EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : ncpfs-2.2.6-12.fc11 (2010-1168)

The updated package fixes race condition by ncpfsmount/ncpfsumount operations. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 11 : nano-2.0.9-1.fc11 (2010-6776)

CVE-2010-1160 CVE-2010-1161 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : cronie-1.3-4.fc11 (2010-4300)

https://vulners.com/cve/CVE-2010-0424 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 11 : automake16-1.6.3-18.fc11.1 (2010-1148)

Tue Feb 16 2010 Karsten Hopp 1.6.3-18.1 - fix CVE-2009-4029 - Fri Jul 31 2009 Karsten Hopp 1.6.3-18 - rebuild - Thu Jul 30 2009 Karsten Hopp 1.6.3-17 - fix build problem - Fri Jul 24 2009 Fedora Release Engineering - 1.6.3-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note...

Fedora 11 : bugzilla-3.2.6-2.fc11 (2010-1458)

This version of Bugzilla fixes security issues that were found in previous versions of the software where private bugs could be made public and configuration files were exposed to the world. CVE Numbers: CVE-2009-3989 and CVE-2009-3387 See upstream security advisory for additional details:...

Fedora 11 : drupal-6.16-1.fc11 (2010-3739)

Fix for SA-CORE-2010-001: http://drupal.org/node/731710 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : php-ZendFramework-1.10.4-1.fc11 (2010-8495)

Over 180 bugfixes Also fixes ZF2010-07 http://framework.zend.com/security/advisory/ZF2010-07 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : mod_auth_shadow-2.2-8.fc11 (2010-6323)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : asterisk-1.6.1.17-1.fc11 (2010-3724)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 11 : krb5-1.6.3-31.fc11 (2010-8796)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 11 : automake-1.11.1-1.fc11.1 (2010-1216)

Fixes CVE-2009-4029 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 11 : openssl-0.9.8n-2.fc11 (2010-9421)

Fix for an important security vulnerability CVE-2010-0742. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : qt-4.6.2-17.fc11 (2010-8379)

fix multiple flaws in webkit: CVE-2010-0047, CVE-2010-0648, CVE-2010-0656 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : boa-0.94.14-0.15.rc21.fc11 (2010-7645)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 11 : viewvc-1.1.4-1.fc11 (2010-4326)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...

Fedora 11 : hamlib-1.2.8-4.fc11 (2010-4352)

Thu Mar 11 2010 Lucian Langa - 1.2.8-4 - kill rpath - use system ltdl 563975 - fix documents install - misc cleanups Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 11 : cpio-2.9.90-8.fc11 (2010-4302)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...