Fedora 18 : dnsmasq-2.65-4.fc18 (2013-1357)

From dnsmasq's CHANGELOG : Add code to make behaviour for TCP DNS requests that same as for UDP requests, when a request arrives for an allowed address, but via a banned interface. This change is only active on Linux, since the relevant API is missing AFAIK on other platforms. - dnsmasq now answe...

Fedora 18 : java-1.7.0-openjdk-1.7.0.9-2.3.5.3.fc18 (2013-2205)

The update contains the following security fixes : - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time - S6776941: CVE-2013-0427: Improve thread pool shutdow...

Fedora 18 : freetype-2.4.10-3.fc18 (2013-1492)

This update fixes CVE-2012-5669. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 16 : jakarta-commons-httpclient-3.1-12.fc16 (2013-1289)

This update fixes a security vulnerability that caused jakarta-commons-httpclient not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via...

Fedora 17 : axis-1.4-19.fc17 (2013-1194)

This update fixes a security vulnerability that caused axis not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via andaarbitrary valid...

Fedora 18 : ettercap-0.7.5.1-1.fc18 (2013-0899)

Fix for CVE-2013-0722 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 17 : seamonkey-2.15.1-1.fc17 (2013-1382)

Update to 2.15.1 Update to 2.15 Fixes CVE-2013-0743, CVE-2013-0744-0760, CVE-2013-0762, CVE-2013-0764, CVE-2013-0766-0770 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 18 : jakarta-commons-httpclient-3.1-12.fc18 (2013-1203)

This update fixes a security vulnerability that caused jakarta-commons-httpclient not to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allowed man-in-the-middle attackers to spoof SSL servers via...

Fedora 17 : asterisk-10.12.0-1.fc17 (2013-0994)

The Asterisk Development Team has announced the release of Asterisk 10.12.0. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk The release of Asterisk 10.12.0 resolves several issues reported by the community and would have not been possible...

Fedora 18 : proftpd-1.3.4b-5.fc18 (2013-0437)

Jann Horn reported that there is a possible race condition in the handling of the MKD/XMKD FTP commands, when the UserOwner directive is involved, and the attacker is on the same physical machine as a running proftpd. This race applies to modsftp and the handling of the MKDIR SFTP request as well...

Fedora 16 : proftpd-1.3.4b-5.fc16 (2013-0468)

Jann Horn reported that there is a possible race condition in the handling of the MKD/XMKD FTP commands, when the UserOwner directive is involved, and the attacker is on the same physical machine as a running proftpd. This race applies to modsftp and the handling of the MKDIR SFTP request as well...

ViArt Shop Detection

The remote web server hosts ViArt Shop, a shopping cart application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64292; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"ViArt Shop...

Fedora 16 : drupal7-7.19-1.fc16 (2013-1092)

SA-CORE-2013-001 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 17 : kernel-3.7.3-101.fc17 (2013-1025)

Rebase to Linux v3.7.3. A large number of bug fixes across the entire tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 16 : qt-4.8.4-6.fc16 (2013-0270)

This build fixes a security issues : - QSslSocket may report incorrect errors when certificate verification fails. For more information: http://lists.qt-project.org/pipermail/announce/2013-Janu ary/000020.html - blacklists unauthorized SSL certificates by Turktrust. For more information:...

SUSE WebYaST remotely accessible hosts list vulnerability

Overview The WebYaST hosts list is remotely accessible by unauthenticated attackers. An attacker may be able to add a malicious host to the list and perform a man-in-the-middle attack against WebYaST. Description The SUSE security advisory states:The hosts list used by WebYaST for connecting to...

VMware Horizon View SEoL

According to its version, the installation of VMware Horizon View, formerly known as VMWare View Server, and VMware Virtual Desktop Infrastructure, on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a...

Ubuntu 12.04 LTS : php5 vulnerability (USN-1702-1)

It was discovered that PHP incorrectly handled the opensslencrypt function when used with an empty string. An attacker could use this flaw to cause PHP to disclose arbitrary memory contents and possibly expose sensitive information. Note that Tenable Network Security has extracted the preceding...

Fedora 16 : moin-1.9.6-1.fc16 (2013-0640)

Update to 1.9.6. Fixes CVE-2012-6495 For full changes, see : http://hg.moinmo.in/moin/1.9/raw-file/1.9.6/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 18 : sleuthkit-4.0.1-1.fc18 (2013-0320)

New Features: More DOS partition types are displayed. Added fcat tool that takes in file name and exports content equivalent to using ifind and icat together. performance improvements with FAT code maps and diradd performance improvements with NTFS code maps added AONLY flag to blockwalk Updated...