Ubuntu 11.04 / 11.10 : system-config-printer vulnerability (USN-1265-1)

Marc Deslauriers discovered that system-config-printer's cupshelpers scripts used by the Ubuntu automatic printer driver download service queried the OpenPrinting database using an insecure connection. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : freetype vulnerabilities (USN-1267-1)

It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. CVE-2011-3256 It was discovered...

Ubuntu 11.10 : lightdm vulnerabilities (USN-1262-1)

It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...

Fedora 14 : krb5-1.8.4-3.fc14 (2011-14650)

This update applies the upstream patch to fix a NULL pointer dereference wi= th the LDAP kdb backend CVE-2011-1527, an assertion failure with multiple= kdb backends CVE-2011-1528, and a NULL pointer dereference with multiple= kdb backends CVE-2011-1529. 737711...

Fedora 15 : krb5-1.9.1-14.fc15 (2011-14673)

This update applies the upstream patch to fix a NULL pointer dereference wi= th the LDAP kdb backend CVE-2011-1527, 744125, an assertion failure with= multiple kdb backends CVE-2011-1528, and a NULL pointer dereference with= multiple kdb backends CVE-2011-1529. 737711 It also rolls up a number of...

Fedora 16 : wireshark-1.6.3-1.fc16 (2011-15290)

This update fixes several security bugs, see http://www.wireshark.org/docs/= relnotes/wireshark-1.6.3.html for full details. This update fixes wireshark-devel subpackage. See bug 746655 for details. ---------------------------------------------------------------------- -----= Note that Tenable...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : libmodplug vulnerabilities (USN-1255-1)

Hossein Lotfi discovered that libmodplug did not correctly handle certain malformed media files. If a user or automated system were tricked into opening a crafted media file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the...

Solaris 10 (x86) : 146672-10

SunOS 5.10x86: ssl patch. Date this patch was last updated by Sun : Aug/07/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/06/09. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 10 (sparc) : 146576-01

SunOS 5.10: psp spheredesigner patch. Date this patch was last updated by Sun : Oct/26/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/04/30. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Ubuntu 10.10 : linux vulnerabilities (USN-1243-1)

It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2011-1479 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...

Ubuntu 10.04 LTS / 10.10 / 11.04 : kde4libs vulnerability (USN-1248-1)

Tim Brown discovered that KSSL in KDE-Libs did not properly perform input validation when displaying the common name CN for an SSL certificate. An attacker could exploit this to spoof the common name which could be used in an attack to trick the user into accepting a fraudulent certificate. This...

Fedora 16 : tomcat6-6.0.32-17.fc16 (2011-13426)

Fix for CVE-2011-3190 This release is the first using a systemd unit file. SystemV files are packaged separately. During this transition users may experience this error: 'error reading information on service tomcat6: No such file or directory' The error occurs because there is no tomcat service t...

Fedora 15 : php-5.3.8-3.fc15 (2011-13446)

Revert isa behavior to php = 5.3.6 and add a new new option allowstring for the new behavior accept string and raise autoload if needed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

Fedora 14 : kernel-2.6.35.14-97.fc14 (2011-12874)

Fixes assorted CVEs CVE-2011-2918: perf: Fix software event overflow CVE-2011-3188: net: improve sequence number generation CVE-2011-2723: gro: Only reset frag0 when skb can be pulled CVE-2011-2928: befs: Validate length of long symbolic links CVE-2011-3191: cifs: fix possible memory corruption i...

Ubuntu 10.04 LTS : puppet regression (USN-1223-2)

USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorizedkeys files with Puppet. This update fixes the problem. We apologize for the inconvenience. It was discovered that Puppet unsafely opened files wh...

Ubuntu 10.10 / 11.04 : cifs-utils vulnerabilities (USN-1226-2)

Dan Rosenberg discovered that cifs-utils incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. CVE-2011-1678 Jan Lieskovsky discovered that cifs-utils incorrectly filtered certain strings being added ...

Fedora 16 : thunderbird-7.0-1.fc16 / thunderbird-lightning-1.0-0.50.b7.fc16 (2011-13424)

The latest version of Thunderbird has the following changes : - Fixed several security issues: http://www.mozilla.org/security/known-vulnerabilities/th underbird.htmlthunderbird7 - Numerous platform fixes that improve speed, performance and stability Note that Tenable Network Security has extract...

Fedora 16 : zabbix-1.8.7-2.fc16 (2011-12457)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

Fedora 14 : firefox-3.6.23-1.fc14 / galeon-2.0.7-44.fc14.1 / gnome-python2-extras-2.25.3-34.fc14.1 / etc (2011-13467)

Update to new upstream Firefox version 3.6.23, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/fi refox36.htmlfirefox3.6.23 This update also includes all packages depending on gecko-libs rebuilt against the new version ...

Fedora 14 : Django-1.3.1-2.fc14 (2011-12481)

Security update to address vulnerabilities; see https://www.djangoproject.com/weblog/2011/sep/09/security-releases-iss ued/ Update for version 1.3. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...