Fedora 15 : perl-FCGI-0.74-1.fc15 (2011-13230)

This update to the latest upstream version resolves CVE-2011-2766 - stop leaking information across requests when using the deprecated and undocumented old FCGI interface. This update resolves CVE-2011-2766 and includes several additional fixes. See the upstream changelog for further details. Not...

Fedora 16 : zabbix-1.8.7-2.fc16 (2011-12457)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

Fedora 14 : perl-FCGI-0.74-1.fc14 (2011-13236)

This update to the latest upstream version resolves CVE-2011-2766 - stop leaking information across requests when using the deprecated and undocumented old FCGI interface. This update resolves CVE-2011-2766 and includes several additional fixes. See the upstream changelog for further details. Not...

CVE-2011-3744

HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files...

CentOS 5 : rsync (CESA-2011:0999)

An updated rsync package that fixes one security issue, several bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Fedora 15 : zabbix-1.8.7-2.fc15 (2011-12485)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

Fedora 14 : zabbix-1.8.7-2.fc14 (2011-12489)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

CVE-2011-3421

Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...

Fedora 14 : mongoose-3.0-2.fc14 (2011-11825)

Add upstream patch to fix CVE-2011-2900 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

httpd security update

2.2.15-9.0.1.el61.2 - replace index.html with Oracle's index page - update vstring in specfile 2.2.15-9.2, - updated patch for CVE-2011-3192 from upstream 733062 2.2.15-9.1 - fix 733062 - backported CVE-2011-3192 fix from httpd trunk...

Fedora 16 : firefox-6.0-1.fc16 / mozvoikko-1.9.0-6.fc16 / thunderbird-6.0-1.fc16 / etc (2011-11046)

Update to new upstream Firefox version 6.0 and Thunderbird version 6.0, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/announce/2011/mfsa2011-2 9.html - http://www.mozilla.org/security/announce/2011/mfsa2011 -31.html This update also includ...

CVE-2011-2823

Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box...

Fedora 14 : firefox-3.6.20-1.fc14 / galeon-2.0.7-42.fc14.1 / gnome-python2-extras-2.25.3-32.fc14.1 / etc (2011-11084)

Update to new upstream Firefox version 3.6.20 and Thunderbird version 3.1.12, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/announce/2011/mfsa2011-3 0.html - http://www.mozilla.org/security/announce/2011/mfsa2011 -32.html This update also...

MS11-058: Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) (remote check)

The version of Windows DNS server running on the remote host has a memory corruption vulnerability that can be triggered by making a specially crafted NAPTR query. This could allow an attacker to write arbitrary data to the heap and potentially execute arbitrary code. Note that upstream servers m...

mod_dav_svn, subversion security update

CentOS Errata and Security Advisory CESA-2011:0861 Updated subversion packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

MDVA-2011:027 : bind

This is maintenance release that upgrades ISC BIND to the 9.7.4 version that addresses a lot of upstream bugs and fixes. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, In...

CVE-2011-0218

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...

CVE-2011-0254

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...

CVE-2011-1288

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...

CVE-2011-1462

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...