Advisory RHSA-2009:1584

The remote host is missing updates to OpenJDK announced in advisory RHSA-2009:1584. For the details on the issues addressed in this update, please visit the referenced security advisories. All users of java-1.6.0-openjdk are advised to upgrade to these updated packages, which resolve these issues...

RedHat Security Advisory RHSA-2009:1584

The remote host is missing updates to OpenJDK announced in advisory RHSA-2009:1584. For the details on the issues addressed in this update, please visit the referenced security advisories. All users of java-1.6.0-openjdk are advised to upgrade to these updated packages, which resolve these issues...

Apache mod_proxy_ftp模块空指针引用拒绝服务漏洞

BUGTRAQ ID: 36260 CVE ID: CVE-2009-3094 Apache HTTP Server是一款流行的Web服务器。 Apache的modproxyftp模块中modules/proxy/proxyftp.c文件的approxyftphandler函数中存在空指针引用漏洞，正在被代理的恶意FTP服务器可以通过发送特制的EPSV或PASV命令回复导致httpd子进程崩溃，造成有限的拒绝服务。 Apache Group Apache 2.2.x 厂商补丁： Apache Group ------------...

RedHat Security Advisory RHSA-2009:1548

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1548. For details on the issues addressed in this update, please visit the referenced security advisories. Users should upgrade to these updated packages, which contain backported patches to correct these issues. The...

RedHat Security Advisory RHSA-2009:1561

The remote host is missing updates announced in advisory RHSA-2009:1561. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. Multiple flaws were...

RedHat Security Advisory RHSA-2009:1541

The remote host is missing updates announced in advisory RHSA-2009:1541. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a NULL pointer dereference flaw was found in each of the following functions in the Linux...

Linux Kernel r8169驱动Out-of-IOMMU错误本地拒绝服务漏洞

BUGTRAQ ID: 36706 CVECAN ID: CVE-2009-3613 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Realtek r8169以太网驱动中存在漏洞，pciunmapsingle中的内存泄露可能导致耗尽IOMMU空间和系统崩溃。本地网络中的攻击者可以通过ping操作发送巨型帧触发out-of-IOMMU错误，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RHEL 4 / 5 : wget (RHSA-2009:1549)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1549 advisory. - wget: incorrect verification of SSL certificate with NUL in name CVE-2009-3490 Note that Nessus has not tested for this issue but has instead...