[SECURITY] [DSA 2901-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2901-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2901-1 (wordpress - security update)

Several vulnerabilities were discovered in Wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-0165 A user with a contributor role, using a specially crafted request, can publish posts, which is reserved for users of the...

Debian: Security Advisory (DSA-2901-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-0166

The wpvalidateauthcookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie...

CVE-2014-0166

CVE-2014-0166 concerns WordPress: the wp_validate_auth_cookie function in wp-includes/pluggable.php failed to correctly verify authentication cookies, enabling remote access via forged cookies. Affected were WordPress releases prior to 3.7.2 and 3.8.x prior to 3.8.2. OpenVAS/Mageia and Fedora adv...

VMware vSphere, ESX and ESXi updates to third party libraries

a. vCenter Server and ESX userworld update for OpenSSL library The userworld OpenSSL library is updated to version openssl-0.9.8y to resolve multiple security issues.The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2013-0169 and CVE-2013-0166 to these...

VMSA-2013-0009:VMware vSphere, ESX and ESXi updates to third party libraries

VMSA-2013-0009.3 VMware vSphere, ESX and ESXi updates to third party libraries VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0009.3 VMware Security Advisory Synopsis: VMware vSphere, ESX and ESXi updates to third party libraries VMware Security Advisory Issue date:...

Oracle Linux 5 : poppler (ELSA-2009-0480)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0480 advisory. - Removes CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.allocation-size-check.patch. - Adds...

Oracle Linux 5 / 6 : openssl (ELSA-2013-0587)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0587 advisory. - fix for CVE-2013-0169 - SSL/TLS CBC timing attack 907589 - fix for CVE-2013-0166 - DoS in OCSP signatures checking 908052 - enable compression on...

Oracle Linux 4 : kdegraphics (ELSA-2009-0431)

From Red Hat Security Advisory 2009:0431 : Updated kdegraphics packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain...

Oracle Linux 5 : cups (ELSA-2009-0429)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0429 advisory. 1:1.3.7-8:.4 - Applied additional patches by Tim Waugh for batch3892.pdf, batch4781.pdf, batch5486.pdf, batch19856.pdf, batch19869.pdf testing files fr...

Moderate: Red Hat Security Advisory: openssl security update

An update for the OpenSSL component for JBoss Enterprise Application Platform 5.2.0 for Solaris and Microsoft Windows that fixes two security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. Comm...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 8517)

OpenSSL has been updated to fix several security issues : - Avoid the openssl CRIME attack by disabling SSL compression by default. Setting the environment variable 'OPENSSLNODEFAULTZLIB' to 'no' enables compression again. CVE-2012-4929 Please note that openssl on SUSE Linux Enterprise 10 is not...

SUSE-SU-2015:0545-1 Security update for OpenSSL

OpenSSL has been updated to fix several security issues: CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL compression by default. Setting the environment variable 'OPENSSLNODEFAULTZLIB' to 'no' enables compression again. CVE-2013-0169: Timing attacks against TLS could be used by...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Mar 15 03:20:11 CDT 2013 The most recent version of this document is available here: | Updated: Wed Jun 5 10:22:29 CDT 2013 | Update: Fix available for FIPS version | Update: Corrected CVSS base score and vector...

CentOS Update for openssl CESA-2013:0587 centos6

Check for the Version of openssl OpenVAS Vulnerability Test CentOS Update for openssl CESA-2013:0587 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora 17 : openssl-1.0.0k-1.fc17 (2013-2793)

Multiple security and bug fixes update from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SOL14261 - OpenSSL OCSP vulnerability CVE-2013-0166

Recommended action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. Supplemental Information Common Vulnerabilities and Exposures CVE-2013-0166 Note: The previous link takes you to a resource outside of...

Fedora Update for openssl FEDORA-2013-2834

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...