Security fix for the ALT Linux 9 package apache2 version 2.2.9-alt1

July 8, 2008 Aleksey Avdeev 2.2.9-alt1 - 2.2.9 - Security fixes CVE-2008-2364, CVE-2007-6420...

Security fix for the ALT Linux 8 package apache2 version 2.2.9-alt1

July 8, 2008 Aleksey Avdeev 2.2.9-alt1 - 2.2.9 - Security fixes CVE-2008-2364, CVE-2007-6420...

Fedora 9 : ruby-1.8.6.230-1.fc9 (2008-5664)

Tue Jun 24 2008 Akira TAGOH - 1.8.6.230-1 - New upstream release. - Security fixes. 452294. - CVE-2008-1891: WEBrick CGI source disclosure. - CVE-2008-2662: Integer overflow in rbstrbufappend. - CVE-2008-2663: Integer overflow in rbarystore. - CVE-2008-2664: Unsafe use of alloca in rbstrformat. -...

Fedora 8 : ruby-1.8.6.230-1.fc8 (2008-5649)

Tue Jun 24 2008 Akira TAGOH - 1.8.6.230-1 - New upstream release. - Security fixes. 452293 - CVE-2008-1891: WEBrick CGI source disclosure. - CVE-2008-2662: Integer overflow in rbstrbufappend. - CVE-2008-2663: Integer overflow in rbarystore. - CVE-2008-2664: Unsafe use of alloca in rbstrformat. -...

Fedora 9 : php-5.2.6-2.fc9 (2008-3606)

This release updates PHP to the latest upstream version 5.2.6, fixing multiple bugs and security issues. See upstream release notes for further details: http://www.php.net/releases/526.php It was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which a...

Fedora 8 : freetype-2.3.5-4.fc8 (2008-5430)

This update backports security fixes from upstream version 2.3.6 - CVE-2008-1806, CVE-2008-1807 and CVE-2008-1808. For further details, see: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=7 15 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=7 16...

bind security, bug fix, and enhancement update

30:9.3.4-6.P1 - final 5.2 version - minor changes in initscript - improved patches for 250744 and 250901 30:9.3.4-5.P1 - improved patch to handle D-BUS races 240876 - updated named.root zone to affect root IPv6 migration 30:9.3.4-4.P1 - improved fix for 253537, posttrans script is now used - do n...

Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...

RHEL 5 : mysql (RHSA-2008:0364)

"Updated mysql packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a...

RHEL 5 : bind (RHSA-2008:0300)

"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...

Fedora 7 : kernel-2.6.23.17-88.fc7 (2008-4043)

Update to Linux kernel version 2.6.23.17: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.16 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.17 Additionally, following security fixes were backported: CVE-2008-1669 - SMP ordering hole in fcntlsetlk CVE-2008-1615 -...

Fedora 9 : kernel-2.6.25.3-18.fc9 (2008-3949)

Update to Linux kernel verion 2.6.25.1, 2.6.25.2, 2.6.25.3: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.1 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 Security fixes: CVE-2008-1669 2.6.25.2 - SMP...

Fedora 8 : kernel-2.6.24.7-92.fc8 (2008-3873)

Update to Linux kernel verion 2.6.24.6, 2.6.24.7: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.6 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24.7 Security fixes: CVE-2008-1375 2.6.24.6 - dnotify/close race CVE-2008-1675 2.6.24.6 - tehuti driver permissions and regist...

[slackware-security] php

New php packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. Note that PHP5 is not the default PHP for Slackware 10.2 or 11.0 those use PHP4, so if your PHP code is not ready for PHP5, don't upgrade until it is or you'll by definition run into problems...

CPU Apr 2008

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...

Security fix for the ALT Linux 9 package clamav version 0.93-alt1

April 15, 2008 Victor Forsyuk 0.93-alt1 - 0.93 contains security fixes: CVE-2008-1100, CVE-2008-1387...

SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 5128)

This update fixes multiple bugs in apache : - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module. CVE-2008-0005 - cross-site scripting problem in the error page for status code 41...

Mac OS X Multiple Vulnerabilities (Security Update 2008-002)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. This update contains several security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0;...

Solaris 8 (sparc) : 136987-03

Sun Java Web Console 3.0.2: Security fixes. Date this patch was last updated by Sun : Jun/11/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Fedora 8 : roundup-1.4.4-1.fc8 (2008-2471)

Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1 - new upstream version with security fixes bz436546 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2 - new upstream version - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1 - new upstream version Note that Tenable Network Security has extracted the...