samba3x security update

3.6.23-9 - related: 1191608 - Update patchset for CVE-2015-0240. 3.6.23-8 - resolves: 1191608 - CVE-2015-0240: RCE in netlogon...

samba4 security update

4.0.0-66.rc4 - related: 1191387 - Update patchset for CVE-2015-0240. 4.0.0-65.rc4 - resolves: 1191387 - CVE-2015-0240: RCE in netlogon...

Security fix for the ALT Linux 10 package samba version 4.1.17-alt1

Feb. 23, 2015 Andrey Cherepanov 4.1.17-alt1 - New version - Security fixes: + fixes CVE-2015-0240 security flaw in the smbd file server daemon...

Security fix for the ALT Linux 8 package samba version 4.1.17-alt1

Feb. 23, 2015 Anton V. Boyarshinov 4.1.17-alt1 - 4.1.17 - CVE-2015-0240 fixed...

samba security update

4.1.1-38 - resolves: 1194132 - CVE-2015-0240: RCE in netlogon server...

samba security update

3.6.23-14.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-14 - related: 1191338 - Update patchset for CVE-2015-0240. 3.6.23-13 - resolves: 1191338 - CVE-2015-0240: RCE in netlogon...

SUSE-SU-2015:0353-1 Security update for samba

samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...

SUSE-SU-2015:0371-1 Security update for Samba

Samba has been updated to fix one security issue: CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed: Realign the winbind request structure following requiremembershipof field expansion bnc913001. Reuse connections...

GLSA-201412-21 : mod_wsgi: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201412-21 modwsgi: Privilege escalation Two vulnerabilities have been found in modwsgi: Error codes returned by setuid are not properly handled CVE-2014-0240 A memory leak exists via the Content-Type header CVE-2014-0242 Impact : ...

mod_wsgi: Privilege escalation

Background modwsgi is an Apache2 module for running Python WSGI applications. Description Two vulnerabilities have been found in modwsgi: Error codes returned by setuid are not properly handled CVE-2014-0240 A memory leak exists via the “Content-Type” header CVE-2014-0242 Impact A local attacker...

Solaris 9 (sparc) : 149079-03

SunOS 5.9: bash patch. Date this patch was last updated by Sun : Sep/30/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid7811...

Fedora 20 : bash-4.2.48-2.fc20 (2014-11527) (Shellshock)

This build should fix CVE-2014-7169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 21 : bash-4.3.22-3.fc21 (2014-11295) (Shellshock)

Disclosure - http://www.openwall.com/lists/oss-security/2014/09/24/10 Behaviour prior to patch : $ env x=' :;; echo OOPS' bash -c /usr/sbin/nologin OOPS This account is currently not available. Note that Tenable Network Security has extracted the preceding description block directly from the Fedo...

RedHat Update for mod_wsgi RHSA-2014:1091-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : mod_wsgi (RHSA-2014:1091)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:1091 advisory. The modwsgi adapter is an Apache module that provides a WSGI-compliant interface for hosting Python-based web applications within Apache. It was foun...

CentOS 7 : mod_wsgi (CESA-2014:1091)

An updated modwsgi package that fixes one security issue is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

mod_wsgi security update

CentOS Errata and Security Advisory CESA-2014:1091 An updated modwsgi package that fixes one security issue is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score,...

Important: Red Hat Security Advisory: mod_wsgi security update

An updated modwsgi package that fixes one security issue is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

mod_wsgi security update

3.4-12 - fix possible privilege escalation in setuid CVE-2014-0240...

Important: mod24_wsgi

Issue Overview: It was found that modwsgi did not properly drop privileges if the call to setuid failed. If modwsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system...