9480 matches found
trac -- potential DOS vulnerability
Trac development team reports: 0.11.2 is a new stable maintenance release. It contains several security fixes and everyone is recommended to upgrade their installations. Bug fixes: Fixes potential DOS vulnerability with certain wiki markup...
Fedora 8 : net-snmp-5.4.1-8.fc8 (2008-9362)
Mon Jun 23 2008 Jan Safranek 5.4.1-8 - explicitly require the right version and release of net-snmp and net-snmp-libs 451225 - fix CVE-2008-4309 - Tue Jun 10 2008 Jan Safranek 5.4.1-7 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4.1-6 - fixing...
Fedora 9 : drupal-6.6-1.fc9 (2008-9213)
Update to 6.6, security fixes: SA-2008-067 http://drupal.org/node/324824 ------------DESCRIPTION------------ Multiple vulnerabilities and weaknesses were discovered in Drupal. ------------FILE INCLUSION------------ On a server configured for IP-based virtual hosts, Drupal may be caused to include...
Fedora 8 : drupal-5.12-1.fc8 (2008-9170)
Update to 5.12, security fixes: SA-2008-067 http://drupal.org/node/324824 ------------DESCRIPTION------------ Multiple vulnerabilities and weaknesses were discovered in Drupal. ------------FILE INCLUSION------------ On a server configured for IP-based virtual hosts, Drupal may be caused to includ...
openSUSE 10 Security Update : kernel (kernel-5700)
The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...
Fedora 9 : drupal-6.5-1.fc9 (2008-8852)
Update to 6.5, security fixes: SA-2008-047 http://drupal.org/node/318706 - File upload access bypass unprivileged file attach - Access rules bypass - BlogAPI access bypass Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to...
Fedora 8 : drupal-5.11-1.fc8 (2008-8905)
Update to 5.11, security fixes: SA-2008-047 http://drupal.org/node/318706 - File upload access bypass file disclosure - Access rules bypass - BlogAPI access bypass - Node validation bypass Remember to log in to your site as the admin user before upgrading this package. After upgrading the package...
Microsoft Internet Explorer HTML Objects Uninitialized Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...
CPUOct2008 Advisory
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...
SuSE 10 Security Update : the Linux Kernel (x86) (ZYPP Patch Number 5566)
This update of the SUSE Linux Enterprise 10 Service Pack 1 kernel contains lots of bugfixes and several security fixes : - Added missing capability checks in sbniioctl. CVE-2008-3525 - On AMD64 some string operations could leak kernel information into userspace. CVE-2008-0598 - Added range checki...
RHEL 5 : kernel (RHSA-2008:0885)
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
Mac OS X 10.5.x < 10.5.5 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.5. Mac OS X 10.5.5 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid34211;...
Fedora 8 : drupal-5.10-1.fc8 (2008-7467)
Update to 5.10, security fixes: SA-2008-047 http://drupal.org/node/295053 - multiple XSS issues CVE-2008-3740, CVE-2008-3741 - unrestricted upload vulnerability CVE-2008-3742 - multiple CSRF issues CVE-2008-3744 Remember to log in to your site as the admin user before upgrading this package. Afte...
Fedora 9 : drupal-6.4-1.fc9 (2008-7626)
Update to 6.4, security fixes: SA-2008-047 http://drupal.org/node/295053 - multiple XSS issues CVE-2008-3740, CVE-2008-3741 - unrestricted upload vulnerability CVE-2008-3742 - multiple CSRF issues CVE-2008-3743, CVE-2008-3744 - upload module privilege escalation CVE-2008-3745 Remember to log in t...
Fedora 8 : thunderbird-2.0.0.16-1.fc8 (2008-6706)
Updated thunderbird packages that fix several security issues are now available for Fedora 8. Several flaws were found in the processing of malformed HTML content. An HTML mail containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user runnin...
Moderate: Red Hat Security Advisory: Updated kernel packages for Red Hat Enterprise Linux 4.7
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux 4. This is the seventh regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel...
CPUJul2008 Advisory
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are cumulative, except as noted below, but each advisory describes only th...
ruby security update
1.8.5-5.el52.3 - CVE-2008-2376: Integer overflow in rbaryfill. 1.8.5-5.el52.1 - security fixes. 451928 - CVE-2008-2662: Integer overflow in rbstrbufappend. - CVE-2008-2663: Integer overflow in rbarystore. - CVE-2008-2664: Unsafe use of alloca in rbstrformat. - CVE-2008-2725: Integer overflow in...
