1142 matches found
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:1638-1)
This openjdk update fixes the following security and non security issues : - Upgrade to 2.4.8 bnc887530 - Changed back from gzipped tarball to xz - Changed the keyring file to add Andrew John Hughes that signed the icedtea package - Change ZERO to AARCH64 tarball - Removed patches : -...
PT-2014-1967 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.18 Description: The issue is related to the KEYS subsystem in the Linux kernel, which allows local users to gain privileges or cause a denial of service. This can happen through vectors involving a NULL value...
WordPress Keyring Plugin <= 1.5 - Cross Site Scripting
This plugin is prone to a OAuth example page XSS vulnerability. Solution Update the plugin...
Keyring <= 1.5 - OAuth Example Page XSS
The Keyring WordPress plugin was affected by an OAuth Example Page XSS security vulnerability...
PT-2017-1618
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.14.79 Description The issue is related to the keyring search aux function in the Linux kernel, which is associated with pointer dereference errors. This can be exploited by a local attacker to cause a denial of...
openSUSE Security Update : gnome-keyring (openSUSE-SU-2012:1121-1)
gnome-keyring was updated to not cache passwords indefinitely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-577. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:0174-1)
Fix a file conflict between -devel and -headless package - Update to 2.4.4 bnc858818 - changed from xz to gzipped tarball as the first was not available during update - changed a keyring file due release manager change new one is signed by 66484681 from [email protected], see...
DEBIAN-CVE-2014-0102
The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service OOPS via crafted keyctl commands...
CVE-2014-0102
The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service OOPS via crafted keyctl commands...
UBUNTU-CVE-2014-0102
The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service OOPS via crafted keyctl commands...
CVE-2014-0102
The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service OOPS via crafted keyctl commands...
PT-2014-3477
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.13.6 Description The issue is related to the keyring detect cycle iterator function in the Linux kernel, which does not properly determine whether keyrings are identical. This allows local users to cause a deni...
CVE-2014-1921
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
CVE-2014-1921
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
CVE-2014-1921
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
CVE-2014-1921
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
CVE-2014-1921
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
CVE-2014-1921: Concurrent Execution using Shared Resource with Improper Synchronization
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
PT-2014-1789
Name of the Vulnerable Software and Affected Versions parcimonie versions prior to 0.8.1 Description The issue concerns multiple vulnerabilities in the parcimonie package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely, potentially leading to breaches in...
Debian DSA-2860-1 : parcimonie - information disclosure
Holger Levsen discovered that parcimonie, a privacy-friendly helper to refresh a GnuPG keyring, is affected by a design problem that undermines the usefulness of this piece of software in the intended threat model. When using parcimonie with a large keyring 1000 public keys or more, it would alwa...