Fedora 20 : websvn-2.3.3-8.fc20 (2015-1439)

Security fix for CVE-2013-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 20 : thunderbird-31.4.0-1.fc20 (2015-0809)

For list of changes see https://www.mozilla.org/en-US/thunderbird/31.4.0/releasenotes/ See https://www.mozilla.org/en-US/thunderbird/31.3.0/releasenotes/ for changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

OracleVM 3.3 : glibc (OVMSA-2015-0022) (GHOST)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix parsing of numeric hosts in gethostbynamer CVE-2015-0235, 1183533. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...

[SECURITY] [DLA 140-1] rpm security update

Package : rpm Version : 4.8.1-6+squeeze2 CVE ID : CVE-2012-0060 CVE-2012-0061 CVE-2012-0815 CVE-2013-6435 CVE-2014-8118 Several vulnerabilities have been fixed in rpm: CVE-2014-8118 Fix integer overflow which allowed remote attackers to execute arbitrary code. CVE-2013-6435 Prevent remote attacke...

DLA-140-1 rpm - security update

Bulletin has no description...

SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10161)

The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

Fedora 20 : java-1.7.0-openjdk-1.7.0.75-2.5.4.2.fc20 (2015-0983)

Updated to security update of 20.1.2015 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Ubuntu: Security Advisory (USN-2479-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Patches Several Security Flaws

Ubuntu has released a number of patches for security vulnerabilities in several versions of the OS, including some remote code execution flaws in Thunderbird, which is included with Ubuntu. Thunderbird is Mozilla’s email client, and the company recently fixed several memory corruption...

Ubuntu 14.04 LTS : RPM vulnerabilities (USN-2479-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2479-1 advisory. Florian Weimer discovered that RPM incorrectly handled temporary files. A local attacker could use this issue to execute arbitrary code. CVE-2013-6435...

USN-2479-1: RPM vulnerabilities

Florian Weimer discovered that RPM incorrectly handled temporary files. A local attacker could use this issue to execute arbitrary code. CVE-2013-6435 Florian Weimer discovered that RPM incorrectly handled certain CPIO headers. If a user or automated system were tricked into installing a maliciou...

Debian DSA-3129-1 : rpm - security update

Two vulnerabilities have been discovered in the RPM package manager. - CVE-2013-6435 Florian Weimer discovered a race condition in package signature validation. - CVE-2014-8118 Florian Weimer discovered an integer overflow in parsing CPIO headers which might result in the execution of arbitrary...

[SECURITY] [DSA 3129-1] rpm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3129-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 15, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3129-1 (rpm - security update)

Two vulnerabilities have been discovered in the RPM package manager. CVE-2013-6435 Florian Weimer discovered a race condition in package signature validation. CVE-2014-8118 Florian Weimer discovered an integer overflow in parsing CPIO headers which might result in the execution of arbitrary code...

Fedora 21 : firefox-35.0-2.fc21 (2015-0617)

New upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

DSA-3129-1 rpm - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3129-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedStar 3.0 Desktop - Privilege Escalation (Software Manager - swmng.app) Vulnerability

Exploit for linux platform in category local exploits The root user is disabled on Red Star, and it doesn't look like there is a way to enable it. UnFortunately, they left a big security hole: the Software Manager swmng.app, which runs as root through sudo and will install any RPM package, even i...

RedStar 3.0 Desktop - Software Manager swmng.app Local Privilege Escalation

RedStar 3.0 Desktop - Software Manager swmng.app Local Privilege Escalation The root user is disabled on Red Star, and it doesn't look like there is a way to enable it. UnFortunately, they left a big security hole: the Software Manager swmng.app, which runs as root through sudo and will install a...

RedStar 3.0 Desktop - 'Software Manager swmng.app' Local Privilege Escalation

The root user is disabled on Red Star, and it doesn't look like there is a way to enable it. UnFortunately, they left a big security hole: the Software Manager swmng.app, which runs as root through sudo and will install any RPM package, even if unsigned. To get root, get this RPM package I made...