[SECURITY] [DSA 3588-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3588-1 [email protected] https://www.debian.org/security/ Luciano Bello May 29, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3588-1 (symfony - security update)

Two vulnerabilities were discovered in Symfony, a PHP framework. CVE-2016-1902 Lander Brandt discovered that the class SecureRandom might generate weak random numbers for cryptographic use under certain settings. If the functions randombytes or opensslrandompseudobytes are not available, the outp...

DSA-3588-1 symfony - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3588-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4423: Large username storage in session

More info at https://symfony.com/cve-2016-4423...

huffingtonpost.kr XSS vulnerability

Vulnerable URL: http://www.huffingtonpost.kr/slideshows/helpers/twittercard.php?slideshow=290230=2301054=@huffpostbcurl=javascript:alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| Yes, at 02.04.2016 Latest check for patch:| 02.04.2016 11:19 GMT Vulnerability type:| XSS...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:1375)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1375 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor...

CVE-2014-4423

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application...

CVE-2014-4423

CVE-2014-4423 affects Apple iOS before 8, where the Accounts subsystem could be bypassed to expose the active iCloud Apple ID and metadata to a sandboxed, crafted app. Root cause: sandbox access control weakness in accounts handling allowed unauthorized apps to obtain account details. Impact: att...

openSUSE Security Update : libvirt (openSUSE-SU-2013:0274-1)

libvirt was updated to fix some bugs and security issues : Security issues fixed : - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed : - qemu: Fix probing for guest capabilities...

Oracle Linux 6 : libvirt (ELSA-2012-1359)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1359 advisory. - security: Fix libvirtd crash possibility CVE-2012-4423 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

SuSE Update for libvirt openSUSE-SU-2013:0274-1 (libvirt)

Check for the Version of libvirt OpenVAS Vulnerability Test $Id: gbsuse201302741.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for libvirt openSUSE-SU-2013:0274-1 libvirt Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This progr...

openSUSE: Security Advisory for libvirt (openSUSE-SU-2013:0274-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

libvirt to fix use-after-free in virNetMessageFree() (important)

libvirt was updated to fix some bugs and security issues: Security issues fixed: - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed: - qemu: Fix probing for guest capabilities bnc772586...

Fedora Update for libvirt FEDORA-2013-1626

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[USN-1708-1] libvirt vulnerabilities

========================================================================== Ubuntu Security Notice USN-1708-1 January 29, 2013 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

USN-1708-1: libvirt vulnerabilities

Wenlong Huang discovered that libvirt incorrectly handled certain RPC calls. A remote attacker could exploit this and cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2012-4423 Tingting Zheng discovered that libvirt incorrectly handled clean...

Fedora Update for libvirt FEDORA-2012-20531

Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2012-20531 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libvirt FEDORA-2012-20531

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-4423

CVE-2012-4423 affects libvirt; the virNetServerProgramDispatchCall path allows remote DoS via an RPC number equal to an event or a value in a gap of the RPC dispatch table. The vulnerability is present in libvirt prior to 0.10.2; remediation is to upgrade to libvirt 0.10.2 or newer (as reflected ...