[SECURITY] Fedora 23 Update: ca-certificates-2015.2.5-1.0.fc23

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

Fedora 23 : gnutls-3.4.4-1.fc23 (2015-13287)

new upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 23 : mediawiki-1.25.2-2.fc23 (2015-13920)

T94116 SECURITY: Compare API watchlist token in constant time T97391 SECURITY: Escape error message strings in thumb.php T106893 SECURITY: Don't leak autoblocked IP addresses on Special:DeletedContributions T102562 Fix InstantCommons parameters to handle the new HTTPS-only policy of Wikimedia...

[SECURITY] Fedora 23 Update: mediawiki-1.25.2-2.fc23

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

Fedora 23 : maradns-2.0.12-1.fc23 (2015-14034)

This update fixes Denial-of-Service vulnerability in 'zoneserver' component. By making the zoneserver daemon free an invalid memory location, it was possible to terminate the zoneserver process. It is not known whether or not this bug is remotely exploitable. More details:...

Fedora 23 : drupal7-7.39-1.fc23 (2015-13915)

Updated to 7.39 Release notes Drupal Core - Critical - Multiple Vulnerabilities - SA- CORE-2015-003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 23 : php-twig-1.20.0-1.fc23 (2015-13463)

1.20.0 2015-08-12 forbid access to the Twig environment from templates and internal parts of TwigTemplate fixed limited RCEs when in sandbox mode deprecated TwigTemplate::getEnvironment deprecated the self variable for usage outside of the from and import tags added TwigBaseNodeVisitor to ease th...

[SECURITY] Fedora 23 Update: rubygem-rest-client-1.8.0-1.fc23

A simple HTTP and REST client for Ruby, inspired by the Sinatra microframew ork style of specifying actions: get, put, post, delete...

[SECURITY] Fedora 23 Update: drupal7-7.39-1.fc23

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 23 Update: pcre-8.37-4.fc23

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

NetRipper - Smart Traffic Sniffing for Penetration Testers

NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after decryption. NetRipp...

[SECURITY] Fedora 23 Update: rt-4.2.12-1.fc23

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

Fedora 23 : qemu-2.4.0-1.fc23 (2015-13358)

Rebased to version 2.4.0 Support for virtio-gpu, 2D only Support for virtio-based keyboard/mouse/tablet emulation x86 support for memory hot-unplug - ACPI v5.1 table support for 'virt' board CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path bz 1230536 CVE-2015-3214: i8254: out-of-...

Fedora 23 : php-ZendFramework2-2.4.7-1.fc23 / php-guzzle-Guzzle-3.9.3-5.fc23 (2015-13314)

Zend Framework Upstream ChangeLog: Version 2.4.7 Version 2.4.6 Version 2.4.5 Version 2.4.4 Version 2.4.3 Version 2.4.2 Version 2.4.1 Version 2.4.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

prowebshop.no XSS vulnerability

Vulnerable URL: http://www.prowebshop.no/sections/prophoto/key.php?message= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3653371 Google Pagerank| 0 VIP...

foto.mediamarkt.se XSS vulnerability

Vulnerable URL: http://www.foto.mediamarkt.se/sections/prophoto/key.php?message= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

diabolaget.se XSS vulnerability

Vulnerable URL: http://www.diabolaget.se/sections/prophoto/key.php?message= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6992771 Google Pagerank| 3 VIP...

Fedora 23 : xfsprogs-3.2.4-1.fc23 (2015-12380)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

[SECURITY] Fedora 23 Update: libpgf-6.14.12-4.fc23

libPGF contains an implementation of the Progressive Graphics File PGF which is a new image file format, that is based on a discrete, fast wavelet transform with progressive coding features. PGF can be used for lossless and lossy compression...

[SECURITY] Fedora 23 Update: flac-1.3.1-5.fc23

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...