Login
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in openvas-manager
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in openvas-manager
ID: FEDORA-2015-10946
Distribution: Fedora
Plattformen: Fedora 22
Datum: Mi, 15. Juli 2015, 00:02
Referenzen: https://bugzilla.redhat.com/show_bug.cgi?id=1169170
Applikationen: OpenVAS

Originalnachricht

Name        : openvas-manager
Product : Fedora 22
Version : 6.0.3
Release : 4.fc22
URL : http://www.openvas.org
Summary : Manager Module for the Open Vulnerability Assessment System
(OpenVAS)
Description :
The OpenVAS Manager is the central service that consolidates plain
vulnerability
scanning into a full vulnerability management solution. The Manager controls
the
Scanner via OTP and itself offers the XML-based, stateless OpenVAS Management
Protocol (OMP). All intelligence is implemented in the Manager so that it is
possible to implement various lean clients that will behave consistently e.g.
with regard to filtering or sorting scan results. The Manager also controls
a SQL database (sqlite-based) where all configuration and scan result data is
centrally stored.

-------------------------------------------------------------------------------
-
Update Information:

Bump to openvas8 because of the issues found in previous versions. This should
be the first version with scanner really working on Fedora.
-------------------------------------------------------------------------------
-
ChangeLog:

* Mon Jun 29 2015 Michal Ambroz <rebus at, seznam.cz> - 6.0.3-4
- rebuild for F22
* Sat Jun 20 2015 Michal Ambroz <rebus at, seznam.cz> - 6.0.3-3
- fix the options in the /etc/sysconfig
* Thu Jun 18 2015 Fedora Release Engineering
<rel-eng@lists.fedoraproject.org> - 6.0.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Sat May 23 2015 Michal Ambroz <rebus at, seznam.cz> - 6.0.3-1
- bump to OpenVas-8 version 6.0.3
* Sat Apr 4 2015 Michal Ambroz <rebus at, seznam.cz> - 5.0.9-1
- bump to OpenVas-7 version 5.0.9
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1169170 - openvas-manager: SQL injection related to the timezone
parameter [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1169170
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update openvas-manager' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung