Fedora 19 : denyhosts-2.6-28.fc19.1 (2014-17081)

Fix security bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 21 : subversion-1.8.11-1.fc21 (2014-17118)

This update includes the latest stable release of Apache Subversion, version 1.8.11. Two security issues in moddavsvn are addressed in this release CVE-2014-8108, CVE-2014-3580. For more details, see : http://subversion.apache.org/security/CVE-2014-8108-advisory.txt...

Fedora 20 : subversion-1.8.11-1.fc20 (2014-17222)

This update includes the latest stable release of Apache Subversion, version 1.8.11. Two security issues in moddavsvn are addressed in this release CVE-2014-8108, CVE-2014-3580. For more details, see : http://subversion.apache.org/security/CVE-2014-8108-advisory.txt...

Fedora 19 : kernel-3.14.27-100.fc19 (2014-17244)

The 3.14.27 stable update contains a number of important fixes across the tree.\nThe 3.14.26 update contains a number of important fixes across the tree\nThe 3.14.25 stable update contains a number of important fixes across the tree.\nThe 3.14.24 stable update contains a number of important fixes...

Fedora 21 : mailx-12.5-14.fc21 (2014-17243)

Security fix for CVE-2004-2771, CVE-2014-7844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : ettercap-0.8.1-2.fc20 (2014-17107)

Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 20 : php-5.5.20-2.fc20 (2014-17229)

18 Dec 2014, PHP 5.5.20\r\n\r\nCore:\r\n Fixed bug 68091 Some Zend headers lack appropriate extern 'C' blocks. Adam\r\n Fixed bug 68185 'Inconsistent insteadof definition.'- incorrectly triggered. Julien\r\n Fixed bug 68370 'unset$this' can make the program crash. Laruence\r\n Fixed bug 68545 NUL...

Fedora 19 : seamonkey-2.31-1.fc19 (2014-17217)

Update to 2.31 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 21 : nss-3.17.3-2.fc21 (2014-17085)

Updated nss package fixes a conflict among the nss-tools pp man page an the similarly named one from perl-PARPackager. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

GitHub < 1.9.4 .git/config Command Execution (Mac OS X)

The remote Mac OS X host has a version of GitHub prior to 194 installed. It is, therefore, affected by a remote command execution vulnerability when processing git trees in a case-insensitive or case-normalizing file system. A remote attacker, using a specially crafted git tree, can overwrite a...

Fedora 21 : dbus-1.8.12-1.fc21 (2014-16147)

Update to 1.8.12 1168438 - Fixes CVE-2014-3635 fd.o83622 - Fixes CVE-2014-3636 fd.o82820 - Fixes CVE-2014-3637 fd.o80559 - Fixes CVE-2014-3638 fd.o81053 - Fixes CVE-2014-3639 fd.o80919 - Fixes CVE-2014-7824 fd.o85105 Note that Tenable Network Security has extracted the preceding description block...

Ubuntu 14.10 : linux vulnerabilities (USN-2448-1)

An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine KVM paravirt guests. A user in the guest OS could exploit this leak to obtain information that could potentially be used to aid in attacking the...

Fedora 21 : libuv-0.10.29-1.fc21 / nodejs-0.10.33-1.fc21 (2014-15411) (POODLE)

This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default for the most predominate uses of TLS in Node.js. It took longer than expected to get this release accomplished in a way that would provide appropriate default security settings, while minimizing the surface...

Fedora 21 : asterisk-11.14.1-1.fc21 (2014-15621)

Fri Nov 21 2014 Jeffrey C. Ollie - 11.14.1-1 - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.28 and 11.6 and Asterisk 1.8, 11, 12, and 13. The available - security releases are released as versions 1.8.28-cert3, 11.6-cert8, 1.8.32.1, - 11.14.1, 12.7.1,...

Fedora 20 : libuv-0.10.29-1.fc20 / nodejs-0.10.33-1.fc20 (2014-15379) (POODLE)

This release handles the recent POODLE vulnerability by disabling SSLv2/SSLv3 by default for the most predominate uses of TLS in Node.js. It took longer than expected to get this release accomplished in a way that would provide appropriate default security settings, while minimizing the surface...

Fedora 20 : python3-3.3.2-19.fc20 (2014-16393)

Fixes CVEs 2013-7338 and 2014-2667. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 20 : php-horde-kronolith-4.2.4-1.fc20 (2014-16397)

kronolith 4.2.4 - jan Make access to non-CalDAV remote calendars faster Bug 12379. - jan Continue with further events if parsing of one remote event date fails. - jan Fix JS error in month view with more events today than the maximum threshold. - mjr Fix fatal error when creating or modifying an...

Fedora 21 : libreoffice-4.3.4.1-8.fc21 (2014-15968)

Don't create duplicate Mirrored props which can lead to creating odp files which cannot be reloaded Fix abrt crash with NULL pView Crash in clipboard code Fix export to pdf of Nimbus Sans L etc when using typographical quotes etc. Fixes for various crashes on importing malformed rtf New bugfix...

LogAnalyzer < 3.6.6 index.php / detail.php 'hostname' Parameter XSS

The LogAnalyzer install hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize the 'hostname' value retrieved from log files. An attacker can exploit this issue to inject arbitrary HTML and script code into a user's browser to be...

Fedora 20 : lsyncd-2.1.4-4.fc20.1 (2014-15393)

Fix bad shell argument escaping Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...