EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : dsniff-2.4-0.9.b1.fc11 / libnids-1.24-1.fc11 (2010-5545)

libnids 1.24 Mar 14 2010: - fixed another remotely triggerable NULL dereference in ipfragment.c - unofficial patch that enables tracking of already established TCP connections - missing reset of some tcp variables upon nidsexit - correct calculation of radiotap header - compilation warning fixes...

Fedora 11 : kernel-2.6.30.10-105.2.4.fc11 (2010-0919)

Security update: CVE-2010-0003 CVE-2010-0006 CVE-2010-0007 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : transmission-1.77-2.fc11 (2010-0388)

Fix potential data loss by maliciously-crafted .torrent files. http://trac.transmissionbt.com/wiki/Changesversion-1.77 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

Fedora 11 : dpkg-1.15.5.6-4.fc11 (2010-4344)

This update fixes CVE-2010-0396 - dpkg path traversal issue http://www.debian.org/security/2010/dsa-2011 http://seclists.org/fulldisclosure/2010/Mar/201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...

Fedora 11 : systemtap-1.1-1.fc11 (2010-0671)

Fixes CVE-2009-4273 Bugzilla 550172: https://bugzilla.redhat.com/showbug.cgi?id=CVE-2009-4273 New upstream release containing new features and bug fixes: better support for gcc 4.5 richer DWARF debuginfo, new preprocessor conditional for kernel 'CONFIG' testing, improved experimental unprivileged...

Fedora 11 : sssd-1.0.1-1.fc11 (2010-0451)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 11 : mingw32-libltdl-1.5.26-17.fc11 (2010-2943)

Not sure whether mingw32-libltdl due to its special nature in being for cross- compilation development for an entirely different system is actually affected by CVE-2009-3736, but this should make sure everything is fixed. Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : java-1.6.0-openjdk-1.6.0.0-34.b17.fc11 (2010-6039)

Add latest security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : cpio-2.9.90-8.fc11 (2010-4302)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : php-ZendFramework-1.9.7-1.fc11 (2010-0601)

This release fixes security-related issues: ZF2010-06: Potential XSS or HTML Injection vector in ZendJson ZF2010-05: Potential XSS vector in ZendServiceReCaptchaMailHide ZF2010-04: Potential MIME-type Injection in ZendFileTransfer ZF2010-03: Potential XSS vector in ZendFilterStripTags when commen...

Fedora 11 : puppet-0.25.4-1.fc11 (2010-1079)

The update from 0.24.x to 0.25.x brings many, many changes and improvements to puppet. The upstream release notes cover them in detail: http://reductivelabs.com/trac/puppet/wiki/ReleaseNotes Of note is that 0.25.x clients do not work with 0.24.x masters, so it is important to update the master...

Fedora 11 : gif2png-2.5.1-1102.fc11 (2010-0330)

Tue Jan 5 2010 Enrico Scholz - 2.5.1-1102 - catch another possible overflow when appending a numbered suffix detected to Tomas Hoger - applied the -overflow patch... - Sat Jan 2 2010 Enrico Scholz - 2.5.1-1101 - changed -overflow patch to abort on bad filenames instead of processing truncated...

Fedora 11 : boa-0.94.14-0.15.rc21.fc11 (2010-7645)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 11 : maildrop-2.4.0-12.fc11 (2010-1927)

This update brings maildrop to the latest upstream version closing CVE-2010-0301. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 11 : wordpress-mu-2.8.6-1.fc11 (2009-12547)

Update to 2.8.6; a couple of security fixes including 1 XSS bug and some additional protections against certain permissive apache configurations Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : python-paste-1.7.4-1.fc11 (2010-10400)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...

Fedora 11 : ruby-1.8.6.383-6.fc11 (2010-0533)

A security vulnerability is found on WEBrick module in Ruby currently shipped on Fedora 11 that WEBrick lets attackers to inject malicious escape sequences to its logs, making it possible for dangerous control characters to be executed on a victim's terminal emulator. This issue has now been tagg...