Fedora 21 : procmail-3.22-36.fc21 (2014-10142)

This is an update fixing CVE-2014-3618. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 21 : kernel-3.16.2-301.fc21 (2014-10693)

Fix CVE-2014-3631 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Researcher Discloses Wi-Fi Thermostat Vulnerabilities

Heatmiser, a U.K.-based manufacturer of digital thermostats, is contacting its customers today about a series of security issues that could expose a Wi-Fi-connected version of its product to takeover. Andrew Tierney, a “reverse-engineer by night,” whose specialty is digging up bugs in embedded...

USN-2350-1 nss update

The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.17 which includes the latest CA certificate bundle...

USN-2350-1: NSS update

The NSS package contained outdated CA certificates. This update refreshes the NSS package to version 3.17 which includes the latest CA certificate bundle...

PT-2014-1379

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.16.2.1 Mozilla Firefox versions prior to 32.0.3 Mozilla Firefox ESR versions prior to 24.8.1 and 31.x prior to 31.1.1 Mozilla Thunderbird versions prior to 24.8.1 and 31.x prior to 31.1...

Ubuntu: Security Advisory (USN-2319-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nss: TOCTOU, potential use-after-free in libssl's session ticket processing (MFSA 2014-12)

A race condition was found in the way NSS implemented session ticket handling as specified by RFC 5077. An attacker could use this flaw to crash an application using NSS or, in rare cases, execute arbitrary code with the privileges of the user running that application...

nss: false start PR_Recv information disclosure security issue

A flaw was found in the way TLS False Start was implemented in NSS. An attacker could use this flaw to potentially return unencrypted information from the server...

Moderate: Red Hat Security Advisory: nss and nspr security, bug fix, and enhancement update

Updated nss and nspr packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Tenda portable router save 0DAY vulnerabilities hackers can steal the privacy-vulnerability warning-the black bar safety net

9 on 1 5 May, just on the line rising vulnerability platform to the following address: a http://loudong.rising.com.cn to exposed Tenda router 4G301 model the presence of memory-typeXSScross-site scripting vulnerability vulnerability number: RSV-2 0 1 4-0 0 1 River. Rising security experts, the...

Fedora 20 : curl-7.32.0-13.fc20 (2014-10741)

use only full matches for hosts used as IP address in cookies CVE-2014-3613 - reject incoming cookies set for top level domains CVE-2014-3620 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Solaris 10 (sparc) : 150817-04 (deprecated)

VM Server for SPARC 3.1: ldmd patch. Date this patch was last updated by Sun : Dec/11/14 This plugin has been deprecated and either replaced with individual 150817 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Cisco Patches Denial-of-Services Vulnerability in IMC

US-CERT today released an advisory warning of a vulnerability in Cisco’s Integrated Management Controller IMC. Cisco released an update that patches the security hole. The IMC is a baseboard management controller that oversees embedded servers inside Cisco Unified Computing System E-Series Blade...

Fedora 20 : python-django14-1.4.14-1.fc20 (2014-9788)

update to 1.4.14 fixing CVE-2014-0480 CVE-2014-0481 CVE-2014-0482, CVE-2014-0483 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : python-elixir-0.7.1-14.fc19 (2014-9752)

CVE-2012-2146 The 'actsasencrypted' feature of Elixir does not correctly initialize the random seed for the Blowfish encryption algorithm, and is therefore insecure. This option adds a new optional AES mode which does not suffer this problem, plus a warning is now printed when insecure Blowfish...

Fedora 19 : thunderbird-enigmail-1.7.2-1.fc19 (2014-9954)

Upstream annoncement : - This is a bugfix release, fixing several major issues found in v1.7. - A security bug CVE-2014-5369 has been fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 19 : python-django-1.5.9-1.fc19 (2014-9791)

update to 1.5.9 fixing CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

USN-2343-1 nss vulnerability

Tyson Smith and Jesse Schwartzentruber discovered that NSS contained a race condition when performing certificate validation. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2014-5369

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network...