Branch sisyphus update bulletin.

Package virtualbox updated to version 4.3.4-alt1 for branch sisyphus in task 109958.

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0404

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406.

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0405

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0407.

Severity: LOW (3.5)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0406

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0407

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405.

Severity: LOW (3.5)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0377

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.

Severity: MEDIUM (4.4)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0418

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-addition-std-def updated to version 4.3.4-alt1.199192.1 for branch sisyphus in task 109958.

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0404

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0405

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0407.

Severity: LOW (3.5)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0406

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0407

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405.

Severity: LOW (3.5)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0377

Severity: MEDIUM (4.4)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0418

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-std-def updated to version 4.3.4-alt1.199192.1 for branch sisyphus in task 109958.

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0404

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0405

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0407.

Severity: LOW (3.5)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0406

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0407

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405.

Severity: LOW (3.5)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0377

Severity: MEDIUM (4.4)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0418

Severity: LOW (2.1)

References:

Package kernel-modules-virtualbox-un-def updated to version 4.3.4-alt1.199685.1 for branch sisyphus in task 109958.

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0404

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0405

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0407.

Severity: LOW (3.5)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0406

Severity: LOW (2.4)

References:

Published: 2014-01-15
Modified: 2024-11-21

CVE-2014-0407

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405.

Severity: LOW (3.5)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0377

Severity: MEDIUM (4.4)

References:

Published: 2015-01-21
Modified: 2024-11-21

CVE-2015-0418

Severity: LOW (2.1)

References:

Package curl updated to version 7.34.0-alt1 for branch sisyphus in task 110632.

Published: 2014-01-20

BDU:2015-09726

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.5)

References:

Published: 2013-11-23
Modified: 2024-11-21

CVE-2013-4545

cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Severity: MEDIUM (4.3)

References:

Published: 2013-12-24
Modified: 2024-11-21

CVE-2013-6422

The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.

Severity: MEDIUM (4.0)

References:

Package openttd updated to version 1.3.3-alt1 for branch sisyphus in task 110640.

Published: 2013-12-14
Modified: 2024-11-21

CVE-2013-6411

The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.

Severity: MEDIUM (5.0)

References:

Version: 2.1.0

ALT-BU-2013-1448-1

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities