chromium: 30.0.1599.66 security and bugfix update (important)

Update to Chromium 30.0.1599.66: - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes: + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

Google Chrome Multiple Vulnerabilities-01 (Oct 2013) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2013-2922

CVE-2013-2922 describes a use-after-free in Blink’s template element implementation (core/html/HTMLTemplateElement.cpp) used by Chrome up to 30.0.1599.66. Exploitation would require crafted JavaScript operating on a TEMPLATE element and could cause a denial of service or other impact as described...

FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)

Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...

Fedora Update for drupal7 FEDORA-2013-2872

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2013-2872 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for drupal7 FEDORA-2013-1092

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for drupal7 FEDORA-2013-1076

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for drupal7 FEDORA-2012-20794

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for drupal7 FEDORA-2012-16442

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2012-16442 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for drupal7 FEDORA-2012-8362

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2012-8362 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 17 : drupal7-7.14-2.fc17 (2012-8398)

Fix for CVE-2012-2922, path disclosure vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 16 : drupal7-7.14-2.fc16 (2012-8362)

Fix for CVE-2012-2922, path disclosure vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2012-2922

CVE-2012-2922 affects Drupal 7.14 and earlier, where the request_path function in includes/bootstrap.inc can reveal the installation path via the q[] parameter to index.php, in error messages. The vulnerability is triggered by crafted q[] input, leading to exposure of server paths. The provided d...

CVE-2012-2922

Removed by vendor...

Gentoo Security Advisory GLSA 201201-15 (ktsuss)

The remote host is missing updates announced in advisory GLSA 201201-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201201-15 : ktsuss: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-15 ktsuss: Privilege escalation Two vulnerabilities have been found in ktuss: Under specific circumstances, ktsuss skips authentication and fails to change the effective UID back to the real UID CVE-2011-2921. The GTK...

CVE-2009-2922

Pixaria Gallery vulnerability CVE-2009-2922 affects Pixaria Gallery 2.0.0–2.3.5. The issue is an absolute path traversal in pixaria.image.php that allows remote attackers to read arbitrary files via a base64-encoded file parameter. Affected versions expose the base64 payload handling as the root ...

CVE-2009-2922

creationtimestamp| type| source ---|---|--- 2009-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9257...

CVE-2008-2922

CVE-2008-2922 describes a stack-based buffer overflow in the artegic Dana IRC client (version 1.3 and earlier) when processing a long IRC message. The vulnerability could allow remote attackers to cause a denial of service (application crash) and, potentially, to execute arbitrary code. The avail...