Low: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #3

Updated glusterfs packages that fix multiple security issues, several bugs, and contain enhancements are now available for Red Hat Storage 2.0. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

New Java Attack Introduced into Cool Exploit Kit

A new exploit has been found in the Cool Exploit Kit for a vulnerability in Java 7 Update 7 as well as older versions, a flaw that’s been patched by Oracle in Java 7 Update 9. Cool Exploit Kit was discovered last month and is largely responsible for dropping the Reveton ransomware. A new Metasplo...

Moderate: Red Hat Security Advisory: gegl security update

Updated gegl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

USN-1629-1: libproxy vulnerabilities

Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code. CVE-2012-4504, CVE-2012-4505...

gegl security update

0.1.2-4 - avoid buffer overflow in ppm loader CVE-2012-4433...

Fedora 18 : kdelibs-4.9.2-11.fc18 (2012-17234)

CVE-2012-4515 - Fix crash when trying to reuse a frame with a null part - Cache solid device information in open/save dialog, improving overall performance of the dialog and making the dialog usable again with slow devices because we don't poll udisks2 that much Note that Tenable Network Security...

Fedora 17 : plib-1.8.5-8.fc17 (2012-17465)

Fix a bufferoverflow in ssgParser::error CVE-2012-4552 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7.3 and therefore is reportedly affected by the following vulnerabilities : - A buffer overflow exists in the handling of REGION records in PICT files. CVE-2011-1374 - A memory corruption issue exists in the handling of...

Google Chrome < 23.0.1271.64 Multiple Vulnerabilities

Binary data 800919.prm...

Debian DSA-2573-1 : radsecproxy - SSL certificate verification weakness

Ralf Paffrath reported that Radsecproxy, a RADIUS protocol proxy, mixed up pre- and post-handshake verification of clients. This vulnerability may wrongly accept clients without checking their certificate chain under certain configurations. Raphael Geissert spotted that the fix for CVE-2012-4523...

Fedora 17 : xen-4.1.3-5.fc17 (2012-17204)

limit the size of guest kernels and ramdisks to avoid running out of memory on dom0 during guest boot XSA-25, CVE-2012-4544 870414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 18 : libproxy-0.4.10-1.fc18 (2012-16383)

Fix http chunk encoded PAC that was broken in previous release - Add HTTP client unit test - Fix coding style issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 18 : plib-1.8.5-8.fc18 (2012-17517)

Fix a bufferoverflow in ssgParser::error CVE-2012-4552 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 16 : xen-4.1.3-3.fc16 (2012-17408)

limit the size of guest kernels and ramdisks to avoid running out of memory on dom0 during guest boot XSA-25,CVE-2012-4544 870414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically cle...

CentOS 6 : icedtea-web (CESA-2012:1434)

Updated icedtea-web packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Fedora 16 : icedtea-web-1.3.1-1.fc16 (2012-17745)

This updates a recently found heap buffer overflow issue in IcedTea web. It fixes : CVE-2012-4540 icedtea-web: IcedTeaScriptableJavaObject::invoke off-by-one heap-based buffer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

Vanilla Forums version 2.1.a26 contains a parameter manipulation vulnerability

Overview Vanilla Forums version 2.1.a26 and possibly other versions is vulnerable to parameter manipulation via the "edit profile" page of authenticated users. Description CWE-280: Improper Handling of Insufficient Permissions or PrivilegesVanilla Forums version 2.1.a26 and possibly other version...

CVE-2012-4884

Argument injection vulnerability in Request Tracker RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to create arbitrary files via unspecified vectors related to the GnuPG client...

CVE-2012-4731

FAQ manager for Request Tracker RTFM before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors...

CVE-2012-4730

Request Tracker RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors...