Games TV 24 - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Games TV 24 published at the 'play' market has multiple vulnerabilities...

DIVERA 24/7 - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application DIVERA 24/7 published at the 'play' market has multiple vulnerabilities...

Fedora 24 : qemu-2.5.0-10.fc24 (2016-1b264ab4a4)

CVE-2016-2538: Integer overflow in usb module bz 1305815 CVE-2016-2841: ne2000: infinite loop bz 1304047 CVE-2016-2857: net: out of bounds read bz 1309564 CVE-2016-2392: usb: NULL pointer dereference bz 1307115 Fix external snapshot any more after active committing bz 1300209 Note that Tenable...

Fedora 24 : php-pecl-http-2.5.6-1.fc24 (2016-9d6b6d0689)

Version 2.5.6 Fix php-bug php71719: Buffer overflow in HTTP url parsing functions Mike, rc0r Fix gh-issue 28: Possible NULL pointer dereference in phphttpurlmod rc0r Fix gh-issue 22: Fix PHP5 config.w32 Jan Ehrhardt - Fix gh-issue 20: setSslOptions notice with curl 7.43 Mike, Vitaliy Demidov Note...

Fedora 24 : webkitgtk-2.4.10-1.fc24 (2016-a4fcb02d6b)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora 24 : krb5-1.14.1-3.fc24 (2016-8dbc4ade25)

CVE-2016-3119, NULL dereference in LDAP module. ---- Fix an issue with return codes on gssinquireattrsformech. This resolves an issue with gss-ntlmssp, and anything else that is interposing but not implementing the corresponding mechglue function. Note that Tenable Network Security has extracted...

Fedora 24 : dropbear-2016.72-1.fc24 (2016-bc45faa824)

CVE-2016-3116 dropbear: X11 forwarding input not validated properly Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 24 : webkitgtk3-2.4.10-1.fc24 (2016-fde7ffcb77)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora 24 : openssh-7.2p2-1.fc24 (2016-0bcab055a7)

This update provides recent upstrem fix published with openssh-7.2p2 1316529. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 24 : libotr-4.1.1-1.fc24 (2016-2982f06845)

Updated to 4.1.1 for CVE-2016-2851 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 24 : drupal6-emfield-2.7-1.fc24 (2016-f0bb0dad51)

6.x-2.7 Fixes Embedded Media Field - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2016-004 Changes since 6.x-2.6: by dalin: Ensure that width and height are always numbers. \1868588 by tangent: URL detection regex does not match hyphens / breaks HTML markup Note that Tenable Network...

Fedora 24 : proftpd-1.3.5b-1.fc24 (2016-ac3587be9a)

Cumulative maintenance release from upstream. Highlights are: SSH RSA hostkeys smaller than 2048 bits now work properly. MLSD response lines are now properly CRLF terminated. Fixed selection of DH groups from TLSDHParamFile CVE-2016-3125 Various other bug fixes are also included. Note that Tenabl...

[SECURITY] Fedora 24 Update: samba-4.4.0-0.7.rc4.fc24

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

[SECURITY] Fedora 24 Update: php-pecl-http-2.5.6-1.fc24

The HTTP extension aims to provide a convenient and powerful set of functionality for major applications. The HTTP extension eases handling of HTTP URLs, dates, redirects, headers and messages in a HTTP context both incoming and outgoing. It also provid es means for client negotiation of preferre...

[SECURITY] Fedora 24 Update: proftpd-1.3.5b-1.fc24

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 24 Update: moodle-3.0.3-1.fc24

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 24 Update: webkitgtk3-2.4.10-1.fc24

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

[SECURITY] Fedora 24 Update: webkitgtk-2.4.10-1.fc24

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

[SECURITY] Fedora 24 Update: qemu-2.5.0-10.fc24

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

[SECURITY] Fedora 24 Update: krb5-1.14.1-3.fc24

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...