Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It...

FreeBSD Ports: zebra

The remote host is missing an update to the system as announced in the referenced advisory. VID cad045c0-81a5-11d8-9645-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Important: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

Red Hat OpenSSH软件包篡改漏洞

BUGTRAQ ID: 30794 Red Hat Linux是全世界应用最广泛的Linux系统之一。 Red Hat公司的一些计算机系统被入侵，有少量的OpenSSH软件包被篡改，这些被篡改的软件包仅用于签名Red Hat Enterprise Linux 4（i386和x8664架构）及Red Hat Enterprise Linux 5（x8664架构）。如果用户受骗从被入侵的Red Hat软件代码库下载并安装了恶意的OpenSSH软件包的话，就可能导致在系统上安装木马。 使用Red Hat Network升级系统的用户不受影响，只有通过非官方Red Hat订阅渠道获得Red...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in the Red Hat Network Satellite Server Sun Java Runtime Environment. This update has been rated as having low security impact by the Red Hat Security Response Team. This...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

RHEL 4 : seamonkey (RHSA-2008:0599)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2008:0599 advisory. - mozilla: CSS reference counter overflow ZDI-CAN-349 CVE-2008-2785 Note that Nessus has not tested for this issue but has instead relied only on the...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 16th July 2008 The original set of packages for Red Hat Enterprise Linux ...

RHEL 4 / 5 : openldap (RHSA-2008:0583)

Updated openldap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP...

RHEL 5 : kernel (RHSA-2008:0519)

Updated kernel packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

RHEL 2.1 : IBMJava2 (RHSA-2008:0133)

IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...

RHEL 4 : xorg-x11 (RHSA-2008:0503)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0503 advisory. - X.org Record and Security extensions memory corruption CVE-2008-1377 - X.org MIT-SHM extension arbitrary memory read CVE-2008-1379 - X.org...

RHEL 4 / 5 : net-snmp (RHSA-2008:0529)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0529 advisory. - net-snmp SNMPv3 authentication bypass VU877044 CVE-2008-0960 - net-snmp: buffer overflow in perl module's Perl Module snprintvalue...

RHEL 5 : gnome-screensaver (RHSA-2008:0218)

An updated gnome-screensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux FasTrack 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gnome-screensaver is the GNOME project's official screen saver program. A...

RHEL 5 : mysql (RHSA-2008:0364)

"Updated mysql packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a...

libvorbis多个缓冲区溢出漏洞

BUGTRAQ ID: 29206 CVECAN ID: CVE-2008-1419,CVE-2008-1420,CVE-2008-1423 libvorbis是开源的音频音乐编码解码函数库。 libvorbis在处理畸形格式的OGG文件时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果特制的OGG文件包含有codebook维度为0的话，打开该文件就会导致使用libvorbis库的应用程序崩溃、出现死循环或堆溢出。...

RHEL 5 : xen (RHSA-2008:0194)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0194 advisory. - xen xenmon.py / xenbaked insecure temporary file accesss CVE-2007-3919 - QEMU Buffer overflow via crafted net socket listen option...

Important: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment, including kpd...

Squid Web代理缓存arrayShrink()函数远程拒绝服务漏洞

BUGTRAQ ID: 28693 CVECAN ID: CVE-2008-1612 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid的arrayShrink函数操控系统内存中所储存的缓存对象的HTTP头的方式存在漏洞，攻击者可以利用这个漏洞导致squid子进程退出，这会中断已有连接，导致代理服务不可以。 Squid父进程会启动一个新的子进程，因此这种攻击仅会导致临时的拒绝服务。这个漏洞是由于没有正确地修复CVE-2007-6239中所述漏洞而导致的。...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...