730 matches found
SUSE-SU-2016:2019-1 Security update for rubygem-bson-1_11, rubygem-easy_diff, rubygem-redcarpet, and rubygem-sprockets-2_11
This update for rubygem-bson-111, rubygem-easydiff, rubygem-redcarpet, and rubygem-sprockets-211 fixes the following issues: - Avoid monodb data injection bnc933961, CVE-2015-4410 - Fixes merging of Arrays of Hashes bsc982364 - Fix XSS via autolinking of untrusted markdown bsc926328...
[SECURITY] Fedora 23 Update: rpm-4.13.0-0.rc1.13.fc23
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
Code injection
Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...
Cisco ASR 1000 Series Root Shell License Bypass Vulnerability
A vulnerability in the way software packages are loaded in Cisco IOS XE Software for the Cisco Aggregation Services Routers ASR 1000 Series could allow an authenticated, local attacker to gain restricted root shell access. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be...
[SECURITY] Fedora 23 Update: rpm-4.13.0-0.rc1.7.fc23
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
ICU Project ICU4C Library Vulnerabilities Patched
Multitudes of software packages that make use of the ICU Project C/C++ and Java libraries may need to update after a pair of memory-based vulnerabilities were discovered and subsequently patched. Version 55.1 of the ICU Project ICU4C library, released yesterday, addresses separate heap-based buff...
Updated python-pip packages fix security vulnerabilities
Updated python-pip and python-virtualenv packages fix security vulnerability: The mirroring support in python-pip was implemented without any sort of authenticity checks and is downloaded over plaintext HTTP. Further more by default it will dynamically discover the list of available mirrors by...
[SECURITY] Fedora 20 Update: rpm-4.11.3-2.fc20
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
[SECURITY] Fedora 21 Update: rpm-4.12.0.1-4.fc21
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
Debian Security Advisory DSA 2953-1 (dpkg - security update)
Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with specially crafted patch files. This update had been scheduled before the end of security support for the oldstable distribution squeeze, hence an exception has...
Metasploit Modules Available for Seven Open Source Packages
Open source projects with anywhere between 100,000 and 1 million downloads are pretty sizable endeavors, and with the code open for scrutiny, you would think bugs would be found and some sort of disclosure process would be in place. If a spate of recently discovered issues in seven popular softwa...
CVE-2013-5802 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9...
CVE-2013-5812 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9...
CVE-2013-5780 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9...
CVE-2013-5788 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9...
Symantec Management Platform Agent Static Service Key
SUMMARY The Symantec Management Platform agent and task agent installs a registry service key that is used to retrieve software packages from package servers. The registry key is locally accessible and can potentially be extracted and decrypted by an authorized local user using a static key commo...
CVE-2013-2466 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9...
CVE-2013-2472 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9...