Updated xbmc package fixes a security vulnerability

Due to flaws in the embedded copy of libDCR, a fork of dcraw.c, in the embedded copy of CxImage, opening a specially crafted photo file could trigger a division by zero, an infinite loop, or a null pointer dereference, resulting in a denial of service CVE-2013-1438. This update fixes those flaws...

SuSE 11.3 Security Update : glibc (SAT Patch Number 8337)

This update for glibc contains the following fixes : - Fix integer overflows in malloc. CVE-2013-4332, bnc839870 - Fix buffer overflow in glob. bnc691365 - Fix buffer overflow in strcoll. CVE-2012-4412, bnc779320 - Update mount flags in . bnc791928 - Fix buffer overrun in regexp matcher...

SuSE 11.2 Security Update : glibc (SAT Patch Number 8335)

This update for glibc contains the following fixes : - Fix integer overflows in malloc. CVE-2013-4332, bnc839870 - Fix buffer overflow in glob. bnc691365 - Fix buffer overflow in strcoll. CVE-2012-4412, bnc779320 - Update mount flags in . bnc791928 - Fix buffer overrun in regexp matcher...

FreeBSD security vulnerabilities

Kernel memory leaks in different drivers...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20131106-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or cause memory leaks that may result in system instabilities. To exploit this vulnerability, affected...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

Design/Logic Flaw

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or cause memory leaks that may result in system instabilities. To exploit this vulnerability, affected...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20131022)

A flaw was found in the way the Linux kernel handled the creation of temporary IPv6 addresses. If the IPv6 privacy extension was enabled /proc/sys/net/ipv6/conf/eth0/usetempaddr is set to '2', an attacker on the local network could disable IPv6 temporary address generation, leading to a potential...

Scientific Linux Security Update : sssd on SL5.x i386/x86_64 (20130930)

A race condition was found in the way SSSD copied and removed user home directories. A local attacker who is able to write into the home directory of a different user who is being removed could use this flaw to perform symbolic link attacks, possibly allowing them to modify and delete arbitrary...

RedHat Update for sssd RHSA-2013:1319-01

Check for the Version of sssd OpenVAS Vulnerability Test RedHat Update for sssd RHSA-2013:1319-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for libvirt CESA-2013:1272 centos6

Check for the Version of libvirt OpenVAS Vulnerability Test CentOS Update for libvirt CESA-2013:1272 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

gdm security update

gdm 2.16.0-59.0.1.el59.1 - Fix gdmconfig memory leaks orabug 12734629 2.16.0-59.1 - Don't try to pre-create directories that are internal implementation details of X. Resolves: 997619 CVE-2013-4169 initscripts 8.45.42-2.0.1.el59.1 - Do not rename eth devices. Orabug 14266688. Apply upstream...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2021)

Description of changes: CVE-2012-2123: Privilege escalation when assigning permissions using fcaps. If a process increases permissions using fcaps, all of the dangerous personality flags which are cleared for suid apps are not cleared. This has allowed programs that gained elevated permissions...

Oracle Linux 5 : kernel (ELSA-2009-0326)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0326 advisory. - net fix icmpsend and icmpv6send host re-lookup code Jiri Pirko 489253 439670 CVE-2009-0778 - net skfpioctl inverted logic flaw Eugene Teo 486539 4865...

Oracle Linux 5 : ipsec-tools (ELSA-2008-0849)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2008-0849 advisory. 0.6.5-9.3 - fix for DoS through various memory leaks CVE-2008-3651 456660, CVE-2008-3652 458846 Tenable has extracted the preceding description block...

Oracle Linux 3 : pam (ELSA-2007-0465)

From Red Hat Security Advisory 2007:0465 : Updated pam packages that resolves several bugs and security flaws are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM...

Fedora 18 : php-5.4.16-1.fc18 (2013-10255)

06 Jun 2013, PHP 5.4.16 Core : - Fixed bug 64879 Heap based buffer overflow in quotedprintableencode, CVE-2013-2110. Stas - Fixed bug 64853 Use of no longer available ini directives causes crash on TS build. Anatol - Fixed bug 64729 compilation failure on x32. Gustavo - Fixed bug 64720 SegFault o...

Oracle Linux 5 : kernel (ELSA-2010-0723)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0723 advisory. - misc make compatallocuserspace incorporate the accessok Don Howard 634463 634464 CVE-2010-3081 - fs xfs: fix missing untrusted inode lookup tag Dave...