Fedora 17 : pmount-0.9.23-4.fc17 (2013-8789)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Ubuntu 12.04 LTS / 12.10 / 13.04 : kde4libs vulnerability (USN-1842-1)

It was discovered that KIO would sometimes display web authentication credentials under certain error conditions. If a user were tricked into opening a specially crafted web page, an attacker could potentially exploit this to expose confidential information. Note that Tenable Network Security has...

Carna Botnet Analysis Enumerates Vulnerable Network Devices

The Carna botnet, more formally known as the Internet Census 2012, stirred up a hornet’s nest of controversy when it was unveiled in March to a number of popular security mailing lists. An unidentified researcher had found more than 420,000 embedded devices that were accessible online with defaul...

Fedora 17 : moodle-2.2.10-1.fc17 (2013-8692)

Moodle upstream has released upstream 2.4.4, 2.3.7, and 2.2.10 versions : http://docs.moodle.org/dev/Moodle2.2.10releasenotes http://docs.moodle.org/dev/Moodle2.3.7releasenotes http://docs.moodle.org/dev/Moodle2.4.4releasenotes These releases contain unspecified security fixes, the nature of whic...

Fedora 19 : libXcursor-1.1.13-5.20130524git8f677eaea.fc19 (2013-9096)

Update to latest git to fix the following CVEs: CVE-2013-2003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 19 : libX11-1.5.99.901-3.20130524gita3bdd2b09.fc19 (2013-9079)

Fix CVE-2013-1981, CVE-2013-1997, CVE-2013-2004. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[Aircrack-ng 1.2 Beta 1] 802.11 WEP and WPA-PSK keys cracking tool

Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared ...

Fedora 19 : krb5-1.11.2-6.fc19 (2013-8113)

This update pulls in the upstream fix for a UDP ping-pong vulnerability in the kpasswd service provided by kadmind CVE-2002-2443, and modifies the client library to treat KRB5CCNAME values which begin with 'DIR::' in a way that's almost the same as the way it treats values which begin with 'DIR:'...

Fedora 19 : mediawiki-1.20.5-1.fc19 (2013-7654)

Changes since 1.20.4 - bug 46590 Add hook AbortChangePassword to Special:ChangePassword - bug 47304 SECURITY: Check SVG xml encoding against whitelist - Localisation updates from http://translatewiki.net. - mwdocgen.php: Implement --version option. - Remove svnstat stuff used in Doxygen generatio...

Fedora 19 : openstack-keystone-2013.1.1-1.fc19 (2013-8023)

First stable Grizzly update 2013.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1834-1)

A buffer overflow vulnerability was discovered in the Broadcom tg3 ethernet driver for the Linux kernel. A local user could exploit this flaw to cause a denial of service crash the system or potentially escalate privileges on the system. CVE-2013-1929 A flaw was discovered in the Linux kernel's...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-1833-1)

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 A buffer overflow vulnerability was discovered in the Broadcom tg3 ethernet driver for the Linux kernel. A local user...

[SECURITY] Fedora 17 Update: krb5-1.10.2-12.fc17

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Fedora 18 : tomcat-7.0.40-1.fc18 (2013-7993)

Updated to 7.0.40 - Resolves: rhbz 956569 added missing commons-pool link Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[Wireshark v1.8.7] The world’s foremost network protocol analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1829-1)

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1824-1)

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

Ubuntu 12.04 LTS / 12.10 / 13.04 : thunderbird vulnerabilities (USN-1823-1)

Multiple memory safety issues were discovered in Thunderbird. If the user were tricked into opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of t...

Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1822-1)

Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox...

Microsoft Word CVE-2013-1335 Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user, which can lead to a complete compromise of the affected computer. Technologies Affected Microsoft Office 2003...