Fedora 11 : ctorrent-1.3.4-10.dnh3.3.2.fc11 (2009-8897)

Security update, fixes a stack-based buffer overflow CVE-2009-1759. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Ubuntu 8.04 LTS / 8.10 / 9.04 : libvorbis vulnerability (USN-825-1)

It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. CVE-2009-2663 USN-682-1 provided...

Ubuntu 8.04 LTS / 8.10 / 9.04 : kde4libs, kdelibs vulnerabilities (USN-822-1)

It was discovered that KDE-Libs did not properly handle certain malformed SVG images. If a user were tricked into opening a specially crafted SVG image, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. This issue...

Fedora 11 : neon-0.28.6-1.fc11 (2009-8815)

This update includes the latest release of neon, version 0.28.6. This fixes two security issues: the 'billion laughs' attack against expat could allow a Denial of Service attack by a malicious server. CVE-2009-2473 an embedded NUL byte in a certificate subject name could allow an undetected MITM...

Fedora 10 : perl-Compress-Raw-Bzip2-2.020-1.fc10 (2009-8888)

Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw- Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to...

Solaris 10 (sparc) : 138874-05

SunOS 5.10: Native LDAP, PAM, name-service. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Fedora 11 : libxml-1.8.17-24.fc11 (2009-8582)

This update includes patches from RHEL-3 addressing a number of security vulnerabilities: - CVE-2004-0110 arbitrary code execution via a long URL - CVE-2004-0989 arbitrary code execution via a long URL - CVE-2009-2414 stack consumption DoS vulnerabilities - CVE-2009-2416 use-after-free DoS...

Solaris 8 (x86) : 127722-05

SunOS 5.8x86: kernel patch. Date this patch was last updated by Sun : Apr/11/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Fedora 10 : libxml-1.8.17-24.fc10 (2009-8594)

This update includes patches from RHEL-3 addressing a number of security vulnerabilities: - CVE-2004-0110 arbitrary code execution via a long URL - CVE-2004-0989 arbitrary code execution via a long URL - CVE-2009-2414 stack consumption DoS vulnerabilities - CVE-2009-2416 use-after-free DoS...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : libxml2 vulnerabilities (USN-815-1)

It was discovered that libxml2 did not correctly handle root XML document element DTD definitions. If a user were tricked into processing a specially crafted XML document, a remote attacker could cause the application linked against libxml2 to crash, leading to a denial of service. CVE-2009-2414 ...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : subversion vulnerability (USN-812-1)

Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...

Fedora 11 : apr-1.3.8-1.fc11 (2009-8336)

CVE-2009-2412: allocator alignment fixes Full details here: http://www.apache.org/dist/apr/patches/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 10 : apr-1.3.8-1.fc10 (2009-8360)

CVE-2009-2412: allocator alignment fixes Full details here: http://www.apache.org/dist/apr/patches/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Ubuntu 8.04 LTS / 8.10 / 9.04 : nspr update (USN-810-2)

USN-810-1 fixed vulnerabilities in NSS. This update provides the NSPR needed to use the new NSS. Moxie Marlinspike discovered that NSS did not properly handle regular expressions in certificate names. A remote attacker could create a specially crafted certificate to cause a denial of service via...

Fedora 11 : kernel-2.6.29.6-217.2.3.fc11 (2009-8144)

Fix security bugs: CVE-2009-1895 CVE-2009-2406 CVE-2009-2407 Add -fno- delete-null-pointer-checks gcc compile flag to protect against issues similar to CVE-2009-1897. Fix virtioblk driver bug reported against Fedora 10. iwl3945 wireless driver rfkill fixes. Fix DPMS on some nVidia adapters when...

Fedora 10 : Miro-2.0.5-3.fc10 / blam-1.8.5-13.fc10 / epiphany-2.24.3-9.fc10 / etc (2009-8288)

Update to new upstream Firefox version 3.0.13, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known-vulnerabilities/firefox30.htmlf irefox3.0.13 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

Fedora 10 : xml-security-c-1.5.1-1.fc10 (2009-8121)

Fixes CVE-2009-0217 511915 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Fedora 11 : pdfedit-0.4.3-1.fc11 (2009-7924)

Update to new upstream version 0.4.3 fixing multiple issues: xpdf code base updated to 3.02pl3 patch which fixes several serious remote vulnerabilities - French translation update bug 275 Fix for 33853 Secunia advisory backported from poppler Flattener class implemented bt289 Bugs 248, 256, 285,...

Solaris 10 (x86) : 141931-01

SunOS 5.10x86: libsasl.so.1 patch. Date this patch was last updated by Sun : Jul/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Fedora 10 : znc-0.072-3.fc10 (2009-7937)

No CVE yet, one has been requested. Upgrade to 0.072 of ZNC, fixes security issue in bug 513152 An users data directory traversal flaw was found in the way ZNC used to handle file upload requests via Direct Client Connection DCC /dcc SEND messages. A remote IRC user could issue a /dcc SEND messag...