Fedora 19 : drupal7-entity-1.3-1.fc19 (2014-0508)

Updated to 1.3 1.3 - Release notes: https://drupal.org/node/2169589 - SA-CONTRIB-2014-001: https://drupal.org/node/2169595 - CVE-2014-1398, CVE-2014-1399, CVE-2014-1400 1.2 - Release notes: https://drupal.org/node/2065197 - SA-CONTRIB-2013-068: https://drupal.org/node/2065207 1.1 - Release notes:...

SA-CONTRIB-2013-095 - Organic Groups - Access bypass

Two issues exist within entity references and permissions relating to OG, allowing users potential access bypass. Posting content into groups where a user is not a member Organic Groups does not sufficiently check the group audience fields e.g. oggroupref field from being populated with invalid...

Amazon Linux AMI : postgresql8 (ALAS-2013-244)

An array index error, leading to a heap-based out-of-bounds buffer read flaw, was found in the way PostgreSQL performed certain error processing using enumeration types. An unprivileged database user could issue a specially crafted SQL query that, when processed by the server component of the...

CentOS Update for postgresql CESA-2013:1475 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for postgresql and postgresql84 RHSA-2013:1475-01

Check for the Version of postgresql and postgresql84 OpenVAS Vulnerability Test RedHat Update for postgresql and postgresql84 RHSA-2013:1475-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

SA-CONTRIB-2013-088 - Secure Pages - Missing Encryption of Sensitive Data

The Secure Pages module manages redirects between HTTP and HTTPS pages. A flaw in the URL path matching could lead some pages and forms to be transmitted via plain HTTP, even if the administrator intended those pages to use HTTPS. This flaw may surface either due to a malicious user enticing a us...

SA-CONTRIB-2013-085 - Feed Element Mapper - Cross Site Scripting

Feed Element Mapper is an add-on module for FeedAPI that maps elements on a feed item such as tags or the author name to taxonomy or CCK fields. The module doesn't sufficiently filter text when displaying options to users. This vulnerability is mitigated by the fact that an attacker must have a...

CVE-2013-4305: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-4202: Undefined Security Weakness

The 1 backup api/contrib/backups.py and 2 volume transfer contrib/volumetransfer.py APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service resource consumption and crash via an XML Entity Expansion XEE attack. NOTE: this issue is due to an...

Fedora 18 : drupal7-theme-zen-5.4-1.fc18 (2013-15142)

Update to upstream 5.4 release for security and bug fixes - SA-CONTRIB-2013-070 https://drupal.org/node/2071157 - Upstream changelog for this release is available at https://drupal.org/node/2071055 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 18 : drupal7-entity-1.2-1.fc18 (2013-14930)

Update to upstream 1.2 release for security and bug fixes - Upstream changelog for this release is available at https://drupal.org/node/2065197 - SA-CONTRIB-2013-068 https://drupal.org/node/2065207 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 19 : drupal7-theme-zen-5.4-1.fc19 (2013-15147)

Update to upstream 5.4 release for security and bug fixes - SA-CONTRIB-2013-070 https://drupal.org/node/2071157 - Upstream changelog for this release is available at https://drupal.org/node/2071055 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332

Check for the Version of ghc-xmonad-contrib OpenVAS Vulnerability Test Fedora Update for ghc-xmonad-contrib FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for xmonad FEDORA-2013-13332

Check for the Version of xmonad OpenVAS Vulnerability Test Fedora Update for xmonad FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora 18 : subversion-1.7.11-1.fc18.1 (2013-13672)

This update includes the latest release of Apache Subversion 1.7, version 1.7.11. Several security vulnerabilities are fixed in this update : Subversion's moddavsvn Apache HTTPD server module will trigger an assertion on some requests made against a revision root. This can lead to a DoS. If...

SA-CONTRIB-2013-069 - Password Policy - XSS

This module enables you to specify a certain level of password complexity aka. "password hardening" for user passwords in Drupal by defining a password policy. When viewing and editing a password policy, the module doesn't sufficiently filter the form text field input and display for the "Passwor...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388

Check for the Version of ghc-xmonad-contrib OpenVAS Vulnerability Test Fedora Update for ghc-xmonad-contrib FEDORA-2013-13388 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF)

This module enables users to sign into a Drupal website using Mozilla Persona. The module uses a security token to ensure that a sign-in request is made from a web page that is participating in the current session. It was possible for a security token that was not of type "string" to be accepted ...