[SECURITY] Fedora 16 Update: xfig-3.2.5-32.b.fc16

Xfig is an X Window System tool for creating basic vector graphics, including bezier curves, lines, rulers and more. The resulting graphics can be saved, printed on PostScript printers or converted to a variety of other formats e.g., X11 bitmaps, Encapsulated PostScript, LaTeX. You should install...

[SECURITY] Fedora 16 Update: rubygem-actionpack-3.0.10-9.fc16

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

Fedora 16 : xen-4.1.3-1.fc16 (2012-11785)

update to 4.1.3 - fixes untrusted HVM guest can cause the dom0 to hang or crash XSA-11, CVE-2012-3433 843582 remove some unnecessary cache flushing that slow things down 841330 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Update for python-djblets FEDORA-2012-11576

Check for the Version of python-djblets OpenVAS Vulnerability Test Fedora Update for python-djblets FEDORA-2012-11576 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora Update for pcp FEDORA-2012-12024

Check for the Version of pcp OpenVAS Vulnerability Test Fedora Update for pcp FEDORA-2012-12024 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Adobe Reader PDF File NULL Pointer Dereference Code Execution (APSB12-16; CVE-2012-4152)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader...

Fedora 16 : pcp-3.6.5-1.fc16 (2012-12024)

Security and bugfix update. Security flaws fixed include CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Adobe Reader PDF File XSLT Processing Code Execution (APSB12-16; CVE-2012-1525)

A remote code execution has been reported in Adobe Reader...

Adobe Acrobat PDF File Array Type Error Memory Corruption (APSB12-16; CVE-2012-4147)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat...

Adobe Reader Malformed Entries Memory Corruption (APSB12-16; CVE-2012-4153)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat...

Fedora 16 : python-djblets-0.6.22-2.fc16 (2012-11576)

Previous version of python-djblets contained embedded / own copy of python-feedparser BUILD/Djblets-0.6.22/djblets/feedview feedparser.py code, which is vulnerable to numerous security flaws CVE-2009-5065, CVE-2011-1156, CVE-2011-1157, and CVE-2011-1158 to mention some of them. This package...

Fedora 16 : bind-dyndb-ldap-1.1.0-0.14.rc1.fc16 (2012-11464)

This update fixes CVE-2012-3429 : - named which uses bind-dyndb-ldap plugin could crashed when received query with non-alphabetic character, like '$' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted ...

Fedora 16 : gdb-7.3.50.20110722-16.fc16 (2012-6614)

Update 'set auto-load' patchset and the --with-auto-load-safe-path setting. Security fix for loading untrusted inferiors, see 'set auto-load'. Security fix for loading untrusted inferiors, see 'set auto-load'. Workaround crashes from stale frameinfo pointer BZ 804256. Security fix for loading...

[SECURITY] Fedora 16 Update: python-djblets-0.6.22-2.fc16

A collection of useful classes and functions for Django...

[SECURITY] Fedora 16 Update: gdb-7.3.50.20110722-16.fc16

GDB, the GNU debugger, allows you to debug programs written in C, C++, Java, and other languages, by executing them in a controlled fashion and printing their data...

[SECURITY] Fedora 16 Update: bind-dyndb-ldap-1.1.0-0.14.rc1.fc16

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

LISTSERV 16 - 'SHOWTPL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55082/info LISTSERV is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities : - An unspecified stack-based buffer overflow error exists. CVE-2012-2049 - An unspecified buffer overflow error exists. CVE-2012-2050 - Numerous...

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

This module exploits a command injection vulnerability found in E-Mail Security Virtual Appliance. This module abuses the learn-msg.cgi file to execute arbitrary OS commands without authentication. This module has been successfully tested on the ESVA2057 appliance. Module Options msf use...

CVE-2012-2135

The utf-16 decoder in Python 3.1 through 3.3 does not update the alignedend variable after calling the unicodedecodecallerrorhandler function, which allows remote attackers to obtain sensitive information process memory or cause a denial of service memory corruption and crash via unspecified...