Fedora 19 : drupal7-theme-zen-5.4-1.fc19 (2013-15147)

Update to upstream 5.4 release for security and bug fixes - SA-CONTRIB-2013-070 https://drupal.org/node/2071157 - Upstream changelog for this release is available at https://drupal.org/node/2071055 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 18 : drupal7-theme-zen-5.4-1.fc18 (2013-15142)

Update to upstream 5.4 release for security and bug fixes - SA-CONTRIB-2013-070 https://drupal.org/node/2071157 - Upstream changelog for this release is available at https://drupal.org/node/2071055 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xmonad FEDORA-2013-13332

Check for the Version of xmonad OpenVAS Vulnerability Test Fedora Update for xmonad FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332

Check for the Version of ghc-xmonad-contrib OpenVAS Vulnerability Test Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora 18 : subversion-1.7.11-1.fc18.1 (2013-13672)

This update includes the latest release of Apache Subversion 1.7, version 1.7.11. Several security vulnerabilities are fixed in this update : Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If...

SA-CONTRIB-2013-069 - Password Policy - XSS

This module enables you to specify a certain level of password complexity aka. "password hardening" for user passwords in Drupal by defining a password policy. When viewing and editing a password policy, the module doesn't sufficiently filter the form text field input and display for the "Passwor...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388

Check for the Version of ghc-xmonad-contrib OpenVAS Vulnerability Test Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF)

This module enables users to sign into a Drupal website using Mozilla Persona. The module uses a security token to ensure that a sign-in request is made from a web page that is participating in the current session. It was possible for a security token that was not of type "string" to be accepted ...

[SECURITY] Fedora 19 Update: ghc-xmonad-contrib-0.11.2-1.fc19

Third party tiling algorithms, configurations and scripts to xmonad, a tiling window manager for X. For an introduction to building, configuring and using xmonad extensions, see "XMonad.Doc". In particular: "XMonad.Doc.Configuring", a guide to configuring xmonad "XMonad.Doc.Extending", using the...

[SECURITY] Fedora 18 Update: ghc-xmonad-contrib-0.11-1.1.fc18

Third party tiling algorithms, configurations and scripts to xmonad, a tiling window manager for X. For an introduction to building, configuring and using xmonad extensions, see "XMonad.Doc". In particular: "XMonad.Doc.Configuring", a guide to configuring xmonad "XMonad.Doc.Extending", using the...

Fedora 18 : bluetile-0.6-13.fc18 / ghc-xmonad-contrib-0.11-1.1.fc18 (2013-13388)

Backport fix for a potential vulnerability in xmonad-contrib's DynamicLog module Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : bluetile-0.6-18.fc19 / ghc-X11-1.6.1.1-1.fc19 / ghc-X11-xft-0.3.1-10.fc19 / etc (2013-13332)

xmonad-contrib-0.11.2 fixes a vulnerability in the DynamicLog module - update X11 to 1.6.1.1 - update xmobar to 0.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Oracle Linux 6 : quagga (ELSA-2010-0945)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0945 advisory. 0.99.15-5el60.1 - Resolves: 644830 - CVE-2010-2948 CVE-2010-2949 quagga various flaws Tenable has extracted the preceding description block directly fr...

SA-CONTRIB-2013-055 - Hatch - Cross Site Scripting

Hatch theme is a simple and minimal portfolio theme for photographers, illustrators, designers, or photobloggers. The theme didn't sufficiently escape user supplied text prior to printing them. This vulnerability is mitigated by the fact that an attacker must have a role with the permission...

SA-CONTRIB-2013-057 - TinyBox - Cross Site Scripting (XSS)

TinyBox module uses TinyBox, a lightweight and standalone modal window script. The main purpose of this module is to provide Splash Screen/Window as simple as possible. The module doesn't filter user-supplied text prior to display. The vulnerability is mitigated by the fact that an attacker must...

Updated php-geshi package fix security vulnerabilities

A directory traversal and information disclosure local file inclusion flaws were found in the cssgen contrib module application to generate custom CSS files of GeSHi, a generic syntax highlighter, performed sanitization of 'geshi-path' and 'geshi-lang-path' HTTP GET / POST variables. A remote...

devel/subversion -- contrib hook-scripts can allow arbitrary code execution

Subversion team reports: The script contrib/hook-scripts/check-mime-type.pl does not escape argv arguments to 'svnlook' that start with a hyphen. This could be used to cause 'svnlook', and hence check-mime-type.pl, to error out. The script contrib/hook-scripts/svn-keyword-check.pl parses filename...

SA-CONTRIB-2013-049 - Node access user reference - Access Bypass

This module allows different access permissions to be given to authors, referenced users and non-referenced users. When an author has created content containing a user reference field with author update/delete grants enabled and the author's user account is later deleted, content created by them...