qemu-nbd format-guessing due to missing format specification

ISSUE DESCRIPTION The qemu-nbd tool shipped in the Xen hypervisor tools distribution as qemu-nbd-xen autodetects the image format. If a particular disk image is intended to be raw, a guest operating system administrator could write a header to the image, describing another format than original on...

Fedora 18 : drupal7-rules-2.3-1.fc18 (2013-4532)

New upstream version, http://drupal.org/node/1954508 and http://drupal.org/node/1954592. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 17 : bind-9.9.2-7.P2.fc17 (2013-4533)

Bind-dyndb-ldap was updated to upstream version 2.6. Fixed BIND packages contain dns/rrl.h header necessary for building bind-dyndb-ldap. Fixed CVE-2013-2266. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Moderate: Red Hat Security Advisory: openstack-keystone security and bug fix update

Updated openstack-keystone packages that fix two security issues and various bugs are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

Fedora 18 : gajim-0.15.3-1.fc18 (2013-4205)

Version 0.15.3 of Gajim has been released. What's new since 0.15.2 : - Better handling of SSL errors - Better handling of canceling file transfer - Improve farstream calls - Minor fixes and improvements Full list of fixed upstream bugs: https://trac.gajim.org/query?status=closed&milestone=0.15.3...

Security fix for the ALT Linux 8 package krb5 version 1.11.1-alt1

March 30, 2013 Ivan A. Melnikov 1.11.1-alt1 - 1.11.1 + fix a null pointer dereference in the KDC PKINIT code CVE-2013-1415; - drop obsolete patch 21; - add patch 22 from upstream git to fix a memory leak in krb5getinitcredskeytab upstream ticket 7586...

bind security update

CentOS Errata and Security Advisory CESA-2013:0689 Updated bind packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CV...

GnuTLS libgnutls Double-free Certificate List Parsing Remote DoS

Exploit for linux platform in category dos / poc CVE-2013-16631 is a possible remote DOS attack issue. This issue has been fixed2 in =GNUTLS-3.0.14. I hacked on it for hours and figure out a few prerequisites could make it vulnerable: ============================= REQUIRED: - prior to GNUTLS 3.0....

phonon, qt security update

CentOS Errata and Security Advisory CESA-2013:0669 Updated qt packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Scientific Linux Security Update : Core X11 clients on SL6.x i386/x86_64 (20130221)

It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker- controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. CVE-2011-2504 Also with this update...

CentOS Update for finch CESA-2013:0646 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for xorg-x11-utils CESA-2013:0502 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libipa_hbac CESA-2013:0508 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for xorg-x11-server-utils CESA-2013:0502 centos6

Check for the Version of xorg-x11-server-utils OpenVAS Vulnerability Test CentOS Update for xorg-x11-server-utils CESA-2013:0502 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

CentOS Update for xorg-x11-apps CESA-2013:0502 centos6

Check for the Version of xorg-x11-apps OpenVAS Vulnerability Test CentOS Update for xorg-x11-apps CESA-2013:0502 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

CentOS 6 : evolution-mapi / openchange (CESA-2013:0515)

Updated openchange packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

CentOS 6 : xorg-x11-apps / xorg-x11-server-utils / xorg-x11-utils (CESA-2013:0502)

Updated core client packages for the X Window System that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring...

java security update

CentOS Errata and Security Advisory CESA-2013:0604 Updated java-1.6.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

Moderate: Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

Updated openstack-keystone packages that fix multiple security issues, various bugs, and add enhancements are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...