231 matches found
[SECURITY] Fedora 24 Update: pulp-puppet-2.8.3-2.fc24
Provides a collection of platform plugins, client extensions and agent handlers that provide Puppet support...
[SECURITY] Fedora 24 Update: pulp-rpm-2.8.3-1.fc24
Provides a collection of platform plugins, client extensions and agent handlers that provide RPM support...
[SECURITY] Fedora 24 Update: pulp-python-1.1.1-1.fc24
Provides a collection of platform plugins and client extensions support for Python packages...
[SECURITY] Fedora 24 Update: pulp-docker-2.0.1-1.fc24
Provides a collection of Pulp server plugins and admin client extensions to support Docker content...
Pulp Private Key Read Vulnerability (CNVD-2016-03572)
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A private key read vulnerability exists in Pulp that stems from the fact that the pulp.spec file is globally readable at certain times. An attacker...
Pulp Private Key Read Vulnerability
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A private key read vulnerability exists in Pulp that stems from the program allowing the creation of certificates and private keys using 644...
Pulp Information Disclosure Vulnerability (CNVD-2016-03574)
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. An information disclosure vulnerability exists in Pulp that stems from a Node certificate being installed in a globally readable form. An attacker ca...
Pulp Information Disclosure Vulnerability
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. An information disclosure vulnerability exists in Pulp that stems from the program's use of an insecure method of creating temporary files. An attack...
CVE-2016-3106
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...
Pulp Certificate Validation Vulnerability
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security vulnerability exists in versions of Pulp prior to 2.3.0 that stems from the program distributing the same CA key to all users. An attacker...
Pulp Insecure Creation of CA Keys Vulnerability
Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security vulnerability exists in Pulp versions prior to 2.3.0, which stems from the creation of CA certificates and keys in the /tmp/$RANDOM...
Fedora 24 : pulp-2.8.2-1.fc24 / pulp-puppet-2.8.2-1.fc24 / pulp-rpm-2.8.2-1.fc24 (2016-f75bd73891)
Update to 2.8.2 for CVE-2016-3095. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 24 Update: pulp-rpm-2.8.2-1.fc24
Provides a collection of platform plugins, client extensions and agent handlers that provide RPM support...
[SECURITY] Fedora 24 Update: pulp-2.8.2-1.fc24
Pulp provides replication, access, and accounting for software repositories...
Pulp CA Key Read Vulnerability
Pulp is a free and open source platform for managing repositories of content. A key reading vulnerability exists in Pulp's pulp-gen-ca-certificate script, which originates when the program creates a private key in a globally readable file. A local attacker could exploit the vulnerability to read...
CVE-2013-4455
Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file...
Design/Logic Flaw
Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file...
CVE-2013-4455
Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file...