kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2012:1304 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

Fedora 18 : bind-9.9.1-10.P3.fc18 (2012-13922)

Update to the 9.9.1-P3 security release. This update also fixes following issues : - bind now uses systemd-rpm macros for starting/restarting of the named daemon. BZ850045 - the NetworkManager dispatcher script contained wrong path to systemcl utility. BZ837173 - named-chroot.service systemd unit...

BlackHole Exploit Kit 2.0 released with more latest Exploits

According to release announcement on Pastebin by unknown developers in a Russian-language BlackHole Exploit Kit 2.0 released with more latest Exploits. BlackHole is one of the most dominant exploit toolkits currently available in the underground market. It enables attackers to exploit security...

Fedora Update for Django FEDORA-2012-11415

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2012-11415 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120710)

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fix : - The fix for CVE-2011-1083 introduced a flaw in the way the Linux kernel's Event Poll epoll subsystem handled resource clean up when an ELOOP error code was returned. A local, unprivileged user...

RedHat Update for kernel RHSA-2012:1061-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2012:1061-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2012-2672

CVE-2012-2672 affects Oracle Mojarra 2.1.7. The issue arises when the FacesContext reference is not properly cleaned up during startup, leaving a ThreadLocal that can allow a JSF WAR calling FacesContext.getCurrentInstance() at startup to access resources from another deployed WAR. This is a loca...

The Vienna Connection? Trying To Stamp Out Flame, Researchers Find Clues To Its Origins

Researchers at Kaspersky Lab, domain registrar GoDaddy and OpenDNS have taken steps to cut off Internet access for machines infected with the Flame worm. In the process, the researchers say they uncovered a large and complex command and control infrastructure of more than 80 Web domains and...

Talk to IT

Well in advance of your departure date, have a sit-down with IT to talk about your trip and about how to avoid exposing sensitive corporate assets and information to compromise. Your IT group will probably be able to help you find work arounds, secure a line back to the company network and even...

Adobe releases open source malware classification tool

Adobe releases open source malware classification tool Adobe Systems has released a malware classification tool in order to help security incident first responders, malware analysts and security researchers more easily identify malicious binary files. The 'Adobe Malware Classifier' tool uses...

Adobe Releases Malware Classifier Tool

Adobe has published a free tool that can help administrators and security researchers classify suspicious files as malicious or benign, using specific machine-learning algorithms. The tool is a command-line utility that Adobe officials hope will make binary classification a little easier. Adobe...

Ubuntu 10.04 LTS / 10.10 / 11.04 : gdm-guest-session vulnerability (USN-1399-1)

Ryan Lortie discovered that gdm-guest-session improperly cleaned out certain guest session files. A local attacker could use this issue to delete arbitrary files. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable h...

DNSChanger Malware

UPDATE: On March 5, 2012, a federal judge agreed to allow more time for organizations and individuals to clean systems of the DNSChanger malware and extended the deadline for shutting off servers that had been keeping infected computers connected to the internet. Although the new deadline is July...

SA-CONTRIB-2011-028 - Simple Clean - Cross Site Scripting

Simple Clean is a simple and stripped clean theme for Drupal. The theme contains a cross site scripting XSS vulnerability that can be exploited when posting comments. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "post comments". Versions affect...

Calling All Hackers - Grand Prize in Sunshine State "Hacktacular" Challenge !

Calling All Hackers - Grand Prize in Sunshine State "Hacktacular" Challenge ! Calling all hackers: Data Analyzers, LLC www.datanalyzers.com in Orlando, Florida, is hosting the Sunshine State "Hacktacular" Challenge with a big prize for the top competitor – a full-time job with benefits and...

Fedora Update for Django FEDORA-2011-1235

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2011-1235 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 13 Update: Django-1.2.5-1.fc13

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 14 Update: Django-1.2.4-1.fc14

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Unfixed XSS vulnerability at support.clean-mx.de

Security researcher Xylitol, has submitted on 12/06/2010 a cross-site-scripting XSS vulnerability affecting support.clean-mx.de, which at the time of submission ranked 300206 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/06/2010. It is...

STUXNET Scanner to Identify Stuxnet Infected Machines !

TrendLabs has created a STUXNET Scanner Tool to help administrators with clues to determine which computers in their networks are still infected by STUXNET. This tool helps administrators identify infected machines within their own networks even if STUXNET is not communicating as STUXNET installs...