XSS vulnerability in "children" macro when displaying excerpts

Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - Add the \children\ macro to page A, with "Show excerpts" checked - Alert is shown when viewing A This is currently present on EAC - likely to be in released versions; not tested yet...

XSS vulnerability in "children" macro when displaying excerpts

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-35777. panel - Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - Ad...

XSS vulnerability in "children" macro when displaying excerpts

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-35777. panel - Create a parent page A with a child page B - Add an \excerpt\ macro to B containing the text alert"Gotcha!"; - Ad...

XSS when adding Stash Linked Repositories

Stash server title in the "Stash server" dropdown is not being escaped and if it contains a script tag that script will be eval'd. Our Stash QA test data has the server title "Welcome to alert666 Long Ståш Title with ..." which causes the "666" to alert when the "Add repository" button is clicked...

[WinAppDbg 1.5] Python Debugger

The WinAppDbg python module allows developers to quickly code instrumentation scripts in Python under a Windows environment. It uses ctypes to wrap many Win32 API calls related to debugging, and provides an object-oriented abstraction layer to manipulate threads, libraries and processes, attach...

SuSE 11.2 Security Update : pcp (SAT Patch Number 7221)

pcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. - Transition daemons to run under an unprivileged account. - Fixes for security advisory CVE-2012-5530: tmpfile flaws;. bnc782967 - Fix pcp1 command short-form pmlogger...

SuSE 10 Security Update : pcp (ZYPP Patch Number 8421)

pcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. o Transition daemons to run under an unprivileged account. o Fixes for security advisory CVE-2012-5530: tmpfile flaws; bnc782967. o Fix pcp1 command short-form pmlogger...

Fedora 17 : pcp-3.6.9-1.fc17 (2012-17050)

Update to latest PCP sources, and resolve these bugzillas : - Fix pmcd sigsegv in NUMA/CPU indom setup BZ 858384 - Fix sar2pcp uninitialised perl variable warning BZ 859117 - Fix pcp.py and pmcollectl with older python versions BZ 852234 - Added the python PMAPI bindings and an initial python...

MDVA-2012:025 : kdegraphics4

In kdegraphics4-4.4.5-0.2 there is subpackage kdegraphics4-devel. It has 3 unversioned Obsoletes. These obsoletes cause problems for future updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

A number of XSS holes found during QA bltiz

See Mark H and Coreys blitz pages for details...

MDVA-2011:014 : kde4

In mdv 2010.1 we provided kde 4.4.3 ,this update provides kde 4.4.5 and Qt 4.6.3, which fixed several bugs in kde/qt. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2010:235 : keychain

Due to a bug in the keychain package the '--noask' option wasn't always used, this caused the Qt4 ssh-askpass dialogue to get loaded before a window manager was fully-started, preventing the user from entering the passphrase as the dialogue never gets focus without a window manager running. This...

MDVA-2010:217 : gjs

It was discovered that the gjs packages wasn't rebuilt for the latest xulrunner version, this advisory fixes the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDVA-2010:216 : gkrellm

The gkrellm package shipped in 2010.0 and 2010.1 was build without libsensor support, preventing the usage of hardware sensors in some cases, as reported in bug 55400. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

MDVA-2010:194 : boost

Due to a typo in the boost package in Mandriva 2010.1 some files in the lib64boost-static-devel were symlinked wrongly, this update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

MDVA-2010:114 : rpmdrake

This update fixes rpmdrake to suggest packages from disabled backports media only when Backports view is used 40556. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2009:207 : tcsh

Tcsh as shipped with Mandriva Linux 2010.0 would abort on startup with the Unknown colorls variable mh. error, caused by inability to handle the MULTIHARDLINK color parameter bug 53139. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associate...

MDVA-2009:191 : mc

This update updates Midnight Commander to latest version, which fixes occasional crashes when searching within editor/browser. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

MDVA-2009:121 : pulseaudio

Multiple bugs has been identified and corrected in pulseaudio: - alsa: allow configuration of fallback device strings in profiles util: if NULL is passed to papathgetfilename just hand it through alsa: don't hit an assert when invalid module arguments are passed - alsa: fix wording, we are speaki...

MDVA-2009:255 : fontconfig

A bug in fontconfig language cache was generating invalid cache which would cause crashes or freeze when upgrading previous Mandriva Linux release to Mandriva Linux 2010 using live update feature. This updates fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...