Fedora 21 : icu-52.1-6.fc21 (2015-6087)

Security fix for CVE-2014-9654, CVE-2014-7923, CVE-2014-7926 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 21 : wpa_supplicant-2.0-13.fc21 (2015-6860)

This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...

Ubuntu 14.10 : autofs vulnerability (USN-2579-1)

It was discovered that autofs incorrectly filtered environment variables when using program maps. When program maps were configured, a local user could use this issue to escalate privileges. This update changes the default behaviour by adding a prefix to environment variables. Sites using program...

Fedora 22 : qt3-3.3.8b-63.fc22 (2015-6613)

This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service application crash and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. Please note that Qt 3 is NOT...

Fedora 21 : wesnoth-1.12.2-1.fc21 (2015-6295)

http://forums.wesnoth.org/viewtopic.php?t=41872 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DLA-207-1 : subversion security update

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-0248 Subversion moddavsvn and svnserve were vulnerable to a remotely triggerable assertion DoS vulnerability for certain...

Fedora 21 : qt5-qtbase-5.4.1-9.fc21 (2015-6364)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...

Fedora 22 : curl-7.40.0-3.fc22 (2015-6695)

require credentials to match for NTLM re-use CVE-2015-3143 - fix invalid write with a zero-length host name in URL CVE-2015-3144 - fix invalid write in cookie path sanitization code CVE-2015-3145 - close Negotiate connections when done CVE-2015-3148 Note that Tenable Network Security has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3032)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3032 advisory. - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930551 CVE-2014-9584 - KEYS: close race between key lookup and freeing Sasha Levin...

Ubuntu 14.04 LTS : wpa_supplicant vulnerability (USN-2577-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2577-1 advisory. It was discovered that wpasupplicant incorrectly handled SSID information when creating or updating P2P peer entries. A remote attacker could use this issue to...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3033)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3033 advisory. - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930552 CVE-2014-9584 - selinux: Permit bounded transitions under NONEWPRIVS or...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2015-3034)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3034 advisory. - isofs: Fix unchecked printing of ER records Jan Kara Orabug: 20930553 CVE-2014-9584 - selinux: Permit bounded transitions under NONEWPRIVS or...

Fedora 22 : spatialite-tools-4.2.0-10.fc22 / sqlite-3.8.9-1.fc22 (2015-6157)

Update of sqlite to latest upstream version, with spatialite-tools rebuild. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 21 : spatialite-tools-4.2.0-10.fc21 / sqlite-3.8.9-1.fc21 (2015-6324)

Update of sqlite to latest upstream version, with spatialite-tools rebuild. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

F5 Networks BIG-IP : Linux kernel vulnerability (SOL16471)

The dopagesmove function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service OOPS, and possibly have unspecified other impact by specifying a node that is not part of the...

Fedora 22 : knot-1.6.3-1.fc22 (2015-5786)

new upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 22 : drupal7-ctools-1.7-1.fc22 (2015-4312)

Update to upstream 1.7 release for security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2574-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2574-1 advisory. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit...

Fedora 22 : qt5-qtbase-5.4.1-9.fc22 (2015-6114)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...

Fedora 22 : arj-3.10.22-22.fc22 (2015-5524)

Added patch from Debian to avoid free on invalid pointer due to a buffer overflow 1196751, 1207180 - Added patch from Debian for symlink directory traversal 1178824 - Added patch from Debian to fix the directory traversal via //multiple/leading/slash 1178824 Note that Tenable Network Security has...