EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : boa-0.94.14-0.15.rc21.fc11 (2010-7645)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 11 : kernel-2.6.30.10-105.2.4.fc11 (2010-0919)

Security update: CVE-2010-0003 CVE-2010-0006 CVE-2010-0007 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : systemtap-1.1-1.fc11 (2010-0671)

Fixes CVE-2009-4273 Bugzilla 550172: https://bugzilla.redhat.com/showbug.cgi?id=CVE-2009-4273 New upstream release containing new features and bug fixes: better support for gcc 4.5 richer DWARF debuginfo, new preprocessor conditional for kernel 'CONFIG' testing, improved experimental unprivileged...

Fedora 11 : cpio-2.9.90-8.fc11 (2010-4302)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : gif2png-2.5.1-1102.fc11 (2010-0330)

Tue Jan 5 2010 Enrico Scholz - 2.5.1-1102 - catch another possible overflow when appending a numbered suffix detected to Tomas Hoger - applied the -overflow patch... - Sat Jan 2 2010 Enrico Scholz - 2.5.1-1101 - changed -overflow patch to abort on bad filenames instead of processing truncated...

Fedora 11 : tar-1.22-5.fc11 (2010-4306)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...

Fedora 11 : gnash-0.8.6-13.fc11 (2010-1833)

This update makes Gnash use the system version of the libltdl library instead of the bundled copy which was vulnerable to CVE-2009-3736. An update to the system libltdl fixing CVE-2009-3736 was issued on December 21, 2009. Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : qt-4.6.2-17.fc11 (2010-8379)

fix multiple flaws in webkit: CVE-2010-0047, CVE-2010-0648, CVE-2010-0656 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 11 : sudo-1.7.2p5-1.fc11 (2010-3415)

update to new upstream version - backported changes from F-12 - fixes CVE-2010-0426 sudo: sudoedit option can possibly allow for arbitrary code execution Fedora all 567676 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 11 : php-ZendFramework-1.10.4-1.fc11 (2010-8495)

Over 180 bugfixes Also fixes ZF2010-07 http://framework.zend.com/security/advisory/ZF2010-07 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : openssl-0.9.8n-2.fc11 (2010-9421)

Fix for an important security vulnerability CVE-2010-0742. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : asterisk-1.6.1.17-1.fc11 (2010-3724)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 11 : mod_auth_shadow-2.2-8.fc11 (2010-6323)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : automake-1.11.1-1.fc11.1 (2010-1216)

Fixes CVE-2009-4029 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 11 : automake15-1.5-29.fc11.1 (2010-1174)

Tue Feb 16 2010 Karsten Hopp 1.5-29.1 - update CVE-2009-4029 patch - Tue Feb 9 2010 Karsten Hopp 1.5-29 - add disttag - Tue Feb 9 2010 Karsten Hopp 1.5-28 - add fix for CVE-2009-4029 - add buildrequirement flex - Fri Jul 24 2009 Fedora Release Engineering - 1.5-27 - Rebuilt for...

Fedora 11 : php-ZendFramework-1.9.7-1.fc11 (2010-0601)

This release fixes security-related issues: ZF2010-06: Potential XSS or HTML Injection vector in ZendJson ZF2010-05: Potential XSS vector in ZendServiceReCaptchaMailHide ZF2010-04: Potential MIME-type Injection in ZendFileTransfer ZF2010-03: Potential XSS vector in ZendFilterStripTags when commen...

Fedora 11 : hamlib-1.2.8-4.fc11 (2010-4352)

Thu Mar 11 2010 Lucian Langa - 1.2.8-4 - kill rpath - use system ltdl 563975 - fix documents install - misc cleanups Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...