Debian Security Advisory DSA 2474-1 (ikiwiki)

The remote host is missing an update to ikiwiki announced via advisory DSA 2474-1. OpenVAS Vulnerability Test $Id: deb24741.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2474-1 ikiwiki Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2479-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2479-1. OpenVAS Vulnerability Test $Id: deb24791.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2479-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2463-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2468-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2475-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 2475-1. OpenVAS Vulnerability Test $Id: deb24751.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2475-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2473-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2473-1. OpenVAS Vulnerability Test $Id: deb24731.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2473-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian Security Advisory DSA 2478-1 (sudo)

The remote host is missing an update to sudo announced via advisory DSA 2478-1. OpenVAS Vulnerability Test $Id: deb24781.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2478-1 sudo Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2477-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2467-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2466-1 (rails)

The remote host is missing an update to rails announced via advisory DSA 2466-1. OpenVAS Vulnerability Test $Id: deb24661.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2466-1 rails Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2478-1 : sudo - parsing error

It was discovered that sudo misparsed network masks used in Host and HostList stanzas. This allowed the execution of commands on hosts, where the user would not be allowed to run the specified command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-2474-1 : ikiwiki - XSS

Raul Benencia discovered that ikiwiki, a wiki compiler, does not properly escape the author and its URL of certain metadata, such as comments. This might be used to conduct cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Debian DSA-2472-1 : gridengine - privilege escalation

Dave Love discovered that users who are allowed to submit jobs to a Grid Engine installation can escalate their privileges to root because the environment is not properly sanitized before creating processes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-2473-1 : openoffice.org - buffer overflow

Tielei Wang discovered that OpenOffice.org does not allocate a large enough memory region when processing a specially crafted JPEG object, leading to a heap-based buffer overflow and potentially arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Debian DSA-2470-1 : wordpress - several vulnerabilities

Several vulnerabilities were identified in WordPress, a web blogging tool. As the CVEs were allocated from releases announcements and specific fixes are usually not identified, it has been decided to upgrade the wordpress package to the latest upstream version instead of backporting the patches...

Debian DSA-2469-1 : linux-2.6 - privilege escalation/denial of service

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-4086 Eric Sandeen reported an issue in the journaling layer for ext4...

Debian DSA-2468-1 : libjakarta-poi-java - unbounded memory allocation

It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-2467-1 : mahara - insecure defaults

It was discovered that Mahara, the portfolio, weblog, and resume builder, had an insecure default with regards to SAML-based authentication used with more than one SAML identity provider. Someone with control over one IdP could impersonate users from other IdP's. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-2464-2 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2012-0467 Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory...

Debian Security Advisory DSA 2434-1 (nginx)

The remote host is missing an update to nginx announced via advisory DSA 2434-1. OpenVAS Vulnerability Test $Id: deb24341.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2434-1 nginx Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...