Fedora Core 2 : kernel-2.6.10-1.8_FC2 (2005-014)

This update rebases the kernel to match the upstream 2.6.10 release, and adds a number of security fixes by means of adding the latest -ac patch. CVE-2004-1235 Paul Starzetz from isec.pl found a problem in the binary format loaders uselib function that could lead to potential priveledge escalatio...

RHEL 3 : gaim (RHSA-2004:604)

An updated gaim package that fixes security issues, fixes various bugs, and includes various enhancements for Red Hat Enterprise Linux 3 is now available. The gaim application is a multi-protocol instant messaging client. A buffer overflow has been discovered in the MSN protocol handler. When...

Debian DSA-088-1 : fml - improper character escaping

The fml a mailing list package as distributed in Debian GNU/Linux 2.2 suffers from a cross-site scripting problem. When generating index pages for list archives the ' characters were not properly escaped for subjects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Important: Red Hat Security Advisory: kernel security update

Updated Itanium kernel packages that fix a number of security issues are now available. The Linux kernel handles the basic functions of the operating system. This kernel updates several important drivers and fixes a number of bugs including potential security vulnerabilities. Paul Starzetz...

RHEL 2.1 : glibc (RHSA-2004:383)

Updated glibc packages that fix a security flaw in the resolver as well as dlclose handling are now available. The GNU libc packages known as glibc contain the standard C libraries used by applications. A security audit of the glibc packages in Red Hat Enterprise Linux 2.1 found a flaw in the...

Fedora Core 2 : kernel-2.6.7-1.494.2.2 (2004-247)

This update kernel for Fedora Core 2 contains the security fixes as found by Paul Starzetz from isec.pl. In addition this kernel contains a significant number of bugfixes that are inherited from the newer kernel.org kernel this release is based on. Note that Tenable Network Security has extracted...

Mandrake Linux Security Advisory : gtk+ (MDKSA-2001:061-1)

A vulnerability exists with the GTK+ toolkit in that the GTKMODULES environment variable allows a local user to enter a directory path to a module that does not necessarily need to be associated with GTK+. With this, an attacker could create a custom module and load it using the toolkit which cou...

Fedora Core 2 : php-4.3.8-2.1 (2004-223)

This update includes the latest release of PHP 4, including fixes for security issues in memory limit handling CVE-2004-0594, and the striptags function CVE-2004-0595. CVE-2004-0595 is not known to be exploitable in the default configuration if using httpd 2.0.50, but can be triggered if the...

DSA-532 libapache-mod-ssl - several vulnerabilities

Bulletin has no description...

Solaris 2.5.1 (x86) : 103739-14

SunOS 5.5.1x86: /usr/sbin/syslogd patch. Date this patch was last updated by Sun : Feb/14/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

RHEL 2.1 : mozilla (RHSA-2003:163)

Updated Mozilla packages that fix various bugs and security issues in previous versions of Mozilla are now available. Mozilla is an open source Web browser. A heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a...

RHEL 2.1 : kernel (RHSA-2003:103)

Updated kernel packages are now available that fix a ptrace-related vulnerability which can lead to elevated root privileges. The Linux kernel handles the basic functions of the operating system. A vulnerability has been found in version 2.4.18 of the kernel. This vulnerability allows a local use...

MDKSA-2004:050 - Updated kernel packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: kernel Advisory ID: MDKSA-2004:050 Date: May 21st, 2004 Affected versions: 10.0, 9.2 Problem Description: Brad Spender discovered an exploitable bug in the cpufreq code in the Linux 2.6 kernel...

DSA-479 linux-kernel-2.4.18-alpha+i386+powerpc - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 431-1] New perl packages fix information leak in suidperl

-------------------------------------------------------------------------- Debian Security Advisory DSA 431-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 1st, 2004 http://www.debian.org/security/faq -...

PostNuke Issues (0.726 && Possibly Older)

Vendor : PostNuke URL : http://www.postnuke.com Version : PostNuke 0.726 Phoenix && Older?? Risk : SQL Injection && XSS Description: Postnuke is a popular Open Source CMS Content Managment System used by millions of people all across the world. SQL Injection: SQL Injection is possible by passing...

[SECURITY] [DSA 241-1] New kdeutils packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 241-1 [email protected] http://www.debian.org/security/ Martin Schulze January 24th, 2003 http://www.debian.org/security/faq -...

rsync update fixes security problems

New rsync packages are available to fix security problems. Here's the information from the Slackware 8.0 ChangeLog: ---------------------------- Mon Mar 11 15:09:26 PST 2002 patches/packages/rsync.tgz: Upgraded to rsync-2.5.3. This fixes two security problems: Make sure that supplementary groups...

rsync update fixes security problems

New rsync packages are available to fix a security problem. Here's the information from the Slackware 8.0 ChangeLog: Fri Jan 25 14:25:51 PST 2002 patches/packages/rsync.tgz: Fixed a security hole by upgrading to rsync-2.4.8pre1. This is the relevant information from the rsync NEWS file: SECURITY...

MDKSA-2001:014-1 MySQL update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: MySQL Date: January 26th, 2001 Original Advisory Date: January 22nd, 2001 Advisory ID: MDKSA-2001:014-1 Affected versions: 7.1, 7.2, Corporate Server 1.0.1 Problem Description: A security problem...