[go: up one dir, main page]

|
|
Subscribe / Log in / New account

Search results

Query:
Filters:
Content typeCategories
 LWN Feature article
 Guest article
 News item
 Email item
 Security alert
 Security vulnerability
 Kernel patch
 Comment
 Announcements
 Briefs
 Commerce
 Development
 Distributions
 Front
 Kernel
 Legal
 Letters
 Press
 Security
Order by: relevance date

Search results

Mandriva security update to ffmpeg
([Security] Posted Dec 7, 2009 20:33 UTC (Mon) by jake )

CVE-2008-3230)
 
 - FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers
 to cause a denial of service (memory consumption) via unknown vectors,
 aka a Tcp/udp memory leak. (CVE-2008-4869)
 
 - Integer signedness error in the fourxm_read_header function in
 libavformat/4xm.c in FFmpeg before revision 16846 allows remote

ffmpeg: denial of service
([Security] Posted Nov 16, 2009 19:32 UTC (Mon) by jake )

 From the Mandriva advisory:
 
The ffmpeg lavf demuxer allows user-assisted attackers to cause
 a denial of service (application crash) via a crafted GIF file
 (CVE-2008-3230)

Mandriva security update to ffmpeg
([Security] Posted Nov 16, 2009 19:31 UTC (Mon) by jake )

CVE-2008-3230)
 
 - FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers
 to cause a denial of service (memory consumption) via unknown vectors,
 aka a Tcp/udp memory leak. (CVE-2008-4869)
 
 - Integer signedness error in the fourxm_read_header function in
 libavformat/4xm.c in FFmpeg before revision 16846 allows remote

SuSE security update to php5, newt, rubygem-actionpack, rubygem-activesupport, java-1_4_2-ibm, postgresql, samba, phpMyAdmin, viewvc
([Security] Posted Oct 26, 2009 18:16 UTC (Mon) by jake )

CVE-2008-5349, CVE-2009-2625, CVE-2009-2687
                                CVE-2009-2813, CVE-2009-2905, CVE-2009-2906
                                CVE-2009-2948, CVE-2009-3009, CVE-2009-3086
                                CVE-2009-3229, CVE-2009-3230, CVE-2009-3231
                                CVE-2009-3291, CVE-2009-3292, CVE-2009-3293
                                CVE-2009-3618, CVE-2009-3619, CVE

SuSE security update to silc-toolkit, open-iscsi, strongswan,freeswan,openswan, mutt, openldap2, cyrus-imapd, java-1_6_0-openjdk, postgresql, IBMJava2-JRE/java-1_4_2-ibm, wireshark, freeradius, dovecot
([Security] Posted Oct 13, 2009 17:35 UTC (Tue) by ris )

CVE-2008-5349, CVE-2008-7159, CVE-2008-7160
                                CVE-2009-1297, CVE-2009-2408, CVE-2009-2475
                                CVE-2009-2476, CVE-2009-2625, CVE-2009-2632
                                CVE-2009-2661, CVE-2009-2670, CVE-2009-2671
                                CVE-2009-2672, CVE-2009-2673, CVE-2009-2674
                                CVE-2009-2675, CVE-2009-2689, CVE-2009-2690
                                CVE-2009-3051, CVE-2009-3111, CVE-2009-3229
                                CVE-2009-3230

Red Hat security update to postgresql
([Security] Posted Oct 7, 2009 18:41 UTC (Wed) by corbet )

CVE Names:         CVE-2009-0922 CVE-2009-3230 
=====================================================================

1. Summary:

Updated postgresql packages that fix two security issues are now available
for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Description:

PostgreSQL is an advanced object-relational database management system
(DBMS).

It was discovered that the upstream patch for CVE-2007-6600 included in the
Red Hat Security Advisory RHSA-2008

Red Hat security update to postgresql
([Security] Posted Oct 7, 2009 18:41 UTC (Wed) by corbet )

CVE Names:         CVE-2009-3230 
=====================================================================

1. Summary:

Updated postgresql packages that fix a security issue are now available for
Red Hat Enterprise Linux 3.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

3. Description:

PostgreSQL is an advanced object-relational database management system
(DBMS).

It was discovered that the upstream patch for CVE-2007-6600 included in the
Red Hat Security Advisory RHSA-2008

Red Hat security update to Red Hat Application Stack
([Security] Posted Sep 24, 2009 16:05 UTC (Thu) by cook )

CVE Names:         CVE-2008-4456 CVE-2009-2446 CVE-2009-2687 
                   CVE-2009-3094 CVE-2009-3095 CVE-2009-3229 
                   CVE-2009-3230 CVE-2009-3231 
=====================================================================

1. Summary:

Red Hat Application Stack v2.4 is now available. This update fixes several
security issues and adds various enhancements.

This update has been

Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds