EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : automake16-1.6.3-18.fc11.1 (2010-1148)

Tue Feb 16 2010 Karsten Hopp 1.6.3-18.1 - fix CVE-2009-4029 - Fri Jul 31 2009 Karsten Hopp 1.6.3-18 - rebuild - Thu Jul 30 2009 Karsten Hopp 1.6.3-17 - fix build problem - Fri Jul 24 2009 Fedora Release Engineering - 1.6.3-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note...

Fedora 11 : moodle-1.9.9-1.fc11 (2010-10321)

Moodle upstream has released v1.9.9 and v1.8.13: http://docs.moodle.org/en/Moodle1.9.9releasenotes http://docs.moodle.org/en/Moodle1.8.13releasenotes Which address the following issues: MSA-10-0010 Persistent Cross Site Scripting vulnerability in the MNET access control interface MSA-10-0011 Cros...

Fedora 11 : krb5-1.6.3-23.fc11 (2010-0515)

This update incorporates fixes from upstream which correct integer underflow problems in the AES and RC4 decryption routines CVE-2009-4212. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : zabbix-1.6.8-1.fc11 (2010-0278)

Update to 1.6.8 - Upstream changelog: http://www.zabbix.com/rn1.6.8.php - fixes 2 issues from 551331 CVE-2009-4499 - https://support.zabbix.com/browse/ZBX-1031 CVE-2009-4501 - https://support.zabbix.com/browse/ZBX-1355 Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : alienarena-7.32-3.fc11 (2010-6132)

Fixes the following security issues: - By supplying various invalid parameters to the download command, it is possible to cause a DoS condition by causing the server to crash. A path ending in . or / will crash on Linux. Supplying a negative offset will cause a crash on all platforms. - Fix buffe...

Fedora 11 : hamlib-1.2.8-4.fc11 (2010-4352)

Thu Mar 11 2010 Lucian Langa - 1.2.8-4 - kill rpath - use system ltdl 563975 - fix documents install - misc cleanups Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 11 : PyQt4-4.7.2-2.fc11 / kdeaccessibility-4.4.2-1.fc11 / kdeadmin-4.4.2-1.fc11 / etc (2010-6077)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.2, which has a number of improvements: Possible crashes in Plasma, Dolphin and Okular have been fixed The Microblog applet now shows the correct time in the timeline The audioplayer KRunner plugin has been fixed to not free...

Fedora 11 : bugzilla-3.2.6-2.fc11 (2010-1458)

This version of Bugzilla fixes security issues that were found in previous versions of the software where private bugs could be made public and configuration files were exposed to the world. CVE Numbers: CVE-2009-3989 and CVE-2009-3387 See upstream security advisory for additional details:...

Fedora 11 : irssi-0.8.15-1.fc11 (2010-6618)

This release fixes two security issues: The first being that Irssi didn't check hostname on SSL connections and the other being a hard to exploit remote crash bug. For a complete listing of the changes and bugfixes since 0.8.14, please have a look at the http://irssi.org/news/ChangeLog Note that...

Fedora 11 : lighttpd-1.4.26-2.fc11 (2010-7636)

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug 2157 where SSL stopped working with RHEL 5.4. Note that Tenable Network Security has extracted the preceding...

Fedora 11 : viewvc-1.1.4-1.fc11 (2010-4326)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...

Fedora 11 : trac-0.11.7-1.fc11 (2010-4287)

Update to upstream version 0.11.7, fixing one security flaw and multiple bugs. Refer to upstream changelog for further details: http://trac.edgewall.org/wiki/ChangeLoga0.11.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora 11 : znc-0.090-2.fc11 (2010-10082)

Bug 603915 - znc: NULL pointer dereference flaw leads to segfault under certain conditions A Debian bug report 1 noted that ZNC would segfault under certain conditions, such as clicking 'traffic' in the webadmin pages or issuing the traffic command on the /znc shell. This has been corrected...

Fedora 11 : Miro-2.5.4-3.fc11 / blam-1.8.5-19.fc11 / chmsee-1.0.1-16.fc11 / epiphany-2.26.3-9.fc11 / etc (2010-5515)

Update to new upstream Firefox version 3.5.9 / XULRunner version 1.9.1.9, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.9 Update also includes all packages depending on gecko-libs rebuilt agains...

Fedora 11 : cronie-1.3-4.fc11 (2010-4300)

https://vulners.com/cve/CVE-2010-0424 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 11 : sunbird-1.0-0.16.20090715hg.fc11 / thunderbird-3.0.4-1.fc11 (2010-5526)

Update to new upstream Thunderbird version 3.0.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security /known-vulnerabilities/thunderbird30.htmlthunderbird3.0.4 Update also includes sunbird package rebuilt against new version of Thunderbird...

Fedora 11 : drupal-6.16-1.fc11 (2010-3739)

Fix for SA-CORE-2010-001: http://drupal.org/node/731710 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...