1097 matches found
CVE-2014-1896
The 1 dosend and 2 dorecv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."...
Moderate: Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update
Updated openstack-heat packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...
[Subterfuge v1.0] Automated Man-in-the-Middle Attack Framework
Subterfuge , a Framework to take the arcane art of Man-in-the-Middle Attacks and make it as simple as point and shoot. Subterfuge demonstrates vulnerabilities in the ARP Protocol by harvesting credentials that go across the network and even exploiting machines by injecting malicious code directly...
HawtJNI: predictable temporary file name leading to local arbitrary code execution
The HawtJNI Library class wrote native libraries to a predictable file name in /tmp when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJN...
augeas security, bug fix, and enhancement update
1.0.0-5 - Don't package lenses in tests/ subdirectory. related: rhbz817753 1.0.0-4 - Rebase to Augeas 1.0.0 resolves: rhbz817753 - Add dependency on libxml2-devel. - Remove all patches all upstream and included in 1.0.0. - Print tests/test-suite.log when the tests fail. - Add fix for regression...
Fedora 20 : krb5-1.11.3-29.fc20 (2013-20687)
This update incorporates a backported fix to make libgssapikrb5's credential import routines work better, which is needed by newer versions of gssproxy, and corrects a packaging error which resulted in the /etc/gss directory not being owned by any packages. Further, it incorporates a fix for a...
Fedora 18 : rubygems-1.8.25-8.fc18 (2013-17649)
Previously a security flow was found on rubygems for validating versions with a regular expression which is vulnerable to denial of service due to backtracking. Although this was thought to be fixed in the previous rubygems, the fix was found imcomplete and the imcompleteness is now assigned as...
Fedora 19 : rubygems-2.0.10-106.fc19 (2013-17662)
Previously a security flow was found on rubygems for validating versions with a regular expression which is vulnerable to denial of service due to backtracking. Although this was thought to be fixed in the previous rubygems, the fix was found imcomplete and the imcompleteness is now assigned as...
Fedora 20 : rubygems-2.0.10-106.fc20 (2013-17603)
Previously a security flow was found on rubygems for validating versions with a regular expression which is vulnerable to denial of service due to backtracking. Although this was thought to be fixed in the previous rubygems, the fix was found imcomplete and the imcompleteness is now assigned as...
Updated kde packages fix security issues
This update provides the last stable version of KDE for the 4.10.x branch. Some of the new packages fixes additional issues open on our tracker : - A memory leak in kde-workspace kde 314919 & mga 7953 - A memory leak in kmix mga 10702 & kde 309464 - A packaging issue affecting kdebase4-runtime...
MGASA-2013-0269 Updated kde packages fix security issues
This update provides the last stable version of KDE for the 4.10.x branch. Some of the new packages fixes additional issues open on our tracker : - A memory leak in kde-workspace kde 314919 & mga 7953 - A memory leak in kmix mga 10702 & kde 309464 - A packaging issue affecting kdebase4-runtime mg...
Fedora 19 : pmount-0.9.23-4.fc19 (2013-8906)
Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 17 : pmount-0.9.23-4.fc17 (2013-8789)
Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 18 : spnavcfg-0.2.1-5.fc18 (2013-8794)
Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965522. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 18 : libvirt-0.10.2.5-1.fc18 (2013-8681)
Rebased to version 0.10.2.5 - Fix creating snapshot on lvm pool bz 955371 - Properly escape audit paths bz 922186 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 Note that Tenable Network Security has extracted the preceding...
Fedora 19 : libvirt-1.0.5.1-1.fc19 (2013-8635)
Rebased to version 1.0.5.1 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 - Fix stream operations like screenshot bz 960879 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Mandriva Linux Security Advisory : courier-authlib (MDVSA-2013:068)
When using the authpgsql module and if the Postgres server goes down, authpgsql will start leaking memory. A packaging flaw was discovered that caused the courier-authlib-devel package to be installed when installing for example maildrop. This update fixes both of these issues. %NASLMINLEVEL 7030...
CVE-2013-0260
Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credentials via unknown vectors...
