Service worker meeting notes

On July 28th-29th we met up in the Mozilla offices in Toronto to discuss the core service worker spec. I'll try and cover the headlines here. Before I get stuck in to the meaty bits of the meeting, our intent here is to do what's best for developers and the future of the web, so if you disagree...

Unbreakable Enterprise kernel security update

2.6.39-400.283.1 - atl2: Disable unimplemented scatter/gather feature Ben Hutchings Orabug: 23703990 CVE-2016-2117 - mlx4core: add module parameter to disable background init Mukesh Kacker Orabug: 23292107 - NFSv4: Don't decode fslocations if we didn't ask for them... Trond Myklebust Orabug:...

CVE-2016-1374

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

CVE-2016-1374

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

Design/Logic Flaw

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

CVE-2016-1374

CVE-2016-1374 affects Cisco Unified Computing System (UCS) Performance Manager up to version 2.0.0 and earlier. The vulnerability arises from insufficient input validation in the web framework that handles HTTP GET parameters, allowing an authenticated remote attacker to execute arbitrary command...

CVE-2016-1374

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

Moderate: Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Base Libraries

Red Hat Satellite 6.2 now available for Red Hat Enterprise Linux 5, 6 and 7 Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs...

Multi Gigabit Packet Capturing: PFQ

PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission 10G and beyond, in-kernel functional processing and packets steering across sockets/end-points. PFQ is highly optimized for multi-core architecture, as well as for...

Cisco Data Center Operations Management Solution in the presence of a serious vulnerability-a vulnerability warning-the black bar safety net

! Cisco is a leading global network solutions provider, the company is committed to numerous companies to build network unimpeded,“Bridge”, and with his own keen insight, rich industry experience, advanced technology, help enterprises to put the network into a strategic asset, to fully tap the...

MGASA-2016-0259 Updated VirtualBox 5.1 packages fix security vulnerability

This update provides the new VirtualBox 5.1 series, currently based on 5.1.2 providing several perfomance enhancements The highlights include: VMM: new APIC and I/O APIC implementations that result in significantly improved performance in certain situations for example with networking VMM: activa...

Updated VirtualBox 5.1 packages fix security vulnerability

This update provides the new VirtualBox 5.1 series, currently based on 5.1.2 providing several perfomance enhancements The highlights include: VMM: new APIC and I/O APIC implementations that result in significantly improved performance in certain situations for example with networking VMM: activa...

Error: TDICA 1005/1007 and Sessions Disconnected/ Not Responding

Usersessions freezing / disconnecting. Network and performance has been checked and no issues found. However, TDICA 1005/1007 events are seen in the logs at the same time the error occurred. This might be a problem with flaky network connections between the ICA clients and the VDA servers Session...

The performance benefits of rel=noopener

If you have links to another origin, you should use rel="noopener", especially if they open in a new tab/window. Example site Without this, the new page can access your window object via window.opener. Thankfully the origin security model of the web prevents it reading your page, but no-thankfull...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

CVE-2016-0635

The connected Nessus/NASL records tie CVE-2016-0635 to the Oracle Siebel CRM knowledge component (AnswerFlow Spring Framework) in Siebel CRM. Affected versions are 8.5.1.0–8.5.1.7 and 8.6.0. The vulnerability in the Oracle Knowledge component can be exploited remotely over HTTP by a low-privilege...

CVE-2016-0635

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

Cisco Unified Computing System Performance Manager Input Validation Vulnerability

Cisco Unified Computing System Manager provides unified, embedded management of hardware and software components within a computing system. Cisco Unified Computing System UCS Performance Manager does not validate the parameter values of HTTP GET requests, which can be exploited to perform...

Cisco Unified Computing System Performance Manager Input Validation Vulnerability

A vulnerability in the web framework of Cisco Unified Computing System UCS Performance Manager could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to insufficient input validation performed on parameters that are passed via an HTTP GET request. An...

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in its Unified Computing System UCS Performance Manager. Exploitation of this vulnerability could allow an authenticated remote attacker to take control of an affected system. Users and administrators are encouraged to review the Cis...