[SECURITY] Fedora 18 Update: kdeedu-4.10.4-1.fc18

kdeedu metapackage, to ease migration to split applications...

[SECURITY] Fedora 18 Update: kdebindings-4.10.4-1.fc18

Kdebindings metapackage, to ease migration to split applications...

[SECURITY] Fedora 18 Update: kdeaccessibility-4.10.4-1.fc18

Kdeaccessibility metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdemultimedia-4.10.4-1.fc19

Kdemultimedia metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdeedu-4.10.4-1.fc19

kdeedu metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdebindings-4.10.4-1.fc19

Kdebindings metapackage, to ease migration to split applications...

qemu-kvm security and bug fix update

0.12.1.2-2.355.el64.5 - kvm-e1000-fix-link-down-handling-with-auto-negotiation.patch bz907716 - kvm-e1000-unbreak-the-guest-network-when-migration-to-RH.patch bz907716 - kvm-reimplement-errorsetg-and-errorsetgerrno-for-RHEL.patch bz957056 -...

subscription-manager: rhn-migrate-classic-to-rhsm missing SSL certificate verification

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

Server: user_migrate: Local file disclosure

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.8 allows an authenticated remote attacker to import arbitrary files on the server inside his user account. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

SUSE-SU-2015:0944-1 Security update for Xen

XEN has been updated to fix various bugs and security issues: CVE-2013-0153: XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device...

RHEL 5 : redhat-release (EOL Notice) (RHSA-2013:0578)

This is the 5-Month notification for the conclusion of Red Hat Enterprise Linux 5.6 Extended Update Support EUS Add-on offering. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the Extended Update Support Add-On for Red Hat Enterprise Linux 5.6 will conclude on July 31, 201...

ipa security, bug fix and enhancement update

3.0.0-25.el6 - Filter generated winbind dependencies so the right version of samba can be installed. 905594 3.0.0-24.el6 - Add certmonger condrestart to server post scriptlet 903758 - Make certmonger a pre Requires 903758 - Add selinux-policy to Requirespre to avoid post scriptlet AVCs 903758 - S...

Movable Type mt-upgrade.cgi Remote Command Execution

The Movable Type install hosted on the remote web server is affected by a remote command execution vulnerability because the 'lib/MT/Upgrade.pm' file used in mt-upgrade.cgi script fails to verify authentication for requests used in database migration functions. This could allow an unauthenticated...

RHEL 3 / 4 : redhat-release (EOL Notice) (RHSA-2011:0002)

This is the End Of Life notification for RHN Proxy Server 4. On December 31st, 2010, per the life cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here :...

RHEL 5 : kvm (RHSA-2010:0627)

Updated kvm packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Movable Type 4.2x, 4.3x Web Upgrade Remote Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

CVE-2013-0209

lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injecti...

CVE-2013-0209

Movable Type is affected by CVE-2013-0209 through mt-upgrade.cgi (lib/MT/Upgrade.pm) in versions 4.2x and 4.3x up to 4.38. The vulnerability arises because database-migration functions do not require authentication, enabling an attacker to perform eval and SQL injection via crafted parameters, in...

TURKTRUST Officials Say No Evidence of Malice in Certificate Incident

A week after the disclosure of the existence of a fraudulent certificate for Google domains that resulted from the mistaken issuance of a subordinate certificate by a Turkish certificate authority, officials at TURKTRUST are continuing to defend their actions in response to the incident, and say...