EUVD-2010-0772

Malware in sbrugna...

North Korea's Red Star OS (Looks Like Mac OS X) Spies on its Own People

North Korea has its own homegrown computer operating system that looks remarkably just like Apple’s OS X, which not only prevents potential foreign hacking attempts but also provides extensive surveillance capabilities. Two German researchers have just conducted an in-depth analysis of the...

Directory traversal

Directory traversal vulnerability in DeviceKit-disks in DeviceKit, as used in Fedora 11 and 12 and possibly other operating systems, allows local users to gain privileges via .. dot dot sequences in the label for a pluggable storage device...

Fedora 11 : viewvc-1.1.5-1.fc11 (2010-5507)

Full changelog: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r evision=2359&view=markup&pathrev=HEAD - security fix: escape user-provided searchre input to avoid XSS attack Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 11 : asterisk-1.6.1.17-1.fc11 (2010-3724)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 11 : maniadrive-1.2-17.fc11 / php-5.2.12-1.fc11 (2010-0495)

Update to the latest PHP 5.2 release which focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. See http://www.php.net/releases/5212.php for more details. Note that...

Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)

Fix CSRF bug Secunia advisory SA38205, dokuwiki bug 1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug 1847 http://secunia.com/advisories/38183/3/ - Upgrade to the latest upstream - Fix bugzilla bug 556494 Note that Tenable Network...

Fedora 11 : sudo-1.7.2p5-1.fc11 (2010-3415)

update to new upstream version - backported changes from F-12 - fixes CVE-2010-0426 sudo: sudoedit option can possibly allow for arbitrary code execution Fedora all 567676 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 11 : libpng-1.2.43-1.fc11 (2010-4616)

Update to libpng 1.2.43, includes fix for CVE-2010-0205 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : pidgin-2.6.6-1.fc11 (2010-1279)

2.6.6 with security and numerous minor bug fixes CVE-2010-0277 CVE-2010-0420 CVE-2010-0423 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 11 : puppet-0.25.4-1.fc11 (2010-1079)

The update from 0.24.x to 0.25.x brings many, many changes and improvements to puppet. The upstream release notes cover them in detail: http://reductivelabs.com/trac/puppet/wiki/ReleaseNotes Of note is that 0.25.x clients do not work with 0.24.x masters, so it is important to update the master...

Fedora 11 : mingw32-libltdl-1.5.26-17.fc11 (2010-2943)

Not sure whether mingw32-libltdl due to its special nature in being for cross- compilation development for an entirely different system is actually affected by CVE-2009-3736, but this should make sure everything is fixed. Note that Tenable Network Security has extracted the preceding description...

Fedora 11 : sssd-1.0.1-1.fc11 (2010-0451)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 11 : kde-l10n-4.4.3-1.fc11 / kdeaccessibility-4.4.3-1.fc11.1 / kdeadmin-4.4.3-1.fc11.1 / etc (2010-8547)

This update set updates the KDE Software Compilation KDE SC to KDE SC 4.4.3, which has a number of improvements: Numerous fixes in Konsole, KDE's terminal emulator, among them two possible crashers in session management Flash plugin support in KHTML has been enhanced to work with newest Youtube...

Fedora 11 : GraphicsMagick-1.3.7-4.fc11 (2010-0001)

Mon Dec 28 2009 Rex Dieter - 1.3.7-4 - CVE-2009-1882 503017 - Fri Dec 4 2009 Stepan Kasal - 1.3.7-3 - rebuild against perl 5.10.1 - Fri Nov 6 2009 Rex Dieter - 1.3.7-2 - cleanup/uncruftify .spec - Thu Sep 17 2009 Rex Dieter - 1.3.7-1 - GraphicsMagick-1.3.7 - Mon Aug 3 2009 Ville Skytta - 1.3.6-2...

Fedora 11 : mysql-5.1.47-1.fc11 (2010-9061)

Update to MySQL 5.1.47, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850 In F13, also create mysql group explicitly in pre-server script, to ensure correct GID Note that Tenable Network Security...

Fedora 11 : cronie-1.3-4.fc11 (2010-4300)

https://vulners.com/cve/CVE-2010-0424 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 11 : hamlib-1.2.8-4.fc11 (2010-4352)

Thu Mar 11 2010 Lucian Langa - 1.2.8-4 - kill rpath - use system ltdl 563975 - fix documents install - misc cleanups Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 11 : kernel-2.6.30.10-105.2.23.fc11 (2010-1804)

Security bugs: CVE-2010-0410 CVE-2010-0415 563091 Also fixes: xfs: xfsswapextents needs to handle dynamic fork offsets F12510823 Possible system lockups caused by the fix for bug 559100 in the previous updates. Note that Tenable Network Security has extracted the preceding description block...

Fedora 11 : viewvc-1.1.4-1.fc11 (2010-4326)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...