Fedora 19 : moodle-2.4.10-1.fc19 (2014-6577)

Moodle upstream has released versions 2.7, 2.6.3, 2.5.6, and 2.4.10 to fix the following security flaws : CVE-2014-0213 MSA-14-0014: Cross-site request forgery possible in Assignment CVE-2014-0214 MSA-14-0015: Web service token expiry issue for MoodleMobile CVE-2014-0215 MSA-14-0016: Anonymous...

Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)

A denial of service vulnerability has been found on Adobe ColdFusion. A remote attacker can exploit this vulnerability by sending specially crafted data to a target system. This protection will detect and block attempts to exploit this vulnerability...

Fedora 19 : python-django-1.5.8-1.fc19 (2014-6454)

fixes CVE-2014-1418 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 19 Update: python-django-1.5.8-1.fc19

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Fedora Update for rubygem-actionpack FEDORA-2014-6127

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : mutt-1.5.23-2.fc19 (2014-6395)

fix build on s390 fix: CVE-2014-0467 heap-based buffer overflow when parsing certain headers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for python-fedora FEDORA-2014-5948

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : rubygem-actionpack-3.2.13-6.fc19 (2014-6127)

Fix for CVE-2014-0130 - Avoid directory traversal Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 19 Update: perl-LWP-Protocol-https-6.04-2.fc19

The LWP::Protocol::https module provides support for using HTTPS schemed URLs with LWP. This module is a plug-in to the LWP protocol handling, so you don't use it directly. Once the module is installed LWP is able to access sites using HTTP over SSL/TLS...

Fedora 19 : kernel-3.14.4-100.fc19 (2014-6354)

The 3.14.4 stable update contains a number of important fixes across the tree. The 3.14.3 stable rebase contains support for new hardware, some new features, and a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly...

[SECURITY] Fedora 19 Update: kernel-3.14.4-100.fc19

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

[SECURITY] Fedora 19 Update: botan-1.8.14-3.fc19

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

[SECURITY] Fedora 19 Update: python-fmn-web-0.2.4-3.fc19

fmn is a family of systems to manage end-user notifications triggered by fedmsg, the Fedora FEDerated MESsage bus. This module contains the frontend web application for Fedora Notifications...

ClassAd Cross Site Scripting

Cross Site Scripting on ClassAd Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: projects-and-software.de Version:3.00 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: showads.php Exploit: http:/host/path/showads.php?catid=xss PoC: -Targe...

Perseus' Java Hopper Cross Site Scripting

Cross Site Scripting on Perseus' Java Hopper Risk: Low CWE number: CWE-79 Date: 19/05/2014 Project: perseus.tufts.edu Download: sourceforge.net/projects/perseus-hopper Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: morph?l= Exploit:...

Fedora 19 : mingw-qt-4.8.6-1.fc19 (2014-6028)

Update to 4.8.6 - Fix DoS vulnerability in the GIF image handler QTBUG-38367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 19 Update: 0ad-0.0.15-4.fc19

0 A.D. pronounced "zero ey-dee" is a free, open-source, cross-platform real-time strategy RTS game of ancient warfare. In short, it is a historically-based war/economy game that allows players to relive or rewrite the history of Western civilizations, focusing on the years between 500 B.C. and 50...

[SECURITY] Fedora 19 Update: megaglest-3.9.1-2.fc19

MegaGlest is an open source 3D-real-time strategy game, where you control the armies of one of seven different factions: Tech, Magic, Egyptians, Indians, Norsemen, Persian or Romans. The game is setup in one of 16 naturally looking settings, which -like the unit models- are crafted with great...

[SECURITY] Fedora 19 Update: miniupnpc-1.9-1.fc19

miniupnpc is an implementation of a UPnP client library, enabling applications to access the services provided by an UPnP "Internet Gateway Device" present on the network. In UPnP terminology, it is a UPnP Control Point. This package includes upnpc, a UPnP client application for configuring port...

Fedora 19 : 0ad-0.0.15-4.fc19 / megaglest-3.9.1-2.fc19 / miniupnpc-1.9-1.fc19 (2014-5903)

Update to miniupnpc 1.9 and correct possible DoS crash vector. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...