EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : php-ZendFramework-1.10.4-1.fc11 (2010-8495)

Over 180 bugfixes Also fixes ZF2010-07 http://framework.zend.com/security/advisory/ZF2010-07 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : automake-1.11.1-1.fc11.1 (2010-1216)

Fixes CVE-2009-4029 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 11 : kernel-2.6.30.10-105.2.4.fc11 (2010-0919)

Security update: CVE-2010-0003 CVE-2010-0006 CVE-2010-0007 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : cpio-2.9.90-8.fc11 (2010-4302)

CVE-2010-0624 fix heap-based buffer overflow by expanding a specially- crafted archive572150 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : tar-1.22-5.fc11 (2010-4306)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 - do not...

Fedora 11 : automake16-1.6.3-18.fc11.1 (2010-1148)

Tue Feb 16 2010 Karsten Hopp 1.6.3-18.1 - fix CVE-2009-4029 - Fri Jul 31 2009 Karsten Hopp 1.6.3-18 - rebuild - Thu Jul 30 2009 Karsten Hopp 1.6.3-17 - fix build problem - Fri Jul 24 2009 Fedora Release Engineering - 1.6.3-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note...

Fedora 11 : boa-0.94.14-0.15.rc21.fc11 (2010-7645)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 11 : squid-3.0.STABLE24-1.fc11 (2010-2434)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 11 : postgresql-8.3.11-1.fc11 (2010-8723)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at http://www.postgresql.org/docs/8.3/static/release-8-3-11.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 11 : drupal-6.16-1.fc11 (2010-3739)

Fix for SA-CORE-2010-001: http://drupal.org/node/731710 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : texlive-2007-47.fc11 (2010-8273)

Changes in this update: fixes for CVE-2010-0739 and CVE-2010-1440 adds missing defattr to filelists fixes directory ownership of /var/lib/texmf/web2c uses official tarball for jpatch fixes post/postun scriptlets Note that Tenable Network Security has extracted the preceding description block...

Fedora 11 : systemtap-1.1-1.fc11 (2010-0671)

Fixes CVE-2009-4273 Bugzilla 550172: https://bugzilla.redhat.com/showbug.cgi?id=CVE-2009-4273 New upstream release containing new features and bug fixes: better support for gcc 4.5 richer DWARF debuginfo, new preprocessor conditional for kernel 'CONFIG' testing, improved experimental unprivileged...

Fedora 11 : nano-2.0.9-1.fc11 (2010-6776)

CVE-2010-1160 CVE-2010-1161 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)

Fix CSRF bug Secunia advisory SA38205, dokuwiki bug 1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug 1847 http://secunia.com/advisories/38183/3/ - Upgrade to the latest upstream - Fix bugzilla bug 556494 Note that Tenable Network...

Fedora 11 : cronie-1.3-4.fc11 (2010-4300)

https://vulners.com/cve/CVE-2010-0424 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 11 : viewvc-1.1.4-1.fc11 (2010-4326)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...

Fedora 11 : gnash-0.8.6-13.fc11 (2010-1833)

This update makes Gnash use the system version of the libltdl library instead of the bundled copy which was vulnerable to CVE-2009-3736. An update to the system libltdl fixing CVE-2009-3736 was issued on December 21, 2009. Note that Tenable Network Security has extracted the preceding description...