Ubuntu 10.04 LTS / 10.10 / 11.04 : puppet vulnerabilities (USN-1223-1)

It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. CVE-2011-3869 Ricky Zhou discovered that Puppet did not drop privileges when creating SSH...

USN-1223-1: Puppet vulnerabilities

It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. CVE-2011-3869 Ricky Zhou discovered that Puppet did not drop privileges when creating SSH...

CVE-2010-3871

Cross-site scripting XSS vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2010-3871

CVE-2010-3871 is a reported XSS vulnerability in Mahara prior to version 1.3.3, affecting the template blocktype/groupviews/theme/raw/groupviews.tpl. The underlying issue is improper sanitization of user input, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Pub...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6755)

IBM Java 1.4.2 was updated to 13 fp3. The following security issues were fixed: CVE-2009-3867: A buffer overflow vulnerability in the Java Runtime Environment audio system might allow an untrusted applet or Java Web Start application to escalate privileges. For example, an untrusted applet might...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2010:084)

Multiple Java OpenJDK security vulnerabilities has been identified and fixed : - TLS: MITM attacks via session renegotiation CVE-2009-3555. - Loader-constraint table allows arrays instead of only the b ase-classes CVE-2010-0082. - Policy/PolicyFile leak dynamic ProtectionDomains. CVE-2010-0084. -...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

Mandriva Update for x11-driver-video-ati MDVA-2010:084 (x11-driver-video-ati)

Check for the Version of x11-driver-video-ati OpenVAS Vulnerability Test Mandriva Update for x11-driver-video-ati MDVA-2010:084 x11-driver-video-ati Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.3. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the IBM Java Runtim...

SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1748)

IBM Java 6 was updated to Service Refresh 7. The following security issues were fixed : - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in a denial of service condition. CVE-2009-3876 / CVE-2009-3877...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6757)

IBM Java 1.4.2 was updated to 13 fp3. The following security issues were fixed: CVE-2009-3867: A buffer overflow vulnerability in the Java Runtime Environment audio system might allow an untrusted applet or Java Web Start application to escalate privileges. For example, an untrusted applet might...

SuSE 11 Security Update : IBM Java 1.4.2 (SAT Patch Number 1744)

IBM Java 1.4.2 was updated to 13 fp3. The following security issues were fixed : - A buffer overflow vulnerability in the Java Runtime Environment audio system might allow an untrusted applet or Java Web Start application to escalate privileges. For example, an untrusted applet might grant itself...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6740)

IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. The timezone update to 1.6.9s with the latest Fiji change. - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in ...

RedHat Security Advisory RHSA-2009:1643

The remote host is missing updates announced in advisory RHSA-2009:1643. The IBM 1.4.2 SR13-FP3 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2009:1647)

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The IBM 1.5.0 Java release includes the IBM Java 2...

SUSE: Security Advisory for java-1_6_0-sun (SUSE-SA:2009:058)

The remote host is missing updates announced in advisory SUSE-SA:2009:058. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)

The Sun Java 6 SDK/JRE was updated to u17 update fixing bugs and various security issues : CVE-2009-3866:The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-1541)

The Sun Java 6 SDK/JRE was updated to u17 update fixing bugs and various security issues : CVE-2009-3866:The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers...

Fedora Core 11 FEDORA-2009-11486 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-11486. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

RedHat Security Advisory RHSA-2009:1584

The remote host is missing updates to OpenJDK announced in advisory RHSA-2009:1584. For the details on the issues addressed in this update, please visit the referenced security advisories. All users of java-1.6.0-openjdk are advised to upgrade to these updated packages, which resolve these issues...