Fedora 25 : 5:guile (2016-0aab71f552)

Update to the latest stable release, which fixes CVE-2016-8605 and CVE-2016-8606. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for guile FEDORA-2016-a47bf58beb

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : guile (openSUSE-2016-1235)

This update for guile fixes the following issues : - CVE-2016-8606: REPL server vulnerable to HTTP inter-protocol attacks bsc1004226. - CVE-2016-8605: Thread-unsafe umask modification bsc1004221. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DLA-666-1 : guile-2.0 security update

Several vulnerabilities were discovered in GNU Guile, an implementation of the Scheme programming language. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-8605: The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that...

Fedora 24 : 5:guile (2016-34209c3a8e)

Update to the latest stable release, which fixes CVE-2016-8605 and CVE-2016-8606. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2015-8606

CVE-2015-8606 affects SilverStripe CMS & Framework. Multiple XSS vulnerabilities exist in versions prior to 3.1.16 and 3.2.x prior to 3.2.1, exploitable via the Locale or FailedLoginCount parameter in admin/security/EditForm/field/Members/item/new/ItemEditForm. Impact is that remote attackers can...

CVE-2014-8606

The CVE-2014-8606 entry concerns XCloner Backup and Restore for WordPress (v3.1.1) and Joomla! (v3.5.1). The vulnerability is a directory traversal flaw in the xcloner_show page, exploited by sending a .. in the file parameter of the json_return action to wp-admin/admin-ajax.php, allowing remote ...

Xloner v3.1.2 wordpress plugin authenticated command execution and XSS

This advisory is in addition to the one I filed in November http://www.openwall.com/lists/oss-security/2014/11/06/1 that had the following CVEs assigned CVE-2014-8603 CVE-2014-8604 CVE-2014-8605 CVE-2014-8606 CVE-2014-8607, advisory http://www.vapid.dhs.org/advisory.php?v=110. Title: Xloner v3.1....

SuSE 10 Security Update : clamav (ZYPP Patch Number 8606)

This update contains clamav 0.97.8 which fixes security issues bnc816865 : - Fix heap corruption. CVE-2013-2020 - Fix overflow due to PDF key length computation. CVE-2013-2021 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...