mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)

It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client an...

[SECURITY] Fedora 22 Update: python-httplib2-0.9-6.fc22

A comprehensive HTTP client library that supports many features left out of other HTTP libraries...

PT-2016-3331

Name of the Vulnerable Software and Affected Versions Samba versions 3.x through 4.4.1 Samba versions 4.3.x through 4.3.7 Samba versions 4.2.x through 4.2.10 Description The issue is related to a weakness in the security elements of the LDAP library in the Samba network interaction software...

[SECURITY] Fedora 19 Update: zarafa-7.1.11-1.fc19

The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...

CentOS 5 : krb5 (CESA-2014:1245)

Updated krb5 packages that fix multiple security issues and two bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

[SECURITY] Fedora 20 Update: smack-3.2.2-5.fc20

Smack is an Open Source XMPP Jabber client library for instant messaging and presence. A pure Java library, it can be embedded into your applications to create anything from a full XMPP client to simple XMPP integrations such as sending notification messages and presence-enabling devices...

PT-2014-5080

Name of the Vulnerable Software and Affected Versions IBM Rational Directory Server versions 5.1.1.x through 5.1.1.2 iFix003 IBM Rational Directory Server versions 5.2.x through 5.2.1 iFix002 Rational Directory Administrator version 6.0 through iFix001 Description The issue allows local users to...

CVE-2014-3089: Undefined Security Weakness

The RDS Java Client library in IBM Rational Directory Server RDS 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator RDA 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a...

Neon WebDAV Client Library 0.2x Format String Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10136/info It has been reported that the Neon client library is prone to multiple remote format string vulnerabilities. This issue is due to a failure of the application to properly implement format string functions...

[SECURITY] Fedora 19 Update: miniupnpc-1.9-1.fc19

miniupnpc is an implementation of a UPnP client library, enabling applications to access the services provided by an UPnP "Internet Gateway Device" present on the network. In UPnP terminology, it is a UPnP Control Point. This package includes upnpc, a UPnP client application for configuring port...

Fedora Update for python-keystoneclient FEDORA-2014-5555

Check for the Version of python-keystoneclient OpenVAS Vulnerability Test Fedora Update for python-keystoneclient FEDORA-2014-5555 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Design/Logic Flaw

The authtoken middleware in the OpenStack Python client library for Keystone aka python-keystoneclient before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, relat...

CVE-2014-0105

The authtoken middleware in the OpenStack Python client library for Keystone aka python-keystoneclient before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, relat...

PT-2015-3542

Name of the Vulnerable Software and Affected Versions Python versions 3.4 and earlier Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a crafted HTTP request. This is due to a problem in the gzip decode function within the xmlrpc...

Fedora Update for python-libcloud FEDORA-2014-0136

Check for the Version of python-libcloud OpenVAS Vulnerability Test Fedora Update for python-libcloud FEDORA-2014-0136 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for python-libcloud FEDORA-2014-0159

Check for the Version of python-libcloud OpenVAS Vulnerability Test Fedora Update for python-libcloud FEDORA-2014-0159 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

[SECURITY] Fedora 20 Update: python-libcloud-0.13.3-1.fc20

libcloud is a client library for interacting with many of the popular cloud server providers. It was created to make it easy for developers to build products that work between any of the services that it supports...

[SECURITY] Fedora 18 Update: python-libcloud-0.13.3-1.fc18

libcloud is a client library for interacting with many of the popular cloud server providers. It was created to make it easy for developers to build products that work between any of the services that it supports...

[SECURITY] Fedora 19 Update: python-libcloud-0.13.3-1.fc19

libcloud is a client library for interacting with many of the popular cloud server providers. It was created to make it easy for developers to build products that work between any of the services that it supports...

[SECURITY] Fedora 20 Update: openstack-glance-2013.2-1.fc20

OpenStack Image Service code-named Glance provides discovery, registratio n, and delivery services for virtual disk images. The Image Service API server provides a standard REST interface for querying information about virtual d isk images stored in a variety of back-end stores, including OpenSta...