Ubuntu 12.04 LTS : linux vulnerabilities (USN-1696-1)

Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based virtual machine subsystem's handling of the XSAVE feature. On hosts, using qemu userspace, without the XSAVE feature an unprivileged local attacker could exploit this flaw to crash the system. CVE-2012-4461 A flaw was discovered in...

Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17 (2013-0868)

This update fixes rhbz895035 , which consists of a set of flaws that potentially allow arbitrary code execution including remotely via applets. It is strongly recommended that all Java users in Fedora immediately update to this release. Note that Tenable Network Security has extracted the precedi...

Fedora 16 : rubygem-activerecord-3.0.10-4.fc16 (2013-0244)

Fix for CVE-2012-6496. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : tomcat6, tomcat7 vulnerabilities (USN-1685-1)

It was discovered that Tomcat incorrectly performed certain security constraint checks in the FORM authenticator. A remote attacker could possibly use this flaw with a specially crafted URI to bypass security constraint checks. This issue only affected Ubuntu 10.04 LTS, Ubuntu 11.10 and Ubuntu...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : nss vulnerability (USN-1687-1)

Two intermediate CA certificates were mis-issued by the TURKTRUST certificate authority. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. Note that Tenable Network Security has extracted the preceding description blo...

Ubuntu 11.10 : linux vulnerabilities (USN-1689-1)

Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based virtual machine subsystem's handling of the XSAVE feature. On hosts, using qemu userspace, without the XSAVE feature an unprivileged local attacker could exploit this flaw to crash the system. CVE-2012-4461 A flaw was discovered in...

Fedora 18 : BackupPC-3.2.1-10.fc18 (2012-20943)

cleanup build macros for Fedora - fix deprecated qw messages partial fix for bz 755076 - CVE-2011-5081 BackupPC: XSS flaw in RestoreFile.pm bz 795017, 795018, 795019 - Broken configuration for httpd 2.4 bz 871353 Note that Tenable Network Security has extracted the preceding description block...

Fedora 17 : qt-4.8.4-6.fc17 (2013-0277)

This build fixes a security issues : - QSslSocket may report incorrect errors when certificate verification fails. For more information: http://lists.qt-project.org/pipermail/announce/2013-Janu ary/000020.html - blacklists unauthorized SSL certificates by Turktrust. For more information:...

Fedora 18 : php-pear-CAS-1.3.2-1.fc18 (2012-21084)

Changes in version 1.3.2 Security Fixes : - CVE-2012-5583 Missing CN validation of CAS server certificate 58 Joachim Fritschi Bug Fixes : - Fix broken character encoding in Greek and French 40 Joachim Fritschi - Minor error corrections in a few example files Joachim Fritschi - Remove erroneous...

Fedora 18 : webkitgtk-1.10.2-1.fc18 / webkitgtk3-1.10.2-1.fc18 (2012-20125)

What's new in WebKitGTK+ 1.10.2? ================================ - WebCore has been split in a few more convenience libtool libraries, which should fix problems with linking in some architectures and with make's command line length limit. - WebKit2 introspection files will also be built if...

Ubuntu 10.04 LTS : linux vulnerability (USN-1683-1)

A flaw was discovered in the Linux kernel's handling of script execution when module loading is enabled. A local attacker could exploit this flaw to cause a leak of kernel stack contents. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Fedora 16 : php-pear-CAS-1.3.2-1.fc16 (2012-21122)

Changes in version 1.3.2 Security Fixes : - CVE-2012-5583 Missing CN validation of CAS server certificate 58 Joachim Fritschi Bug Fixes : - Fix broken character encoding in Greek and French 40 Joachim Fritschi - Minor error corrections in a few example files Joachim Fritschi - Remove erroneous...

Microsoft System Center Operations Manager Component Installed

Microsoft System Center Operations Manager SCOM, formerly known as Microsoft Operations Manager is a data center management system. A component of the SCOM system is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63418;...

Fedora 17 : drupal6-6.27-1.fc17 / drupal7-7.18-1.fc17 (2012-20766)

Upstream Drupal has reported SA-CORE-2012-004 1 which corrects multiple vulnerabilities : 1 Access bypass User module search - Drupal 6 and 7 2 Access bypass Upload module - Drupal 6 3 Arbitrary PHP code execution File upload modules - Drupal 6 and 7 CVEs have been requested and are not yet...

Fedora 17 : php-symfony2-HttpKernel-2.1.6-1.fc17 (2012-20965)

Updated to upstream version 2.1.6. See : - http://symfony.com/blog/security-release-symfony-2-0-20- and-2-1-5-released - http://symfony.com/blog/symfony-2-0-21-and-2-1-5-relea sed Changelogs : - 2.1.5 2.1.6: https://github.com/symfony/symfony/compare/v2.1.5...v2.1 .6 - 2.1.4 2.1.5:...

Fedora 17 : ndjbdns-1.05.5-1.fc17 (2012-20967)

This fixes two of the cache poisoning issue in the DNS resolver - dnscache. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 17 : v8-3.13.7.5-1.fc17 (2012-20103)

Update to 3.13.7.5. Fixes CVE-2012-5120 CVE-2012-5128 and gets d8 working properly again. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : moin vulnerabilities (USN-1680-1)

It was discovered that MoinMoin did not properly sanitize its input when processing AnyWikiDraw and TWikiDraw actions. A remote attacker with write access could exploit this to overwrite arbitrary files and execute arbitrary code with the priviliges of the web server user 'www-data'. It was...

Mac OS X Wireless Networks List

Using the supplied credentials, it is possible to extract the list of networks to which the remote host has connected in the past. TRUSTED...

Fedora 17 : Django-1.4.3-1.fc17 (2012-20224)

https://www.djangoproject.com/weblog/2012/dec/10/security/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...