Scientific Linux Security Update : firewalld on SL7.x (noarch) (20161103)

The following packages have been upgraded to a newer upstream version: firewalld 0.4.3.2. Security Fixes : - A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change...

Important: java-1.7.0-openjdk

Issue Overview: Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. CVE-2014-6506, CVE-2014-6531, CVE-2014-6502, CVE-2014-6511, CVE-2014-6504, CVE-2014-65...

Scientific Linux Security Update : rubygems on SL6.x (noarch) (20131017)

It was found that RubyGems did not verify SSL connections. This could lead to man-in-the-middle attacks. CVE-2012-2126 It was found that, when using RubyGems, the connection could be redirected from HTTPS to HTTP. This could lead to a user believing they are installing a gem via HTTPS, when the...

Scientific Linux Security Update : sos on SL5.x (noarch) (20130730)

The sosreport utility collected the Kickstart configuration file '/root /anaconda-ks.cfg', but did not remove the root user's password from it before adding the file to the resulting archive of debugging information. An attacker able to access the archive could possibly use this flaw to obtain th...

Scientific Linux Security Update : axis on SL6.x (noarch) (20130219)

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. CVE-2012-57...

Important: cacti

Issue Overview: The release notes http://www.cacti.net/releasenotes087h.php for Cacti 0.8.7h indicate that two security vulnerabilities were fixed, though no corresponding CVE has been issued. Affected Packages: cacti Issue Correction: Run yum update cacti or yum update --advisory ALAS-2011-23 to...

Fedora Core 10 FEDORA-2009-8020 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8020. OpenVAS Vulnerability Test $Id: fcore20098020.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8020 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 10 : kdelibs3-3.5.10-13.fc10 (2009-8020)

This update fixes several security issues in the KDE 3 compatibility version of KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, the package was fixed to build with the...

MDKA-2007:054 : dkms

The dkms packages that shipped with Mandriva Linux 2007.0 and 2007.1 did not work with kernel versions of 2.6.21 and higer due to the use of an obsolete Makefile target. The updated packages fix this limitation. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...