python27:2.7 security update

babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...

Apache Tomcat Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in RedHat based systems where improper file permissions are applied to /usr/lib/tmpfiles.d/tomcat.conf for Apache Tomcat versions before 7.0.54-8. The configuration files in tmpfiles.d are used by systemd-tmpfiles to manage temporary files including...

Exploit for Incorrect Authorization in Polkit_Project Polkit

CVE-2021-3560PoC polkit exploit script Automated script for...

Exploit for Incorrect Authorization in Polkit_Project Polkit

polkadots CVE-2021-3560 Local PrivEsc Exploit This e...

Directory traversal

The pre-install script in texlive 3.1.20140525r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory...

CVE-2015-0296

The pre-install script in texlive 3.1.20140525r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory...

Apache Tomcat on RedHat Based Systems Insecure Temp Config Privilege Escalation

This module exploits a vulnerability in RedHat based systems where improper file permissions are applied to /usr/lib/tmpfiles.d/tomcat.conf for Apache Tomcat versions before 7.0.54-8. This may also work against The configuration files in tmpfiles.d are used by systemd-tmpfiles to manage temporary...

graphite2 security, bug fix, and enhancement update

1.3.6-1 - Related: rhbz1309052 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 1.3.5-1 - Resolves: rhbz1309052 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 1.2.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora24MassRebuild 1.2.4-5 - Rebuilt for...

Fedora 21 : snappy-player-1.0-7.20151010git166a98.fc21 (2015-3471dfb5b4)

snappy-player-1.0-7.20151010git166a98.fc23 - Update to commit 166a98 - Hardened build activated on F23 snappy-player-1.0-7.20151010git166a98.fc21 - Update to commit 166a98 - Hardened build activated on F23 snappy- player-1.0-7.20151010git166a98.fc22 - Update to commit 166a98 - Hardened build...

Fedora 21 : xen-4.4.3-8.fc21 (2015-f150b2a8c8)

x86: CPU lockup during exception delivery XSA-156, CVE-2015-5307, CVE-2015-8104 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 21 : webkitgtk-2.4.9-2.fc21 / webkitgtk3-2.4.9-2.fc21 (2015-6999afd53e)

webkitgtk-2.4.9-2.fc21 - rhbz1189303 - abrt midori: WebCore::SQLiteStatement::prepare: midori killed by SIGSEGV Initialize string in SQLiteStatement before using it webkitgtk-2.4.9-2.fc22 - rhbz1189303 - abrt midori: WebCore::SQLiteStatement::prepare: midori killed by SIGSEGV Initialize string in...

Fedora 21 : ProDy-1.7.1-1.fc21 (2015-68f5a5ba94)

ProDy-1.7.1-1.el6 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds ProDy-1.7.1-1.fc22 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds ProDy-1.7.1-1.fc21 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds...

Fedora 21 : owncloud-8.0.9-1.fc21 (2015-a117082cd2)

This update provides the latest upstream release of ownCloud in the current minor series - 8.0.9 for all releases but EPEL 6, 7.0.11 for EPEL 6. These releases come with unspecified 'security improvements', so updating quickly is recommended. As usual, a minor update should apply smoothly, but we...

Fedora 21 : openjpeg2-2.1.0-7.fc21 (2015-1c9ed24c61)

This update adds a fix for CVE-2015-6581 double free vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 21 : springframework-3.2.15-1.fc21 (2015-9295d75400)

Security fix for CVE-2015-5211. Update to 3.2.15.RELEASE Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Fedora 21 : abrt-2.3.0-12.fc21 / libreport-2.3.0-10.fc21 (2015-6542ab6d3a)

Security fix for CVE-2015-5302 abrt-2.3.0-12.fc21 - doc: fix default DumpLocation in abrt.conf man page - bodhi: fix typo in error messages - abrt- dump-xorg: support Xorg log backtraces prefixed by EE libreport-2.3.0-10.fc21 - fix save users changes after reviewing dump dir files - Resolves...

Fedora 21 : ntp (2015-77bfbc1bcd)

The remote Fedora 21 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-77bfbc1bcd advisory. Security fix for CVE-2015-7704, CVE-2015-5300, CVE-2015-7692, CVE-2015-7871, CVE-2015-7702, CVE-2015-7691, CVE-2015-7852, CVE-2015-7701 ---- Securit...

Fedora 21 : lxdm-0.4.1-10.fc21 (2015-7766c0d939)

It is found that lxdm does not close file descriptor for log file althouhg it should. Also session started via lxdm can allow any local user to connect X. This new rpm should fix these issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

Fedora 21 : xen-4.4.3-7.fc21 (2015-242be2c240)

nine security updates CVE-2015-7969 CVE-2015-7970 CVE-2015-7813 CVE-2015-7814 CVE-2015-7812 CVE-2015-7971 CVE-2015-7835 CVE-2015-7972 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 21 : php-5.6.14-1.fc21 (2015-366f3dd73f)

01 Oct 2015, PHP 5.6.14 Core: Fixed bug php70370 Bundled libtool.m4 doesn't handle FreeBSD 10 when building extensions. Adam CLI server: Fixed bug php68291 404 on urls with '+'. cmb DOM: Fixed bug php70001 Assigning to DOMNode::textContent does additional entity encoding. cmb Mysqlnd: Fixed bug...