Test Kennung:	1.3.6.1.4.1.25623.1.0.68164
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2010-180-02)
Zusammenfassung:	The remote host is missing an update for the 'libtiff' package(s) announced via the SSA:2010-180-02 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libtiff' package(s) announced via the SSA:2010-180-02 advisory. Vulnerability Insight: New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: +--------------------------+ patches/packages/libtiff-3.9.4-i486-1_slack13.1.txz: Upgraded. This fixes image structure handling bugs that could lead to crashes or execution of arbitrary code if a specially-crafted TIFF image is loaded. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'libtiff' package(s) on Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1, Slackware 10.2, Slackware 11.0, Slackware 12.0, Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1411 http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html BugTraq ID: 40823 http://www.securityfocus.com/bid/40823 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043769.html http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043835.html http://security.gentoo.org/glsa/glsa-201209-02.xml http://marc.info/?l=oss-security&m=127731610612908&w=2 http://www.redhat.com/support/errata/RHSA-2010-0519.html http://www.redhat.com/support/errata/RHSA-2010-0520.html http://securitytracker.com/id?1024103 http://secunia.com/advisories/40181 http://secunia.com/advisories/40196 http://secunia.com/advisories/40220 http://secunia.com/advisories/40381 http://secunia.com/advisories/40478 http://secunia.com/advisories/40527 http://secunia.com/advisories/40536 http://secunia.com/advisories/50726 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424 SuSE Security Announcement: SUSE-SR:2010:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://www.ubuntu.com/usn/USN-954-1 http://www.vupen.com/english/advisories/2010/1435 http://www.vupen.com/english/advisories/2010/1481 http://www.vupen.com/english/advisories/2010/1512 http://www.vupen.com/english/advisories/2010/1638 http://www.vupen.com/english/advisories/2010/1731 http://www.vupen.com/english/advisories/2010/1761 Common Vulnerability Exposure (CVE) ID: CVE-2010-2065 40181 40381 50726 ADV-2010-1638 ADV-2011-0204 http://www.vupen.com/english/advisories/2011/0204 ADV-2011-0621 http://www.vupen.com/english/advisories/2011/0621 GLSA-201209-02 MDVSA-2011:043 http://www.mandriva.com/security/advisories?name=MDVSA-2011:043 SSA:2010-180-02 USN-954-1 [oss-security] 20100623 CVE requests: LibTIFF http://blogs.sun.com/security/entry/cve_2010_2065_cve_2010 http://www.remotesensing.org/libtiff/v3.9.3.html https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/589565 https://bugzilla.redhat.com/show_bug.cgi?id=601274 Common Vulnerability Exposure (CVE) ID: CVE-2010-2067 20100621 Multiple Vendor LibTIFF 3.9.2 Stack Buffer Overflow Vulnerability http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=874 40241 http://secunia.com/advisories/40241 65676 http://osvdb.org/65676 SUSE-SR:2010:014 http://bugzilla.maptools.org/show_bug.cgi?id=2212 http://www.remotesensing.org/libtiff/v3.9.4.html https://bugzilla.redhat.com/show_bug.cgi?id=599576
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.