Fedora Update for perl-Image-Info FEDORA-2016-f8fd3891f8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ImageMagick -- heap overflow vulnerability

Bastien Roucaries reports: Imagemagick before 3cbfb163cff9e5b8cdeace8312e9bfee810ed02b suffer from a heap overflow in WaveletDenoiseImage. This problem is easily trigerrable from a Perl script...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

Code injection

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10 is affected by an insecure file-creation flaw in the perl script /opt/teradata/gsctools/bin/t2a.pl, which creates temporary files in /tmp. The root cause is insecure handling of /tmp files, enabling a local user to inject/execute commands (e.g., b...

CVE-2016-7489

Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution...

Debian DLA-703-1 : libdatetime-timezone-perl new upstream version

This update includes the changes in tzdata 2016i for the Perl bindings. For the list of changes, see DLA-702-1. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.58-1+2016i. We recommend that you upgrade your libdatetime-time zone-perl packages. NOTE: Tenable Network Security h...

[SECURITY] [DLA 703-1] libdatetime-timezone-perl new upstream version

Package : libdatetime-timezone-perl Version : 1:1.58-1+2016i This update includes the changes in tzdata 2016i for the Perl bindings. For the list of changes, see DLA-702-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2016i. We recommend that you upgrade your...

DLA-703-1 libdatetime-timezone-perl - new upstream version

Bulletin has no description...

CVE-2016-9181

A vulnerability was found in perl-ImageInfo. When parsing an SVG file, external entity expansion XXE was not disabled. An attacker could craft an SVG file which, when processed by an application using perl-Image-Info, could cause denial of service or, potentially, information disclosure...

CVE-2016-9180

A vulnerability was found in perl-XML-Twig. External entity expansion XXE took place regardless of the setting 'expandexternalents', which was supposed to disable this functionality if set to 0 the default or -1. An attacker could craft an XML message which, when processed by an application using...

LDAP Amplication Denial Of Service

!/usr/bin/perl LDAP DRDoS by ShadowHatesYou use Net::RawIP; @ldapservers = qw ; if $ARGV0 eq '' print "Use: $0 \n"; exit; my $target = "$ARGV0"; my $ldapsearchrequest =...

The vulnerability of the Perl interpreter, allowing attackers to inject arbitrary code

The vulnerability of the lc, lcfirst, uc, and ucfirst functions in the Perl interpreter is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security mechanisms and inject arbitrary code due to errors related to the improper use of the taint...

ABT Blog 2.0 Database Disclosure

======================================================================== | Title : ABT Blog v2.0 Blog Scripti Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.0 | Vendor :...

Debian DLA-682-1 : libdatetime-timezone-perl new upstream version

This update includes the changes in tzdata up to 2016h for the Perl bindings. For the list of changes, see DLA-681-1. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.58-1+2016h. We recommend that you upgrade your libdatetime-time zone-perl packages. NOTE: Tenable Network...

[SECURITY] [DLA 682-1] libdatetime-timezone-perl new upstream version

Package : libdatetime-timezone-perl Version : 1:1.58-1+2016h This update includes the changes in tzdata up to 2016h for the Perl bindings. For the list of changes, see DLA-681-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2016h. We recommend that you upgrade your...

Fedora 23 : perl-Image-Info (2016-f8fd3891f8)

Security fix for XXE SVG issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

DLA-682-1 libdatetime-timezone-perl - new upstream version

Bulletin has no description...

Fedora 24 : perl-Image-Info (2016-be779371b4)

Security fix for XXE SVG issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...