Unfixed XSS vulnerability at serc.carleton.edu

Security researcher wingb0t, has submitted on 16/02/2012 a cross-site-scripting XSS vulnerability affecting serc.carleton.edu, which at the time of submission ranked 40727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Fedora 16 : bugzilla-4.0.4-1.fc16 (2012-1218)

Bugzilla is a Web-based bug-tracking system used by a large number of software projects. Two security issues have been discovered in Bugzilla and fixed in these releases. These updates fix CVE-2012-0440 and CVE-2012-0448 Note that Tenable Network Security has extracted the preceding description...

[SECURITY] Fedora 16 Update: xchat-ruby-1.2-11.fc16

For those of us that prefer the Ruby programming language above all others, the XChat-Ruby Plugin now allows X-Chat plugins to be written in Ruby, in addition to the other supported scripting interfaces. This means that, for the first time, you can use a purely object-oriented language in which t...

Gentoo Security Advisory GLSA 201110-16 (Cyrus IMAP Server)

The remote host is missing updates announced in advisory GLSA 201110-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-16 (xkeyboard-config xorg-server)

The remote host is missing updates announced in advisory GLSA 201201-16. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

[SECURITY] Fedora 16 Update: kernel-3.2.5-3.fc16

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

[SECURITY] Fedora 16 Update: bugzilla-4.0.4-1.fc16

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

[SECURITY] Fedora 16 Update: znc-infobot-0.204-1.fc16

This is a user module for ZNC that provides joined channels with a multitude of bot commands...

Fedora 16 : samba-3.6.3-78.fc16 (2012-1098)

This is a security release in order to address CVE-2012-0817 Memory leak/Denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : ettercap-0.7.4-3.fc16 (2012-1054)

New upstream, and patch for insecure global settings file. Restored RPMOPTFLAGS to build. New upstream, and patch for insecure global settings file. New upstream, and patch for insecure global settings file. New upstream, and patch for insecure global settings file. Note that Tenable Network...

Fedora 16 : mysql-5.5.20-1.fc16 (2012-0972)

Update to MySQL 5.5.20, for various fixes described at http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html as well as security fixes described at http://www.oracle.com/technetwork/topics/security/cpujan 2012-366304.html - Re-include the mysqld logrotate script, now that it's not so bogus Note...

[SECURITY] Fedora 16 Update: ettercap-0.7.4-3.fc16

Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols even ciphered ones and includes many feature for network and ho st...

[SECURITY] Fedora 16 Update: mysql-5.5.20-1.fc16

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 16 Update: bip-0.8.8-2.fc16

Bip is an IRC proxy, which means it keeps connected to your preferred IRC servers, can store the logs for you, and even send them back to your IRC clients upon connection. You may want to use bip to keep your logfiles in a unique format and on a unique computer whatever your client is, when you...

[SECURITY] Fedora 16 Update: gstreamer-plugins-bad-free-0.10.22-2.fc16.2

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

[SECURITY] Fedora 16 Update: xulrunner-10.0-1.fc16

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

[SECURITY] Fedora 16 Update: thunderbird-lightning-1.2-1.fc16

Lightning brings the Sunbird calendar to the popular email client, Mozilla Thunderbird. Since it's an extension, Lightning is tightly integrated with Thunderbird, allowing it to easily perform email-related calendaring tasks...

[SECURITY] Fedora 16 Update: firefox-10.0-1.fc16

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 16 Update: thunderbird-10.0-1.fc16

Mozilla Thunderbird is a standalone mail and newsgroup client...

Fedora 16 : BackupPC-3.2.1-7.fc16 (2012-0825)

change %%sharedstatedir to %%localstatedir/lib as these expand differently on EL bz 767719 - fix XSS vulnerability bz 749846, bz 749847, bz 749848 CVE-2011-3361 - additional documentation about enabling correct channels in RHEL to resolve all dependencies bz 749627 - fix bug with missing...