CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

CVE-2013-1812

CVE-2013-1812 affects the ruby-openid gem for Ruby, with the vendor reference stating: “before 2.2.2 … allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.” The linked advisories confirm the issue ...

CVE-2013-1812

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service CPU consumption via 1 a large XRDS document or 2 an XML Entity Expansion XEE attack...

FreeBSD : drupal -- multiple vulnerabilities (d9649816-5e0d-11e3-8d23-3c970e169bc2)

Drupal Security Team reports : Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. - Multiple vulnerabilities due to optimistic cross-site request forgery protection Form API validation - Drupal 6 and 7 - Multiple vulnerabilities due to weakness in pseudorandom numb...

Fedora 20 : rubygem-ruby-openid-2.3.0-3.fc20 (2013-20238)

New package. A Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 20 Update: rubygem-ruby-openid-2.3.0-3.fc20

The Ruby OpenID library, with batteries included. A Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications...

[SECURITY] Fedora 19 Update: rubygem-ruby-openid-2.3.0-3.fc19

The Ruby OpenID library, with batteries included. A Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications...

Fedora Update for rubygem-ruby-openid FEDORA-2013-20260

Check for the Version of rubygem-ruby-openid OpenVAS Vulnerability Test Fedora Update for rubygem-ruby-openid FEDORA-2013-20260 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora 19 : rubygem-ruby-openid-2.3.0-3.fc19 (2013-20260)

Package is renamed from ruby-openid. This package is a Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications. Note that Tenable Network Security has extracted the preceding description block directly from the Fedo...

Fedora Update for rubygem-ruby-openid FEDORA-2013-20260

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated php-pear-Auth_OpenID package fixes security vulnerability

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via XRDS data containing an external entity declaration in conjunction with an entity...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253

Check for the Version of php-pear-Auth-OpenID OpenVAS Vulnerability Test Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258

Check for the Version of php-pear-Auth-OpenID OpenVAS Vulnerability Test Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 18 : php-pear-Auth-OpenID-2.2.2-7.fc18 (2013-15253)

Fix for CVE-2013-4701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 19 : php-pear-Auth-OpenID-2.2.2-7.fc19 (2013-15258)

Fix for CVE-2013-4701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 18 Update: php-pear-Auth-OpenID-2.2.2-7.fc18

An implementation of the OpenID single sign-on authentication protocol...

[SECURITY] Fedora 19 Update: php-pear-Auth-OpenID-2.2.2-7.fc19

An implementation of the OpenID single sign-on authentication protocol...

CVE-2013-4701

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via XRDS data containing an external entity declaration in conjunction with an entity...