Ubuntu 11.10 : linux vulnerabilities (USN-1689-1)

Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based virtual machine subsystem's handling of the XSAVE feature. On hosts, using qemu userspace, without the XSAVE feature an unprivileged local attacker could exploit this flaw to crash the system. CVE-2012-4461 A flaw was discovered in...

Fedora 18 : BackupPC-3.2.1-10.fc18 (2012-20943)

cleanup build macros for Fedora - fix deprecated qw messages partial fix for bz 755076 - CVE-2011-5081 BackupPC: XSS flaw in RestoreFile.pm bz 795017, 795018, 795019 - Broken configuration for httpd 2.4 bz 871353 Note that Tenable Network Security has extracted the preceding description block...

Fedora 17 : qt-4.8.4-6.fc17 (2013-0277)

This build fixes a security issues : - QSslSocket may report incorrect errors when certificate verification fails. For more information: http://lists.qt-project.org/pipermail/announce/2013-Janu ary/000020.html - blacklists unauthorized SSL certificates by Turktrust. For more information:...

Fedora 18 : php-pear-CAS-1.3.2-1.fc18 (2012-21084)

Changes in version 1.3.2 Security Fixes : - CVE-2012-5583 Missing CN validation of CAS server certificate 58 Joachim Fritschi Bug Fixes : - Fix broken character encoding in Greek and French 40 Joachim Fritschi - Minor error corrections in a few example files Joachim Fritschi - Remove erroneous...

Fedora 18 : webkitgtk-1.10.2-1.fc18 / webkitgtk3-1.10.2-1.fc18 (2012-20125)

What's new in WebKitGTK+ 1.10.2? ================================ - WebCore has been split in a few more convenience libtool libraries, which should fix problems with linking in some architectures and with make's command line length limit. - WebKit2 introspection files will also be built if...

Ubuntu 10.04 LTS : linux vulnerability (USN-1683-1)

A flaw was discovered in the Linux kernel's handling of script execution when module loading is enabled. A local attacker could exploit this flaw to cause a leak of kernel stack contents. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Fedora 16 : php-pear-CAS-1.3.2-1.fc16 (2012-21122)

Changes in version 1.3.2 Security Fixes : - CVE-2012-5583 Missing CN validation of CAS server certificate 58 Joachim Fritschi Bug Fixes : - Fix broken character encoding in Greek and French 40 Joachim Fritschi - Minor error corrections in a few example files Joachim Fritschi - Remove erroneous...

Microsoft System Center Operations Manager Component Installed

Microsoft System Center Operations Manager SCOM, formerly known as Microsoft Operations Manager is a data center management system. A component of the SCOM system is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63418;...

Fedora 17 : drupal6-6.27-1.fc17 / drupal7-7.18-1.fc17 (2012-20766)

Upstream Drupal has reported SA-CORE-2012-004 1 which corrects multiple vulnerabilities : 1 Access bypass User module search - Drupal 6 and 7 2 Access bypass Upload module - Drupal 6 3 Arbitrary PHP code execution File upload modules - Drupal 6 and 7 CVEs have been requested and are not yet...

Fedora 17 : php-symfony2-HttpKernel-2.1.6-1.fc17 (2012-20965)

Updated to upstream version 2.1.6. See : - http://symfony.com/blog/security-release-symfony-2-0-20- and-2-1-5-released - http://symfony.com/blog/symfony-2-0-21-and-2-1-5-relea sed Changelogs : - 2.1.5 2.1.6: https://github.com/symfony/symfony/compare/v2.1.5...v2.1 .6 - 2.1.4 2.1.5:...

Fedora 17 : ndjbdns-1.05.5-1.fc17 (2012-20967)

This fixes two of the cache poisoning issue in the DNS resolver - dnscache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : moin vulnerabilities (USN-1680-1)

It was discovered that MoinMoin did not properly sanitize its input when processing AnyWikiDraw and TWikiDraw actions. A remote attacker with write access could exploit this to overwrite arbitrary files and execute arbitrary code with the priviliges of the web server user 'www-data'. It was...

Fedora 17 : v8-3.13.7.5-1.fc17 (2012-20103)

Update to 3.13.7.5. Fixes CVE-2012-5120 CVE-2012-5128 and gets d8 working properly again. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Mac OS X Wireless Networks List

Using the supplied credentials, it is possible to extract the list of networks to which the remote host has connected in the past. TRUSTED...

Fedora 17 : Django-1.4.3-1.fc17 (2012-20224)

https://www.djangoproject.com/weblog/2012/dec/10/security/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Ubuntu 11.10 : libav vulnerabilities (USN-1674-1)

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Not...

Ubuntu 10.04 LTS : ffmpeg vulnerabilities (USN-1675-1)

It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. No...

Ubuntu 10.04 LTS : bogofilter vulnerability (USN-1667-1)

Julius Plenz discovered that bogofilter incorrectly handled certain invalid base64 code. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Securi...

Fedora 17 : perl-5.14.3-218.fc17 / perl-CGI-3.52-218.fc17 (2012-19282)

Fix CVE-2012-5526 escape new-lines in Set-Cookie and P3P HTTP response headers properly in CGI-3.52. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

MS12-077: Cumulative Security Update for Internet Explorer (2761465)

The remote host is missing Internet Explorer IE Security Update 2761465. The installed version of IE is affected by vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63224;...