Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20121004)

This update adds the following enhancements : - Daylight saving time in Fiji will start at 2:00 a.m. on Sunday, 21st October 2012, and end at 3 am on Sunday, 20th January 2013. - Tokelau was listed in an incorrect time zone for as long as the Zoneinfo project was in existence. The actual zone was...

kernel security and bug fix update

2.6.32-279.9.1.el6 - md raid1, raid10: avoid deadlock during resync/recovery. Dave Wysochanski 845464 835613 - fs dlm: fix deadlock between dlmsend and dlmcontrold David Teigland 849051 824964 - ata libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist Prarit Bhargava 851445 843849 - fs...

Slackware Advisory SSA:2009-014-03 ntp

The remote host is missing an update as announced via advisory SSA:2009-014-03. OpenVAS Vulnerability Test $Id: esoftslkssa200901403.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-343-01 ntp

The remote host is missing an update as announced via advisory SSA:2009-343-01. OpenVAS Vulnerability Test $Id: esoftslkssa200934301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-154-01 ntp

The remote host is missing an update as announced via advisory SSA:2009-154-01. OpenVAS Vulnerability Test $Id: esoftslkssa200915401.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2009-154-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2009-014-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2009-343-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Linux Security Advisory : ntp (MDKSA-2001:036)

Przemyslaw Frasunek reported that ntp daemons such as ntp and xntp3 are vulnerable to a buffer overflow that can lead to a remote root exploit. Linux-Mandrake users are urged to upgrade ntp and xntp3 immediately. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Scientific Linux Security Update : ntp on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-0159 ntp: buffer overflow in ntpq CVE-2009-3563 ntpd: DoS with mode 7 packets VU568372 Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged information about all such packets and replied with an NTP packet that was treated a...

Scientific Linux Security Update : ntp on SL4.x, SL5.x i386/x86_64

A flaw was discovered in the way the ntpd daemon checked the return value of the OpenSSL EVPVerifyFinal function. On systems using NTPv4 authentication, this could lead to an incorrect verification of cryptographic signatures, allowing time-spoofing attacks. CVE-2009-0021 Note: This issue only...

Scientific Linux Security Update : ntp on SL5.x i386/x86_64

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially crafted request packet that could crash ntpd. CVE-2009-1252 Note: NT...

Scientific Linux Security Update : tzdata on SL5.x, SL6.x i386/x86_64 (20120523)

This update adds the following enhancements : - The following time-zone changes have been added to the zone info database: Haiti entered a period of Daylight Saving Time DST on March 11; Gaza Strip, West Bank and Syria entered a period of DST on March 30. This update has been placed in the securi...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20120719)

This update adds the following enhancements : Daylight Saving Time will be interrupted during the holy month of Ramadan in Morocco that is July 20 - August 19, 2012 in the Gregorian Calendar. This update incorporates the exception so that Daylight Saving Time is turned off and the time setting...

Scientific Linux Security Update : ntp on SL4.x i386/x86_64

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially crafted request packet that could crash ntpd or, potentially, execut...

Scientific Linux Security Update : ipa on SL6.x i386/x86_64

This Identity Management Application is a centralized authentication, identity management and authorization solution for both traditional and cloud based enterprise environments. It integrates components of the Upstream Directory Server, MIT Kerberos, the Upstream Certificate System, NTP, and DNS...

VMware ESXi utilities and ESX Service Console third party updates (VMSA-2010-0009)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0009. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates

The remote ESXi is missing one or more security related Updates from VMSA-2010-0009. Summary ESXi update for ntp and ESX Console OS COS updates for COS kernel, openssl, krb5, gcc, bind, gzip, sudo. Relevant releases VMware ESXi 4.0.0 without patch ESXi400-201005401-SG VMware ESX 4.0.0 without...

Fedora 16 : systemd-37-15.fc16 (2012-2557)

This systemd update adds several fixes : - logind created files under /run/user/ in an insecure manner. A local attacker could create a symlink inside arbitrary directories CVE-2012-0871. - permissions of PrivateTmp directories RHBZ790522 - timedated did not run without ntp installed RHBZ790260 -...

CVE-2012-1288

The CVE refers to UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock devices that use hardcoded administrative credentials. The underlying issue is a hardcoded admin user/password that can be used to access the device via its web interface, enabling remote attackers to obtain access and potenti...