Oracle Linux 6 : qemu-kvm (ELSA-2012-0050)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0050 advisory. - Resolves: bz772081 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-6.2.z - CVE: CVE-2011-4127 - Resolves: bz7677...

Oracle Linux 5 : autofs (ELSA-2013-0132)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0132 advisory. 5.0.1-0.rc2.177.0.1.el5 - apply fix from NetApp to use tcp before udp http://www.mail-archive.com/[email protected]/msg07910.html Bert Barbe orabug 682789...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20130709)

This update adds the following enhancements : Morocco does not observe DST during Ramadan. Therefore, Morocco is expected to switch to Western European Time WET on July 7 and resume again to Western European Summer Time WEST on August 10. Also, the period of DST in Israel has been extended until...

Progressive enhancement is still important

About 5 years ago it felt like the progressive enhancement battle had been won, but after watching the reactions to Nicholas Zakas' "Enough with the JavaScript already" it seems all the old arguments are back with reinforcements. Well, I'm wearing my angry-pants and I'm ready for a jog down ranty...

CentOS 4 : pam (CESA-2007:0737)

Updated pam packages that fix two security flaws, resolve two bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

CentOS 5 : kernel (CESA-2011:1479)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Threat Outbreak Alert: Fake Digital Certificate Update Notification Email Messages on June 24, 2013

Medium Alert ID: 29766 First Published: 2013 June 24 16:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a new digital certificate from KeyBank for the recipient. The text in the email message attempts to convince the...

Fedora Update for blinken FEDORA-2013-10182

Check for the Version of blinken OpenVAS Vulnerability Test Fedora Update for blinken FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: blinken-4.10.4-1.fc17

Memory Enhancement Game...

[SECURITY] Fedora 18 Update: blinken-4.10.4-1.fc18

Memory Enhancement Game...

kernel security, bug fix, and enhancement update

2.6.32-358.11.1 - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094 2.6.32-358.10.1 - scsi be2iscsi : Fix the NOP-In handling code path Nikola Pajkovsky 955504 947550 - scsi be2iscsi: Fix memory leak in control path of driver Rob Evers 955504...

[SECURITY] Fedora 19 Update: blinken-4.10.4-1.fc19

Memory Enhancement Game...

Scientific Linux Security Update : selinux-policy enhancement update on SL6.x i386/x86_64 (20130603)

This update adds the following enhancements : Previously, the mysqldsafe script was unable to execute a shell /bin/sh with the shellexect SELinux security context. Consequently, the mysql55 and mariadb55 Software Collection packages were not working correctly. With this update, SELinux policy rul...

Endpoint Security Client enhancement hotfix for Anti-Malware detection capabilities

...

Important: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4

Updated Red Hat Storage 2.0 packages that fix multiple security issues, several bugs, and add enhancements are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Moderate: Red Hat Security Advisory: openstack-cinder security and enhancement update

Updated openstack-cinder packages that fix two security issues and add one enhancement are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Moderate: Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Updated openstack-nova packages that fix two security issues, several bugs, and add an enhancement are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...

New Mac OS X adware Trojan spreading via browser plugin

Russian anti-virus company Doctor Web reports that a new Mac OS X adware Trojan spreading itself via crafted movie trailer pages that prompt users to install a browser plugin. Basically, an adware is any software package which automatically renders advertisements in order to generate revenue for...

Security enhancement: do not allow POST parameters to be used in GETs

My company's security team ran a vulnerability scan against our JIRA and found this issue. They advised me to bring it to your attention as an opportunity to improve security. Summary: quote Some web frameworks collapse the POST and GET parameters into a single collection. This is a flawed design...

Security enhancement: do not allow POST parameters to be used in GETs

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-32076. panel My company's security team ran a vulnerability scan against our JIRA and found this issue. They advised me to bring it to your...