EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : drupal-6.16-1.fc11 (2010-3739)

Fix for SA-CORE-2010-001: http://drupal.org/node/731710 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : nano-2.0.9-1.fc11 (2010-6776)

CVE-2010-1160 CVE-2010-1161 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : ncpfs-2.2.6-12.fc11 (2010-1168)

The updated package fixes race condition by ncpfsmount/ncpfsumount operations. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 11 : postgresql-8.3.11-1.fc11 (2010-8723)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at http://www.postgresql.org/docs/8.3/static/release-8-3-11.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 11 : php-ZendFramework-1.9.7-1.fc11 (2010-0601)

This release fixes security-related issues: ZF2010-06: Potential XSS or HTML Injection vector in ZendJson ZF2010-05: Potential XSS vector in ZendServiceReCaptchaMailHide ZF2010-04: Potential MIME-type Injection in ZendFileTransfer ZF2010-03: Potential XSS vector in ZendFilterStripTags when commen...

Fedora 11 : automake-1.11.1-1.fc11.1 (2010-1216)

Fixes CVE-2009-4029 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 11 : automake15-1.5-29.fc11.1 (2010-1174)

Tue Feb 16 2010 Karsten Hopp 1.5-29.1 - update CVE-2009-4029 patch - Tue Feb 9 2010 Karsten Hopp 1.5-29 - add disttag - Tue Feb 9 2010 Karsten Hopp 1.5-28 - add fix for CVE-2009-4029 - add buildrequirement flex - Fri Jul 24 2009 Fedora Release Engineering - 1.5-27 - Rebuilt for...

Fedora 11 : asterisk-1.6.1.17-1.fc11 (2010-3724)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 11 : mod_auth_shadow-2.2-8.fc11 (2010-6323)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : krb5-1.6.3-31.fc11 (2010-8796)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 11 : squid-3.0.STABLE24-1.fc11 (2010-2434)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)

Fix CSRF bug Secunia advisory SA38205, dokuwiki bug 1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug 1847 http://secunia.com/advisories/38183/3/ - Upgrade to the latest upstream - Fix bugzilla bug 556494 Note that Tenable Network...

Fedora 11 : hamlib-1.2.8-4.fc11 (2010-4352)

Thu Mar 11 2010 Lucian Langa - 1.2.8-4 - kill rpath - use system ltdl 563975 - fix documents install - misc cleanups Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 11 : php-ZendFramework-1.10.4-1.fc11 (2010-8495)

Over 180 bugfixes Also fixes ZF2010-07 http://framework.zend.com/security/advisory/ZF2010-07 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : openssl-0.9.8n-2.fc11 (2010-9421)

Fix for an important security vulnerability CVE-2010-0742. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : lighttpd-1.4.26-2.fc11 (2010-7636)

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug 2157 where SSL stopped working with RHEL 5.4. Note that Tenable Network Security has extracted the preceding...

Fedora 11 : viewvc-1.1.4-1.fc11 (2010-4326)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...