CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball...

Debian: Security Advisory (DSA-2836-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pacemaker security, bug fix, and enhancement update

1.1.10-14 - Log: crmd: Supply arguments in the correct order Resolves: rhbz996850 - Fix: Invalid formatting of log message causes crash Resolves: rhbz996850 1.1.10-13 - Fix: cman: Start clvmd and friends from the init script if enabled 1.1.10-12 - Fix: Consistently use 'Slave' as the role for...

Fedora 18 : gksu-polkit-0.0.3-8.gitf8ce834c.fc18 (2013-13616)

Recreate tarball from proper sources; previous package was shipping an unknown code tarball. - Add proper patching for CVE-2012-5617/CVE-2013-4161, the previous fix was creating a patch file and not patching the code. - Use proper bus name in service file to fix service timeout. Note that Tenable...

Fedora 19 : gksu-polkit-0.0.3-8.gitf8ce834c.fc19 (2013-13620)

Recreate tarball from proper sources; previous package was shipping an unknown code tarball. - Add proper patching for CVE-2012-5617/CVE-2013-4161, the previous fix was creating a patch file and not patching the code. - Use proper bus name in service file to fix service timeout. Note that Tenable...

Fedora 18 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc18 (2013-11285)

Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel - this update is known to break...

Fedora 17 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc17 (2013-11281)

Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel Note that Tenable Network Security has...

Fedora 19 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc19 (2013-11257)

Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - All full-paths now have arch - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel - this...

java-1.6.0-openjdk security update

1:1.6.0.0-1.35.1.11.8.0.1.el59 - Add oracle-enterprise.patch 1:1.6.0.0-1.35.1.11.8 - Rebuild with updated source tarball - Resolves: rhbz911522 1:1.6.0.0-1.34.1.11.8 - Updated to icedtea6 1.11.8 - Removed patch9 7201064.patch - Removed patch10 8005615.patch - Removed not-applied patch 6664509.pat...

libxml2 security update

2.7.6-8.0.1.el63.3 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-8.el63.3 - Change the XPath code to percolate allocation error CVE-2011-1944 2.7.6-8.el63.2 - Fix an off by one pointer access CVE-2011-3102 2.7.6-8.el63.1 - Fix a failure...

libvirt security and bug fix update

libvirt-0.9.10-21.0.1.el63.4 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.4 - daemon: Fix crash in virTypedParameterArrayClear rhbz844735 - remote: Fix locking in stream APIs rhbz847946 - Using virOnce for global initialization is desirable rhbz847959 - json: Fix...

xorg-x11-server security and bug fix update

1.10.6-1 - xserver 1.10.6 - Use git-style patch names - compsize.h, glxcmds.h: Copy from upstream git since they fell out of the upstream tarball 1.10.4-15 - Undo regression introduced in Patch8007 732467 1.10.4-14 - xserver-1.10.4-sync-revert.patch: Revert an edge-case change in IDLETIME that...

DEBIAN-CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

thunderbird security update

3.1.18-2.0.1.el62 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.18-2 - added fix for mozbz727401...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

thunderbird security update

3.1.18-1.0.1.el62 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.18-1 - Update to 3.1.18...

DEBIAN-CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...