Fedora 20 : java-1.7.0-openjdk-1.7.0.60-2.4.7.0.fc20 (2014-5280)

Security update : http://blog.fuseyism.com/index.php/2014/04/16/security-icedtea-2-4-7-f or-openjdk-7-released/ for http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 20 : kernel-3.13.10-200.fc20 (2014-5235)

The 3.13.10 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2014-0407)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0407 advisory. 1.7.0.55-2.4.7.1.0.1.el510 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.55-2.4.7.1.el5 - regenerated sources to fix TCK...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2014-0406)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0406 advisory. 1.7.0.51-2.4.7.1.0.1.el65 - Update DISTRONAME in specfile 1.7.0.51-2.4.7.1.el6 - regenerated sources to fix TCK failure - Resolves: rhbz1085002...

Fedora 20 : php-5.5.11-1.fc20 (2014-4767)

03 Apr 2014, PHP 5.5.11 Core : - Allow zero length comparison in substrcompare Tjerk - Fixed bug 60602 procopen changes environment array Tjerk SPL : - Added feature 65545 SplFileObject::fread Tjerk cURL : - Fixed bug 66109 Can't reset CURLOPTCUSTOMREQUEST to default behaviour Tjerk - Fix...

Fedora 20 : ImageMagick-6.8.6.3-4.fc20 (2014-4969)

Build 6.8.6-3 version because soname bump happened in newer. - Concretize soname versioning. - Add Patch0: ImageMagick-6.8.7-psd-CVE.patch CVE bug fix backporting: http://www.imagemagick.org/discourse-server/viewtopic. php?f=3&t=25128&sid=ff40ad66b1f845c767aa77c7e32f9f9c&p =109901p109901 for fix...

Fedora 20 : v8-3.14.5.10-7.fc20 (2014-4625)

Common Vulnerabilities and Exposures assigned an identifier CVE-2014-1704 to the following vulnerability : URL: https://vulners.com/cve/CVE-2014-1704 Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a deni...

Fedora 20 : php-ZendFramework2-2.2.6-1.fc20 (2014-4612)

Upstream release notes: https://github.com/zendframework/zf2/releases/tag/release-2.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

MaraDNS Server Version Detection

Nessus was able to obtain version information from the remote MaraDNS server by sending a special TXT record query to the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73473; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"MaraDN...

Fedora 20 : kernel-3.13.9-200.fc20 (2014-4844)

The 3.13.9 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : kernel-3.13.9-100.fc19 (2014-4849)

The 3.13.9 stable update contains a number of important fixes across the tree. The 3.13.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 19 : perl-Authen-Captcha-1.024-1.fc19 (2014-4454)

An issue in previous versions of perl-Authen-Captcha is that the generated public string file name of the picture for the captcha is merely a checksum of the secret string. It is trivial to break such short strings even using google instead of a rainbow table. Version 1.024 of the module fixes...

Ubuntu 12.04 LTS / 12.10 / 13.10 : libyaml-libyaml-perl vulnerabilities (USN-2161-1)

Florian Weimer discovered that libyaml-libyaml-perl incorrectly handled certain large YAML documents. An attacker could use this issue to cause libyaml-libyaml-perl to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2013-6393 Ivan Fratric discovered that...

Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-2158-1)

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 Nico Golde and Fabian Yamaguchi reported buffer underflow errors in the implementation of the XFS filesystem...

Fedora 20 : moodle-2.5.5-1.fc20 (2014-4163)

Fixes for CVE-2014-0122, CVE-2014-0123, CVE-2014-0124, CVE-2014-0125, CVE-2014-0126, CVE-2014-0127, CVE-2014-0129. http://docs.moodle.org/dev/Moodle2.6.2releasenotes http://docs.moodle.org/dev/Moodle2.5.5releasenotes http://docs.moodle.org/dev/Moodle2.4.9releasenotes Note that Tenable Network...

Fedora 19 : moodle-2.4.9-1.fc19 (2014-4152)

Fixes for CVE-2014-0122, CVE-2014-0123, CVE-2014-0124, CVE-2014-0125, CVE-2014-0126, CVE-2014-0127, CVE-2014-0129. http://docs.moodle.org/dev/Moodle2.6.2releasenotes http://docs.moodle.org/dev/Moodle2.5.5releasenotes http://docs.moodle.org/dev/Moodle2.4.9releasenotes Note that Tenable Network...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3016)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3016 advisory. - netfilter: nfconntrackdccp: fix skbheaderpointer API usages Daniel Borkmann Orabug: 18462076 CVE-2014-2523 Tenable has extracted the preceding...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2014-3014)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3014 advisory. - netfilter: nfconntrackdccp: fix skbheaderpointer API usages Daniel Borkmann Orabug: 18421673 CVE-2014-2523 - cifs: ensure that uncached writes handle...

Oracle Linux 6 : net-snmp (ELSA-2014-0321)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0321 advisory. 1:5.5-49.0.1.el65.1 - snmptrapd: Fix crash due to access of freed memory John Haxby orabug 14404682 1:5.5-49.1 - added 'diskio' option to snmpd.conf, it's...

Fedora 20 : jansson-2.6-1.fc20 (2014-3778)

Florian Weimer of the Red Hat Product Security Team found that the hashing implementation in Jansson, a library for encoding, decoding and manipulating JSON data, was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause an application using Jansson to use an...