Fedora 18 : gnome-system-log-3.6.1-2.fc18 (2012-18579)

This update changes gnome-system-log to use a stricter polkit policy when running with elevated privileges. Previously, it would only ask for the user's own password; now it requires anadministrator password. This problem has been reported as CVE-2012-5535 Note that Tenable Network Security has...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libxml2 vulnerability (USN-1656-1)

It was discovered that libxml2 had a heap-based buffer underflow when parsing entities. If a user or automated system were tricked into processing a specially crafted XML document, applications linked against libxml2 could be made to crash or possibly execute arbitrary code. Note that Tenable...

Fedora 17 : android-tools-20121120git3ddc005-1.fc17 (2012-18748)

Update to upstream git commit 3ddc005 - Added more udev devices - Added ext4utils from extras for fastboot - Updated makefiles - Resolves: rhbz 869624 start adb server by udev For security reasons fastboot is now need to be run as root to be able to access devices. Note that Tenable Network...

Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1652-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 11.10 : linux vulnerabilities (USN-1648-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 12.10 : linux vulnerabilities (USN-1646-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-1644-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Fedora 18 : system-config-users-1.3.1-1.fc18 (2012-17513)

This update uses pkexec instead of consolehelper/usermode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 18 : system-config-date-1.10.3-1.fc18 / system-config-nfs-1.4.1-1.fc18 (2012-17797)

This updates tightens policy so that only administrative users can make changes to the system as it was before using pkexec instead of consolehelper. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted ...

Fedora 17 : weechat-0.3.8-4.fc17 (2012-18526)

Fix arbitrary code execution due to call of shell when executing command within hookprocess Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 17 : libssh-0.5.3-1.fc17 (2012-18677)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

VMware OVF Tool Installed

VMware OVF Tool, a command line utility that supports importing and exporting of OVF templates, is installed on the remote Windows host. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid63074; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 18 : android-tools-20121120git3ddc005-1.fc18 (2012-18802)

Update to upstream git commit 3ddc005 - Added more udev devices - Added ext4utils from extras for fastboot - Updated makefiles - Resolves: rhbz 869624 start adb server by udev For security reasons fastboot is now need to be run as root to be able to access devices. Note that Tenable Network...

Fedora 18 : bugzilla-4.2.4-1.fc18 (2012-18264)

These releases fix a number of issues with Bugzilla. - Confidential product and component names can be disclosed to unauthorized users if they are used to control the visibility of a custom field. - When calling the 'User.get' WebService method with a 'groups' argument, it is possible to check if...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libssh vulnerabilities (USN-1640-1)

Xi Wang and Florian Weimer discovered that libssh incorrectly handled memory. A remote attacker could use this to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. Note that Tenable Network...

Fedora 16 : insight-7.4.50-4.20120403cvs.fc16 (2012-18300)

Thu Nov 15 2012 Patrick Monnerat 7.4.50-4.20120403cvs - Path 'objalloc' to fix libiberty security bug CVE-2012-3509. https://bugzilla.redhat.com/showbug.cgi?id=877014 - Enable Python to support STL extensions. https://bugzilla.redhat.com/showbug.cgi?id=865554 Note that Tenable Network Security...

Fedora 18 : ruby-1.9.3.327-22.fc18 (2012-17949)

A security flaw was found on ruby currently shiped on Fedora 18 that carefully crafted sequence of strings may cause a denial of service attack on the service that parses the sequence to create a Hash object by using the strings as keys. This issue is now registered as CVE-2012-5371. This new...

Fedora 17 : kernel-3.6.7-4.fc17 (2012-18684)

CVE-2012-4461: kvm: invalid opcode oops on SETSREGS with OSXSAVE bit set Update to upstream stable release 3.6.7 Assorted other fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora 16 : libsocialweb-0.25.21-1.fc16 (2012-17746)

CVE-2012-4511: libsocialweb untrusted connection to flickr The libsocialweb library is prone to a security vulnerability that allows attackers to perform man-in-the-middle attacks. Remote attackers can exploit this issue to gain access to sensitive information or modify the integrity of user...

Fedora 17 : libsocialweb-0.25.21-1.fc17 (2012-17749)

CVE-2012-4511: libsocialweb untrusted connection to flickr The libsocialweb library is prone to a security vulnerability that allows attackers to perform man-in-the-middle attacks. Remote attackers can exploit this issue to gain access to sensitive information or modify the integrity of user...