Denial Of Service (DoS)

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...

Fedora 28 : chromium (2018-13d8c35127)

Update to Chromium 69. EPEL-7 update is blocked by a GCC bug: 1629813, so as soon as devtoolset-8 arrives... Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087 CVE-2018-16088 CVE-2018-16086CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068...

DNS Traffic Capture: DNSCAP

dnscap is a network capture utility designed specifically for DNS traffic. It produces binary data in pcap3 and other format. This utility is similar to tcpdump1, but has a number of features tailored to DNS transactions and protocol options. DNS-OARC uses dnscap for DITL data collections. Some o...

Phabricator: Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)

From: https://secure.phabricator.com/book/phabricator/article/installationguide/ Installing Required Components If you are installing on Ubuntu or an RedHat derivative, there are install scripts available which should handle most of the things discussed in this document for you: RedHat Derivative...

Fedora 21 : owncloud-8.0.9-1.fc21 (2015-a117082cd2)

This update provides the latest upstream release of ownCloud in the current minor series - 8.0.9 for all releases but EPEL 6, 7.0.11 for EPEL 6. These releases come with unspecified 'security improvements', so updating quickly is recommended. As usual, a minor update should apply smoothly, but we...

Run a Command on Multiple Servers: ClusterSSH

Run a Command on Multiple Servers How to run a command on multiple servers at once? If you maintain multiple Linux servers, there are cases where you want to run the same commands on all the servers. For example, you may want to install/upgrade packages, patch the kernel, and update configuration...

Fedora 20 : quassel-0.9.2-1.fc20 (2014-1742)

Update to latest release of Quassel from upstream. Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possib...

Fedora 19 : quassel-0.9.2-1.fc19 (2014-1734)

Update to latest release of Quassel from upstream. Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possib...

Fedora 16 : znc-0.204-3.fc16 / znc-infobot-0.204-1.fc16 (2012-0921)

Upgrade to 0.204, add init script for EPEL Update to 0.204 to fix CVE-2012-0033 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 16 : puppet-2.6.6-3.fc16 (2011-13623)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

Torque Server Buffer Overflow Vulnerability

Name: Torque Server Buffer Overflow Vulnerability Author: Adam Zabrocki [email protected] Bartlomiej Balcerek [email protected] Maciej Kotowicz [email protected] Date: March 27, 2011 Risk: Moderate CVE: CVE-2011-2193 Description: TORQUE Resource Manager provides control over batch jobs and...

Fedora 13 : wordpress-3.1-1.fc13 (2011-3738)

In order to protect against two CVEs, I'm upgrading Wordpress in all releases to 3.1. In addition, this will obsolete wordpress-mu, since this functionality has been migrated to the main wordpress release as of wordpress 3.0, and wordpress-mu has been deprecated upstream. I would not normally mak...

Fedora 12 : lib3ds-1.3.0-9.fc12 (2010-14632)

Tue Sep 14 2010 Ralf Corsepius - 1.3.0-9 - Address https://bugzilla.redhat.com/showbug.cgi?id=633475 CVE-2010-0280. - Adopt Debian patch to add missing decl. - Tue May 11 2010 Ralf Corsepius - 1.3.0-8 - Adopt EPEL spec cleanup. Note that Tenable Network Security has extracted the preceding...