Fedora 8 : kernel-2.6.26.6-49.fc8 (2008-8980)

Update kernel from version 2.6.26.5 to 2.6.26.6: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6 CVE-2008-3831 An IOCTL in the i915 driver was not properly restricted to users with the proper capabilities to use it. CVE-2008-4410 The vmiwriteldtentry function in...

Fedora 9 : mantis-1.1.4-1.fc9 (2008-8925)

This releases fixes CVE-2008-3102 and a bunch of other issues. For the full changelog, please check: http://www.mantisbt.org/bugs/changelogpage.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 8 : drupal-5.11-1.fc8 (2008-8905)

Update to 5.11, security fixes: SA-2008-047 http://drupal.org/node/318706 - File upload access bypass file disclosure - Access rules bypass - BlogAPI access bypass - Node validation bypass Remember to log in to your site as the admin user before upgrading this package. After upgrading the package...

Fedora 9 : ruby-1.8.6.287-2.fc9 (2008-8738)

Update to new upstream release fixing multiple security issues detailed in the upstream advisories: http://www.ruby-lang.org/en/news/2008/08/08/multiple- vulnerabilities-in-ruby/ - CVE-2008-3655 - multiple insufficient safe mode restrictions - CVE-2008-3656 - WEBrick DoS vulnerability CPU...

Fedora 8 : ruby-1.8.6.287-2.fc8 (2008-8736)

Update to new upstream release fixing multiple security issues detailed in the upstream advisories: http://www.ruby-lang.org/en/news/2008/08/08/multiple- vulnerabilities-in-ruby/ - CVE-2008-3655 - multiple insufficient safe mode restrictions - CVE-2008-3656 - WEBrick DoS vulnerability CPU...

Fedora 8 : phpMyAdmin-2.11.9.1-1.fc8 (2008-8269)

This update by upstream to phpMyAdmin 2.11.9.1 solves a not yet clearly specified code execution vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Export type...

Fedora 8 : viewvc-1.0.6-1.fc8 (2008-8270)

Security fix: ignore arbitrary user-provided MIME types ViewVC issue 354: http://viewvc.tigris.org/issues/showbug.cgi?id=354 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

Fedora 9 : phpMyAdmin-2.11.9.2-1.fc9 (2008-8335)

This update by upstream to phpMyAdmin 2.11.9.2 solves a not yet clearly specified XSS in MSIE using NUL byte vulnerability. - auth Links to version number on login screen - core PMA does not start if iniset is disabled - bookmarks Saved queries greater than 1000 chars not displayed - export Expor...

Fedora 9 : viewvc-1.0.6-1.fc9 (2008-8252)

Security fix: ignore arbitrary user-provided MIME types ViewVC issue 354: http://viewvc.tigris.org/issues/showbug.cgi?id=354 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

Fedora 9 : tomcat5-5.5.27-0jpp.2.fc9 (2008-8113)

Mon Sep 15 2008 David Walluck 0:5.5.27-0jpp.2 - add commons-io symlink - Mon Sep 15 2008 David Walluck 0:5.5.27-0jpp.1 - 5.5.27 Resolves: rhbz456120 Resolves: rhbz457934 Resolves: rhbz446393 Resolves: rhbz457597 Note that Tenable Network Security has extracted the preceding description block...

Fedora 8 : fedora-package-config-apt-8-2.transitional / etc (2008-8100)

This update sets up the new update locations for smart and apt 'newkey'. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : ssmtp-2.61-11.6.fc8.1 (2008-8040)

Fix for CVE-2008-3962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 8 : bitlbee-1.2.3-1.fc8 (2008-7761)

Upstream released Bitlbee 1.2.3 with the following changes to the former release: - Fixed one more flaw similar to the previous hijacking bug, caused by inconsistent handling of the USTATUSIDENTIFIED state. All code touching these variables was reviewed and should be correct now. Finished 7 Sep...

Fedora 9 : libHX-1.23-1.fc9 / pam_mount-0.47-1.fc9 (2008-7976)

A security flaw in the pammount's handling of user defined volumes using the 'luserconf' option has been fixed in this update. The vulnerability allowed users to arbitrarily mount filesystems at arbitrary locations. More details about this vulnerability can be found in the announcement message se...

Fedora 9 : wordpress-2.6.2-1.fc9 (2008-7902)

http://wordpress.org/development/2008/09/wordpress-262/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Google Chrome Detection (Windows)

Google Chrome, a web browser from Google, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34196; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/07/10"; scriptxrefname:"IAVT",...

Fedora 9 : Django-0.96.3-1.fc9 (2008-7672)

Update to upstream version 0.96.3 that fixes cross-site request forgery CSRF issue that may occur after user re-authentication after expiration of current session: http://www.djangoproject.com/weblog/2008/sep/02/security/ This issue also affected deployments with Django's bundled CSRF-protection...

Fedora 8 : adminutil-1.1.7-1.fc8 (2008-7642)

Fixes these bugs: - CVE-2008-2928 - buffer overflow in Accept-Language parsing 413531 Web browser accepted languages configuration causes dsgw CGI binaries to segfault - improved fix for CVE-2008-2929 XSS issues originally addressed in 1.1.6, that does not introduce heap overflow in parsing...

Fedora 9 : adminutil-1.1.7-1.fc9 (2008-7339)

Fixes these bugs: - CVE-2008-2928 - buffer overflow in Accept-Language parsing 413531 Web browser accepted languages configuration causes dsgw CGI binaries to segfault - improved fix for CVE-2008-2929 XSS issues originally addressed in 1.1.6, that does not introduce heap overflow in parsing...

Fedora 8 : amarok-1.4.10-1.fc8 (2008-7719)

Amarok 1.4.10 has been released to fix a security problem. For more information please see http://amarok.kde.org/en/node/535/ Please update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...