CentOS 5 : Kernel (CESA-2007:0169)

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

tomcat -- multiple vulnerabilities

Apache Project reports: The Apache Tomcat team is proud to announce the immediate availability of Tomcat 4.1.36 stable. This build contains numerous library updates, A small number of bug fixes and two important security fixes...

Security | Oracle Critical Patch Update - April 2007

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Due to the threat posed by a successful attack, Oracle strongly recommends that fixes are applied...

Fedora Core 5 : kernel-2.6.19-1.2288.2.1.fc5 (2007-277)

Updated to kernel 2.6.19.5-rc1 plus additional fixes : http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.4 2.6.19.5-rc1: 4 V4L fixes 3 usbaudio fixes 3 wireless driver fixes 2 IDE driver cable detection fixes NFS bugfix various other fixes CVE-2007-0772: Summary: The Linux kernel befor...

Fedora Core 6 : kernel-2.6.19-1.2911.6.4.fc6 (2007-291)

Updated to kernel 2.6.19.5 plus additional fixes : http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.5 CVE-2007-0772: Summary: The Linux kernel before 2.6.20.1 allows remote attackers to cause a denial of service oops via a...

Security | Oracle Critical Patch Update - January 2007

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. This Critical Patch Update contains 51 new security fixes across all products...

Fedora Core 5 : devhelp-0.11-6.fc5 / epiphany-2.14.3-4.fc5 / seamonkey-1.0.8-0.5.1.fc5 / etc (2007-289)

The remote Fedora Core host is missing one or more security updates : yelp-2.14.3-4.fc5 : - Fri Feb 16 2007 Martin Stransky - 2.14.3-4 - Rebuild against SeaMonkey - Fri Dec 22 2006 Martin Stransky - 2.14.3-3 - Rebuild against SeaMonkey - Tue Nov 14 2006 Martin Stransky - 2.14.3-2 - Rebuild agains...

Trend Micro ServerProtect SPNTSVC.EXE Multiple Stack Buffer Overflow Vulnerabilities

Description Trend Micro ServerProtect is prone to multiple remote stack-based buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting these issues allows attackers to execute...

SUSE-SA:2007:011: acroread

The remote host is missing the patch for the advisory SUSE-SA:2007:011 acroread. The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes: CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to cod...

Moderate: fetchmail security update

6.2.5-6.el4.5 - Fix a KPOP support regression Related: 221985 223661 6.2.5-6.el4.4 - Fix V2,V3,V4 of CAN-2006-5867 Resolves: 221985 6.2.5-6.el4.3 - Fix CAN-2005-4348 176266 - Add BuildRequires: gettext-devel 164351 6.2.5-6.el4.1 - Fix CAN-2005-2335 163816, patch by Ludwig Nussel...

Fedora Core 5 : kernel-2.6.16-1.2107_FC5 (2006-499)

An update to the latest upstream -stable snapshot 2.6.16.13 Among quite a few bug-fixes, are two security related fixes : Don't allow a backslash in a path component CVE-2006-1863 NETFILTER: SCTP conntrack: fix infinite loop CVE-2006-1527 Detailed changelogs of the last few point releases can be...

Fedora Core 5 : ruby-1.8.4-8.fc5 (2006-849)

Thu Jul 20 2006 Akira TAGOH - 1.8.4-8 - security fixes CVE-2006-3694 - ruby-1.8.4-fix-insecure-dir-operation.patch : - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. 199538 - ruby-1.8.4-fix-alias-safe-level.patch: fixed to...

Fedora Core 4 : ruby-1.8.4-3.fc4 (2006-842)

Thu Jul 20 2006 Akira TAGOH - 1.8.4-3 - security fixes CVE-2006-3694 - ruby-1.8.4-fix-insecure-dir-operation.patch : - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. 199538 - ruby-1.8.4-fix-alias-safe-level.patch: fixed to...

Fedora Core 5 : wireshark-0.99.4-1.fc5 (2006-1141)

Wed Nov 1 2006 Radek Vokal 0.99.4-1.fc5 - upgrade to 0.99.4, fixes multiple security issues - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a NULL pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibly others could...

Fedora Core 4 : kernel-2.6.16-1.2111_FC4 (2006-573)

This update rebases to the latest upstream -stable release 2.6.16.17, where a number of security problems have been fixed, notably : SCTP: Validate the parameter length in HB-ACK chunk CVE-2006-1857 SCTP: Respect the real chunk length when walking parameters CVE-2006-1858 fs/locks.c: Fix leaseini...

Fedora Core 5 : kernel-2.6.16-1.2122_FC5 (2006-572)

This update rebases to the latest upstream -stable release 2.6.16.17, where a number of security problems have been fixed, notably : SCTP: Validate the parameter length in HB-ACK chunk CVE-2006-1857 SCTP: Respect the real chunk length when walking parameters CVE-2006-1858 fs/locks.c: Fix leaseini...

Fedora Core 4 : kernel-2.6.16-1.2107_FC4 (2006-500)

An update to the latest upstream -stable snapshot 2.6.16.13 Among quite a few bug-fixes, are two security related fixes : Don't allow a backslash in a path component CVE-2006-1863 NETFILTER: SCTP conntrack: fix infinite loop CVE-2006-1527 Detailed changelogs of the last few point releases can be...

CVE-2006-6834

Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to 1 "unneeded legacy functions" and 2 "Several low level security fixes."...

CVE-2006-6834

CVE-2006-6834 describes multiple vulnerabilities in Joomla! before 1.0.12. Connected records confirm a cross-site scripting issue in Joomla! (per JVNDB-2006-000852) and note multiple remote vulnerabilities with unspecified impact in older Joomla! releases. The OpenVAS and VuXML entries reiterate ...

ContentNow 1.30 - Local File Inclusion / Arbitrary File Upload/Delete

r0ut3r Presents... Another r0ut3r discovery! ContentNow 1.30 Local File Include & Arbitrary File Upload/Delete Vulnerabilities Software: ContentNow 1.30 Vulnerabilities Vendor: http://www.contentnow.mf4k.de/ Released: 2006/11/13 Discovered By: r0ut3r writ3r at gmail.com...