165 matches found
RedHat Update for java-1.7.0-openjdk RHSA-2015:0067-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for java CESA-2015:0067 centos7
Check the version of java SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882098";...
RHEL 6 / 7 : java-1.7.0-openjdk (RHSA-2015:0067)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0067 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. A flaw w...
[DLA-0019-1] postgresql-8.4 update
Debian Security Advisory DLA-0019-1 https://wiki.debian.org/LTS - ---------------------------------------------------------------------------- Package : postgresql-8.4 Version : 8.4.22-0+deb6u1 CVE ID : CVE-2014-0067 New upstream minor release. Users should upgrade to this version at their next...
DLA-0019-1 postgresql-8.4 - new upstream minor release
Bulletin has no description...
openSUSE Security Update : mozilla-xulrunner191 (mozilla-xulrunner191-4456)
Mozilla XULRunner 1.9.1 was updated to the 1.9.1.19 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-4459)
Mozilla Firefox was updated to the 3.6.17 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances,...
openSUSE Security Update : wireshark (openSUSE-SU-2012:0295-1)
This update fixes the following security issues : - 741187: multiple file parser vulnerabilities CVE-2012-0041 - 741188: RLC dissector buffer overflow CVE-2012-0043 - 741190: NULL pointer vulnerabilities CVE-2012-0042 - CVE-2012-0066: DoS due to too large buffer alloc request - CVE-2012-0067: DoS...
openSUSE Security Update : wireshark (openSUSE-2012-123)
Wireshark version 1.4.11 fixes several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-123. The text description of this plugin is C SUSE LLC...
UBUNTU-CVE-2014-0067
The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests, which allows local users to gain privileges by leveraging access to this cluster...
Debian DSA-2864-1 : postgresql-8.4 - several vulnerabilities
Various vulnerabilities were discovered in PostgreSQL : - CVE-2014-0060 Shore up GRANT ... WITH ADMIN OPTION restrictions Noah Misch Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily...
FreeBSD : PostgreSQL -- multiple privilege issues (42d42090-9a4d-11e3-b029-08002798f6ff)
PostgreSQL Project reports : This update fixes CVE-2014-0060, in which PostgreSQL did not properly enforce the WITH ADMIN OPTION permission for ROLE management. Before this fix, any member of a ROLE was able to grant others access to the same ROLE regardless if the member was given the WITH ADMIN...
[SECURITY] [DSA 2865-1] postgresql-9.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2865-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 20, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2864-1] postgresql-8.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2864-1 [email protected] http://www.debian.org/security/ Christoph Berg February 20, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2864-1 (postgresql-8.4 - several vulnerabilities)
Various vulnerabilities were discovered in PostgreSQL: CVE-2014-0060 Shore up GRANT ... WITH ADMIN OPTION restrictions Noah Misch Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily bypassed...
DSA-2864-1 postgresql-8.4 - several
Bulletin has no description...
PostgreSQL -- multiple privilege issues
PostgreSQL Project reports: This update fixes CVE-2014-0060, in which PostgreSQL did not properly enforce the WITH ADMIN OPTION permission for ROLE management. Before this fix, any member of a ROLE was able to grant others access to the same ROLE regardless if the member was given the WITH ADMIN...
Debian: Security Advisory (DSA-2864-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 : wireshark (ELSA-2012-0509)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0509 advisory. 1.2.15-2.0.1.el62.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.2.15-2.1 - security patches - Resolves: CVE-2011-1143...
Oracle Linux 5 : wireshark (ELSA-2013-0125)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0125 advisory. - fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290 849521 - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958...