openSUSE Security Update : python-logilab-common (openSUSE-SU-2014:0306-1)

The Python logilab-common module was updated to fix several temporary file problems, one in the PDF generator CVE-2014-1838 and one in the shellutils helper CVE-2014-1839. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Fedora Update for python-logilab-common FEDORA-2014-3300

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for python-astroid FEDORA-2014-3300

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pylint FEDORA-2014-3300

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for python-logilab-common FEDORA-2014-3300

Check for the Version of python-logilab-common OpenVAS Vulnerability Test Fedora Update for python-logilab-common FEDORA-2014-3300 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 20 : pylint-1.1.0-1.fc20 / python-astroid-1.0.1-2.fc20 / python-logilab-common-0.61.0-1.fc20 (2014-3300)

New upstream pylint stack. disable-msg pragma is now just disable. Also watch out for more E1101 introspection false-positives. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

CVE-2014-1839

The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file...

CVE-2014-1839

CVE-2014-1839 affects logilab-common (shellutils) before version 0.61.0. The Execute class in shellutils uses tempfile.mktemp, enabling local users to pre-create the temporary file and potentially impact the system. The vulnerability is local in scope with partial confidentiality/integrity/availa...

CVE-2014-1839

The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file...

Updated python-logilab-common packages fix security vulnerabilities

Updated python-logilab-common packages fix security vulnerabilities about temporary file handling CVE-2014-1838 and CVE-2014-1839...

CVE-2013-1839

The CVE-2013-1839 issue affects Squid 3.2.x (pre-3.2.9) and 3.3.x (pre-3.3.3), where strHdrAcptLangGetItem in errorpage.cc can be triggered by a comma in Accept-Language, causing an infinite loop and high CPU usage (DoS). Impact is denial of service. Remediation: upgrade to fixed versions (3.2.9 ...

Fedora Update for squid FEDORA-2013-13493

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Squid Proxy strHdrAcptLangGetItem Value Denial of Service (CVE-2013-1839)

A denial of service vulnerability has been reported in Squid proxy server...

Fedora Update for squid FEDORA-2013-4050

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"squ...

Fedora Update for squid FEDORA-2013-4063

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : squid-3.2.9-1.fc18 (2013-4050)

This is security update that fixes CVE-2013-1839. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 17 : squid-3.2.9-1.fc17 (2013-4063)

This is security update that fixes CVE-2013-1839. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2012-1839

The CVE-2012-1839 issue affects AjaXplorer’s Get Template feature in the GUI AJAX path (class.AJXP_ClientDriver.php). In affected 3.2.x (before 3.2.5) and 4.0.x (before 4.0.4) releases, remote attackers can perform directory traversal to include and execute arbitrary local files by passing a .. i...

CentOS Update for firefox CESA-2009:1095 centos5 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2009:1095 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2011-1839

IBM Rational Build Forge 7.1.0 is vulnerable because it uses HTTP GET during redirection from the authentication servlet to a PHP script, enabling context-dependent attackers to discover session IDs by reading web-server access logs, Referer logs, or browser history. Affected component: the authe...