[SECURITY] Fedora 19 Update: xmonad-0.11-4.fc19

xmonad is a tiling window manager for X. Windows are arranged automatically to tile the screen without gaps or overlap, maximising screen use. All features of the window manager are accessible from the keyboard: a mouse is strictly optional. xmonad is written and extensible in Haskell. Custom...

[SECURITY] Fedora 18 Update: bluetile-0.6-13.fc18

Bluetile is a tiling window manager for Linux, designed to integrate with the GNOME desktop environment. It provides both a traditional, stacking lay out mode as well as tiling layouts where windows are arranged to use the entire screen without overlapping. Bluetile tries to make the tiling...

CVE-2013-4166

The gpgctxaddrecipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers...

Fedora 18 : file-roller-3.6.4-1.fc18 (2013-12653)

This update fixes CVE-2013-4668 : The File Roller archive manager for the GNOME desktop suffers from a path traversal vulnerability caused by insufficient path sanitization. A specially crafted archive file can be used to trigger creation of arbitrary files in any location, writable by the user...

[SECURITY] Fedora 19 Update: nagstamon-0.9.9-9.fc19

Nagstamon is a Nagios status monitor which takes place in system tray or on desktop GNOME, KDE, Windows as floating status bar to inform you in real-time about the status of your Nagios and derivatives monitored network. It allows to connect to multiple Nagios, Icinga, Opsview, Op5,...

Fedora 19 : file-roller-3.8.3-1.fc19 (2013-12667)

This update fixes CVE-2013-4668 : The File Roller archive manager for the GNOME desktop suffers from a path traversal vulnerability caused by insufficient path sanitization. A specially crafted archive file can be used to trigger creation of arbitrary files in any location, writable by the user...

Gnome File Roller directory traversal

Directory traversal on archive processing...

Oracle Linux 5 : libsoup (ELSA-2009-0344)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0344 advisory. 2.2.98-2.el5.1 - Add patch for RH bug 488030 CVE-2009-0585, soupbase64encode. Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 5 : gnome-vfs2 (ELSA-2013-0131)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0131 advisory. 2.16.2-10.el5 - Prevent trash applet crashing 848822 2.16.2-9.el5 - Prevent deleting items linking out of the trash 586015 - Do not stat every file on an...

Oracle Linux 5 : gnome-screensaver (ELSA-2008-0197)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2008-0197 advisory. 2.16.1-5.1 Resolves: 436521 - don't unlock the screen when pwent lookup fails Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 4 : libgtop2 (ELSA-2007-0765)

From Red Hat Security Advisory 2007:0765 : An updated libgtop2 package that fixes a security issue and a functionality bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libgtop2 package...

Fedora 19 : clutter-1.14.4-4.fc19 (2013-11703)

Fixes a crash that can cause gnome-shell and gdm to crash during magnifier use. This can be used to block gdm from working / shell always crash on login. This update fixes an occasional crash of gnome-shell after resuming. Note that Tenable Network Security has extracted the preceding description...

Oracle Linux 3 / 4 : gnome-vfs / gnome-vfs2 (ELSA-2009-0005)

From Red Hat Security Advisory 2009:0005 : Updated GNOME VFS packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNOME VFS is the GNOME virtual file...

Oracle Linux 3 / 4 : libgsf (ELSA-2007-0011)

From Red Hat Security Advisory 2007:0011 : Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing...

Oracle Linux 5 : Moderate: / gdm (ELSA-2007-0777)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0777 advisory. 2.16.0-31.0.1 - CVE-2007-3381 Resolves: 247659 2.16.0-31 - change 200d character to 200c character in ml.po Tenable has extracted the preceding description bloc...

Oracle Linux 5 : firefox (ELSA-2009-0436)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0436 advisory. firefox: 3.0.9-1.0.1.el5 - Update firstrun and homepage URLs - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed...

Oracle Linux 6 : java-1.6.0-openjdk (ELSA-2012-1221)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1221 advisory. 1:1.6.0.0-1.49.1.11.4 - Updated to latest IedTea6 1.11.4 - Resolves: rhbz853345 1:1.6.0.0-1.48.1.11.3 - Access gnome bridge jar is forced to have 644...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2012-1222)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1222 advisory. 1.6.0.0-1.28.1.10.9.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.28.1.10.9 - Updated to latest IcedTea6 1.10.9 - Resolves: rhbz846709 - Resolves:...

Solaris 10 (x86) : 143503-01 (deprecated)

GNOME 2.6.0x86: Trusted Extensions patch. Date this patch was last updated by Sun : Jan/08/10 This plugin has been deprecated and either replaced with individual 143503 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not...