CVE-2016-5011

It was found that util-linux's libblkid library did not properly handle Extended Boot Record EBR partitions when reading MS-DOS partition tables. An attacker with physical USB access to a protected machine could insert a storage device with a specially crafted partition table that could, for...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the thttpd-util package of the Debian GNU/Linux operating system can lead to breaches of the confidentiality, integrity, and accessibility of protected information...

SUSE-RU-2016:1515-1 Recommended update for bash-completion, util-linux

This update provides fixes and enhancements to bash-completion and util-linux. bash-completion: - Improve completion of LVM commands. bsc946875 - Fix completion with backticks. bsc940835 - Make ls completion smarter. bsc889319 - Avoid negative cword position counter. bsc922758 - Avoid trouble if...

Amazon Linux AMI : nspr / nss-util,nss,nss-softokn (ALAS-2016-702)

A use-after-free flaw was found in the way NSS handled DHE DiffieHellman key exchange and ECDHE Elliptic Curve Diffie-Hellman key exchange handshake messages. A remote attacker could send a specially crafted handshake message that, when parsed by an application linked against NSS, would cause tha...

CVE-2016-1671

CVE-2016-1671 affects Google Chrome on Android versions prior to 50.0.2661.102, where mishandling of "/" and "" characters enables directory traversal via a file: URL. Root cause: improper handling in Android builds tied to net/base/escape.cc and net/base/filename_util.cc. Impact is directory tra...

Oracle: Security Advisory (ELSA-2016-0685)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : nss, / nspr, / nss-softokn, / and / nss-util (ELSA-2016-0685)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0685 advisory. - Pick up upstream freebl patch for CVE-2015-2730 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

CentOS 7 : nspr / nss / nss-softokn / nss-util (CESA-2016:0685)

An update for nss, nspr, nss-softokn, and nss-util is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Scientific Linux Security Update : nss, nspr, nss-softokn, and nss-util on SL7.x x86_64 (20160425)

The following packages have been upgraded to a newer upstream version: nss 3.21.0, nss-util 3.21.0, nspr 4.11.0. Security Fixes : - A use-after-free flaw was found in the way NSS handled DHE DiffieHellman key exchange and ECDHE Elliptic Curve Diffie-Hellman key exchange handshake messages. A remo...

RHEL 7 : nss, nspr, nss-softokn, and nss-util (RHSA-2016:0685)

An update for nss, nspr, nss-softokn, and nss-util is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

CentOS Update for nss-util CESA-2016:0685 centos7

Check the version of nss-util SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882476";...

RedHat Update for nss, nspr, nss-softokn, and nss-util RHSA-2016:0685-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nss, nspr, nss-softokn, and nss-util security, bug fix, and enhancement update

nspr 4.11.0-1 - Rebase to NSPR 4.11 nss 3.21.0-9.0.1 - Added nss-vendor.patch to change vendor 3.21.0-9 - Rebuild to require the latest nss-util build and nss-softokn build. 3.21.0-8 - Update the minimum nss-softokn build required at runtime. 3.21.0-7 - Delete duplicates from one table 3.21.0-6 -...

CentOS Update for nspr CESA-2016:0591 centos6

Check the version of nspr SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882446";...

CentOS Update for nss-util CESA-2016:0591 centos6

Check the version of nss-util SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882447";...

CentOS Update for nss CESA-2016:0591 centos6

Check the version of nss SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882449";...

RHEL 6 : nss, nss-util, and nspr (RHSA-2016:0591)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0591 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

Oracle Linux 6 : nss, / nss-util, / and / nspr (ELSA-2016-0591)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0591 advisory. nspr 4.11.0-0.1 - Rebase to NSPR 4.11 nss 3.21.0-0.3.0.1 - Added nss-vendor.patch to change vendor 3.21.0-0.3 - Ensure all ssl.sh tests are executed...

OracleVM 3.3 / 3.4 : nss / nss-util / etc (OVMSA-2016-0042)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Ensure all ssl.sh tests are executed - Ensure abi compatibility - Rebase to NSS-3.21 nss-util - Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for...

Scientific Linux Security Update : nss, nss-util, and nspr on SL6.x i386/x86_64 (20160405)

The following packages have been upgraded to a newer upstream version: nss 3.21.0, nss-util 3.21.0, nspr 4.11.0. Security Fixes : - A use-after-free flaw was found in the way NSS handled DHE Diffie- Hellman key exchange and ECDHE Elliptic Curve Diffie-Hellman key exchange handshake messages. A...