58 matches found
MGASA-2016-0366 This update of rpm fixes several security issues
All of those fixes were already backported in Mageia but for : - Fix out-of-bounds read on signature checking of malformed package RhBug:1373107...
PT-2016-7975
Name of the Vulnerable Software and Affected Versions Mageia affected versions not specified Description The issue concerns a fix for an out-of-bounds read on signature checking of malformed packages. Recommendations At the moment, there is no information about a newer version that contains a fix...
By hungry cryptography misuse of the actuator to bypass the defense talking about the android cryptographic vulnerability-the vulnerability warning-the black bar safety net
Cryptography is misused in the app is a big problem, almost all apk's checksum algorithm can be simulated Hungry the algorithm robustness and concealment was good, the proposed terms is in order to prove that the signature checking mechanism of the vulnerable Although presented to the hungry, but...
OracleVM 3.3 : rpm (OVMSA-2014-0083)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix race condidition where unchecked data is exposed in the file system CVE-2013-64351163059 - Fix thinko in the non-root python byte-compilation fix - Byte-compile versioned python libdirs in non-roo...
openSUSE Security Update : perl-Module-Signature (openSUSE-SU-2013:1178-1)
perl-Module-Signature was updated to 0.73, fixing bugs and security issues : Security fix for code execution in signature checking : - fix for bnc828010 CVE-2013-2145 - Properly redo the previous fix using File::Spec-filenameisabsolute. - Changes for 0.72 - Wed Jun 5 23:19:02 CST 2013 - Only allo...
Design/Logic Flaw
The SSLVerifySignedServerKeyExchange function in libsecurityssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a...
Important: Red Hat Security Advisory: python-keystoneclient security, bug fix, and enhancement update
Updated python-keystoneclient packages that fix two security issues, one bug, and add one enhancement are now available for Red Hat OpenStack 3.0 Grizzly Preview. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CV...
Candlepin: Re-enable manifest signature checking
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests...
Moderate: Red Hat Security Advisory: Subscription Asset Manager 1.2.1 update
Red Hat Subscription Asset Manager 1.2.1, which fixes several security issues, multiple bugs, and adds various enhancements, is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...
Ubuntu Update for rpm USN-1694-1
Check for the Version of rpm OpenVAS Vulnerability Test $Id: gbubuntuUSN16941.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for rpm USN-1694-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...
Ubuntu: Security Advisory (USN-1694-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1694-1: RPM vulnerability
It was discovered that RPM incorrectly handled signature checking. An attacker could create a specially-crafted rpm with an invalid signature which could pass the signature validation check...
[SECURITY] Fedora 18 Update: rpmdevtools-8.3-1.fc18
This package contains scripts and XEmacs support files to aid in development of RPM packages. rpmdev-setuptree Create RPM build tree within user's home directory rpmdev-diff Diff contents of two archives rpmdev-newspec Creates new .spec from template rpmdev-rmdevelrpms Find and optionally remove...
PT-2012-1772
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.46 Description The issue is related to improper signature checking, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. The exact vectors used for...
SuSE 10 Security Update : gnutls (ZYPP Patch Number 2117)
A security problem was fixed in the GNU TLS library, where excess data was not checked during signature checking with RSA keys with exponent 3. This problem could be used to fake those RSA signatures. CVE-2006-4790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...
openSUSE 10 Security Update : opera (opera-2181)
This update fixes the RSA signature checking problem found in openssl in the Opera webbrowser which is statically linked against openssl. CVE-2006-4339 A URL tag parsing heap overflow in Opera could be used to potentially execute code. CVE-2006-4819 %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE 10 Security Update : gnutls (gnutls-2118)
A security problem was fixed in the GNU TLS library, where excess data was not checked during signature checking with RSA keys with exponent 3. This problem could be used to fake those RSA signatures. CVE-2006-4790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
