rpm: fails to drop SUID/SGID bits on package upgrade

lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1...

Moderate: Red Hat Security Advisory: rpm security and bug fix update

Updated rpm packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Moderate: Red Hat Security Advisory: rpm security update

Updated rpm packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...

rpm security update

4.3.3-33nonptl - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade 626709 - add dist tag...

rpm security and bug fix update

4.4.2.3-20.el55.1 - make the sbits removal behavior consistent with all the RHELs - add proper suffix for Z branch 4.4.2.3-19 - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade 626707 - fix SELinux memory leak 627630, patch from Florian Festi...

Fedora 12 : sssd-1.2.2-20.fc12 (2010-13557)

CVE-2010-2940 - SSSD allows null password entry to authenticate against LDAP Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 14 : sssd-1.3.0-30.fc14 (2010-13474)

CVE-2010-2940 - SSSD allows null password entry to authenticate against LDAP Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for kernel FEDORA-2010-13110

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-13110 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for DeviceKit-power FEDORA-2010-12911

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : moodle-1.9.9-2.fc13 (2010-13250)

Multiple security fixes. No longer uses bundled php-pear-CAS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 12 : moodle-1.9.9-2.fc12 (2010-13254)

Multiple security fixes. No longer uses bundled php-pear-CAS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

openSUSE Security Update : gpg2 (openSUSE-SU-2010:0479-1)

GnuPG2 was vulnerable to arbitrary code execution by context-dependent attackers because of reusing a freed pointer when verifying a signature or importing a certificate with many 'Subject Alternate Names'. CVE-2010-2547 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

MDVA-2010:007 : kdelibs4

In mandriva 2010.0 there was some missing translations. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically...

MDVA-2010:063 : totem

The youtube plugin in totem has stopped working. This was caused by changes on the youtube web site. This new version updates to those changes to make youtube playback in totem work again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDVA-2010:037 : xinit

The xinit manpage in 2010.0 was not reflecting the real application behavior, which could confuse users. This update fixes the xinit manpage to reflect its real behavior. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDVA-2010:039 : dbus-glib

The dbus-glib package was built without a symbol that is needed by the latest versions of tracker. This update adds the missing functions 57068. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2009:229 : mandriva-kde4-config

When the user migrates from a kde3 desktopMandriva 2008.1 to a full kde4 desktop, kdm doesn't start. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:137 : rpm

This update fixes an issue with rpm: o file triggers aren't properly invoked on package removal %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

MDVA-2009:232 : drakx-net

This update fixes two issues in drakx-net shipped with Mandriva Linux 2010.0: - draksambashare application was fixed to correctly handle samba users bug 55388 - drakhosts application was fixed to allow specifying multiple IP addresses for same host address bug 30168 %NASLMINLEVEL 70300 @DEPRECATE...

Fedora Update for horde FEDORA-2010-11392

Check for the Version of horde OpenVAS Vulnerability Test Fedora Update for horde FEDORA-2010-11392 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...