Fedora 17 : perl-YAML-LibYAML-0.38-2.fc17 (2012-4871)

This update fixes various format string vulnerabilities CVE-2012-1152, CPAN RT46507. The Fedora 15 and Fedora 16 builds also include some bug-fixes from upstream : - Fix for broken deparse test - Fix LoadFile on empty file failure Note that Tenable Network Security has extracted the preceding...

Fedora 15 : perl-YAML-LibYAML-0.38-2.fc15 (2012-4997)

This update fixes various format string vulnerabilities CVE-2012-1152, CPAN RT46507. The Fedora 15 and Fedora 16 builds also include some bug-fixes from upstream : - Fix for broken deparse test - Fix LoadFile on empty file failure Note that Tenable Network Security has extracted the preceding...

Fedora 16 : perl-YAML-LibYAML-0.38-2.fc16 (2012-5035)

This update fixes various format string vulnerabilities CVE-2012-1152, CPAN RT46507. The Fedora 15 and Fedora 16 builds also include some bug-fixes from upstream : - Fix for broken deparse test - Fix LoadFile on empty file failure Note that Tenable Network Security has extracted the preceding...

[SECURITY] [DSA 2432-1] libyaml-libyaml-perl security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2432-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 12, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2432-1] libyaml-libyaml-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2432-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 12, 2012 http://www.debian.org/security/faq -...

DSA-2431-1 libdbd-pg-perl - format string vulnerabilities

Bulletin has no description...

Gentoo Security Advisory GLSA 201201-06 (iscsitarget)

The remote host is missing updates announced in advisory GLSA 201201-06. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandriva Update for php MDVSA-2011:052 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:052 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDVSA-2011:053 (php)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : php (MDVSA-2011:053)

Multiple vulnerabilities has been identified and fixed in php : The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service applicatio...

CVE-2011-0173

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

CVE-2011-0173

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

CVE-2011-0173

CVE-2011-0173 describes multiple format-string vulnerabilities in AppleScript and AppleScript Studio dialogs (display dialog/display alert) on Mac OS X prior to 10.6.7. The issues can allow a context-dependent attacker to cause an arbitrary code execution or a denial of service (application crash...

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

Mandriva Linux Security Advisory : silc-toolkit (MDVSA-2009:235)

Multiple vulnerabilities was discovered and corrected in silc-toolkit : Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing SILC Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format...

CVE-2010-2451

KVIrc (DCC) has multiple vulnerabilities tracked as CVE-2010-2451 and CVE-2010-2452 in the DCC functionality of KVIrc 3.x/4.x. The issues are described as remotely exploitable format-string vulnerabilities (and, per GLSA, a directory-traversal issue) that could allow remote attackers to execute a...

CVE-2010-1376

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...

CVE-2010-1376

CVE-2010-1376 involves multiple format string vulnerabilities in Apple Mac OS X 10.6’s Network Authorization. According to the connected sources, the flaw resides in how format string specifiers are processed for AFP/CIFS/SMB URLs, potentially allowing a remote attacker to execute arbitrary code ...

CVE-2010-1376

Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...