CVE-2017-7512

It was found that RH-3scale AMP would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs...

Oracle Linux 6 : glibc (ELSA-2017-1480)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1480 advisory. 2.12-1.209.0.3.2 - backport rh patch 1047983 from OL7, Orabug 25407655 2.12-1.209.2 - Avoid large allocas in the dynamic linker 1452711 2.12-1.209.1 - Fix threa...

CVE-2016-6825

Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, and RH2288H V3 servers with software before V100R003C00SPC515 allow remote attackers to obtai...

Important: Red Hat Security Advisory: rh-mariadb101-mariadb security update

An update for rh-mariadb101-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

sos security and bug fix update

3.2-28.0.1.2 - Add vendor, vendor URL info for Oracle Linux orabug 17656507 [email protected] - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 [email protected] - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 [email protected] -...

Oracle: Security Advisory (ELSA-2013-0516)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

java-1.8.0-openjdk security update

1:1.8.0.51-1.b16 - Add md5sum for January 2015 java.security update so it gets updated this time. - Resolves: rhbz1235162 1:1.8.0.51-0.b16 - July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Add %name prefix to patches to avoid...

Huawei Tecal RH Series Has Multiple Vulnerabilities

Huawei Tecal RH Series is a rackmount server product. The Huawei Tecal RH Series device fails to properly validate user HTTP requests when processing the length of DNS server packets, allowing the user to perform certain actions resulting in buffer overflows or execution of arbitrary code...

Oracle 8.x cmctl Buffer Overflow Vulnerability

No description provided by source. / source: http://www.securityfocus.com/bid/1968/info cmctl is the Connection Control Manager, part of the Oracle 8i installation. A vulnerability exists that can allow elevation of privileges. The problem occurs in the way cmctl handles the user-supplied command...

evolution security, bug fix, and enhancement update

cheese 2.28.1-8 - Rebuild against newer evolution-data-server. Resolves: 973276 control-center 2.28.1-39 - Rebuild against newer evolution-data-server. Resolves: 973279 ekiga 3.2.6-4 - Rebuild against newer evolution-data-server. - Add patch to build break include where needed Resolves: 973281...

Oracle Linux 5 : Moderate: / evolution-data-server (ELSA-2007-0344)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0344 advisory. 1.8.0-15.0.3.el5 - Add patch for RH bug 235289 APOP authentication vulnerability. 1.8.0-15.0.2.el5 - Remove Makefile.in changes that accidentally slipped into t...

Oracle Linux 6 : NetworkManager (ELSA-2011-1338)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1338 advisory. - ifcfg-rh: CVE-2011-3364: filter newline characters when writing into ifcfg- files rh 737338 Tenable has extracted the preceding description block directly fro...

icedtea-web security update

1.2.3-2 - Added temporally! posttrans forcing creation of symlinks - should be removed next release - Resolves: rhbz949094 1.2.3-1 - fixed postun - removal of alternatives for plugin restricted to correct removal process only - fixed date in changelog previous entry - Resolves: rhbz949094 1.2.3-0...

SuSE Update for update openSUSE-SU-2013:0275-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201302751.nasl 8650 2018-02-03 12:16:59Z teissa $ SuSE Update for update openSUSE-SU-2013:0275-1 update Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Scientific Linux Security Update : NetworkManager on SL6.x i386/x86_64

NetworkManager is a network link manager that attempts to keep a wired or wireless network connection active at all times. The ifcfg-rh NetworkManager plug-in is used in Scientific Linux distributions to read and write configuration information from the /etc/sysconfig/network-scripts/ifcfg- files...

sos security, bug fix, and enhancement update

1.7-9.62.0.1.el5 - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile 1.7-9.62 - Always log plugin exceptions that are not raised to the interpreter Resolves: bz717480 - Ensure relative...

CVE-2011-3048

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

pidgin security update

2.7.9-3.el62.2 - Add patch for CVE-2011-4602 RH bug 766452. 2.7.9-3.el62.1 - Add patch for CVE-2011-4601 RH bug 766452...

sos security, bug fix, and enhancement update

2.2-17.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Allow '-' in ticket SR numbers John Haxby - Disable --upload option as it will not work with Oracle support - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 - Remove ...

CVE-2011-3364

CVE-2011-3364 affects GNOME NetworkManager (ifcfg-rh plugin) via an incomplete blacklist in svEscape, allowing local users to execute arbitrary commands by newline characters in new connection names when PolicyKit allows creation of connections. Credited impact: local privilege escalation; docume...