--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2009-0577
2009-01-16 22:38:38
--------------------------------------------------------------------------------Name        : libnasl
Product     : Fedora 10
Version     : 2.2.11
Release     : 3.fc10
URL         : https://www.tenable.com/
Summary     : Nessus Attack Scripting Language
Description :
NASL is a scripting language designed for the Nessus security scanner.
Its aim is to allow anyone to write a test for a given security hole
in a few minutes, to allow people to share their tests without having
to worry about their operating system, and to guarantee everyone that
a NASL script can not do anything nasty except performing a given
security test against a given target.

Thus, NASL allows you to easily forge IP packets, or to send regular
packets. It provides you some convenient functions that will make the
test of web and FTP server more easy to write. NASL garantees you that
a NASL script:
- will not send any packet to a host other than the target host,
- will not execute any commands on your local system.

--------------------------------------------------------------------------------ChangeLog:

--------------------------------------------------------------------------------References:

  [ 1 ] Bug #479655 - libnasl: OpenSSL incorrect checks for malformed signatures
        https://bugzilla.redhat.com/show_bug.cgi?id=479655
--------------------------------------------------------------------------------This update can be installed with the "yum" update program.  Use 
su -c 'yum update libnasl' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce

Fedora 10 Update: libnasl-2.2.11-3.fc10

January 26, 2009
libnasl: OpenSSL incorrect checks for malformed signatures https://bugzilla.redhat.com/show_bug.cgi?id=479655

Summary

NASL is a scripting language designed for the Nessus security scanner.

Its aim is to allow anyone to write a test for a given security hole

in a few minutes, to allow people to share their tests without having

to worry about their operating system, and to guarantee everyone that

a NASL script can not do anything nasty except performing a given

security test against a given target.

Thus, NASL allows you to easily forge IP packets, or to send regular

packets. It provides you some convenient functions that will make the

test of web and FTP server more easy to write. NASL garantees you that

a NASL script:

- will not send any packet to a host other than the target host,

- will not execute any commands on your local system.

[ 1 ] Bug #479655 - libnasl: OpenSSL incorrect checks for malformed signatures

https://bugzilla.redhat.com/show_bug.cgi?id=479655

su -c 'yum update libnasl' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-package-announce

FEDORA-2009-0577 2009-01-16 22:38:38 Product : Fedora 10 Version : 2.2.11 Release : 3.fc10 URL : https://www.tenable.com/ Summary : Nessus Attack Scripting Language Description : NASL is a scripting language designed for the Nessus security scanner. Its aim is to allow anyone to write a test for a given security hole in a few minutes, to allow people to share their tests without having to worry about their operating system, and to guarantee everyone that a NASL script can not do anything nasty except performing a given security test against a given target. Thus, NASL allows you to easily forge IP packets, or to send regular packets. It provides you some convenient functions that will make the test of web and FTP server more easy to write. NASL garantees you that a NASL script: - will not send any packet to a host other than the target host, - will not execute any commands on your local system. [ 1 ] Bug #479655 - libnasl: OpenSSL incorrect checks for malformed signatures https://bugzilla.redhat.com/show_bug.cgi?id=479655 su -c 'yum update libnasl' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-announce

Change Log

References

Update Instructions

Severity
Product : Fedora 10
Version : 2.2.11
Release : 3.fc10
URL : https://www.tenable.com/
Summary : Nessus Attack Scripting Language

Related News