Fedora 19 : ReviewBoard-1.7.18-1.fc19 / python-djblets-0.7.23-1.fc19 (2013-20814)

1.7.18 fixes JavaScript errors - New upstream security release 1.7.17 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.17/ - Resolves: CVE-2013-4519 - Security Fixes : - Fixed XSS vulnerabilities for the 'Branch' field and uploaded file captions. - Added a 'X-Frame-Options' header ...

Security Advisory 2868725: Recommendation to disable RC4

In light of recent research into practical attacks on biases in the RC4 stream cipher, Microsoft is recommending that customers enable TLS1.2 in their services and take steps to retire and deprecate RC4 as used in their TLS implementations. Microsoft recommends TLS1.2 with AES-GCM as a more secur...

[SECURITY] Fedora 18 Update: firefox-25.0-3.fc18

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 20 Update: firefox-25.0-3.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Network Security Monitor Framework: Bro

Bro is a passive, open-source network traffic analyzer. It is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including...

Department of Energy Susceptible to Attack

An audit of the Department of Energy has shown that 29 new weaknesses emerged on the agency’s networks this year in addition to 10 existing that the DoE failed to fix after a 2012 audit. The audit, undertaken by the Office of Inspector General and the Office of Audits and Inspections, revealed...

[SECURITY] Fedora 19 Update: firefox-25.0-3.fc19

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CVE-2013-5862

Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters CPC drivers, a different vulnerability than CVE-2014-4215...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters CPC drivers, a different vulnerability than CVE-2014-4215...

CVE-2013-5862

CVE-2013-5862 affects Oracle Solaris 10 and 11.1 (CPU performance counters CPC drivers). The vulnerability is localized to CPC driver components and can cause a complete denial of service (OS hang/crash) on affected systems. The connected Nessus entries reference patch updates for similar CPC-dri...

CVE-2013-5862

Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to CPU performance counters CPC drivers, a different vulnerability than CVE-2014-4215...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 allows remote attackers to affect integrity via...

CVE-2013-5766

CVE-2013-5766 affects Oracle Enterprise Manager Grid Control/DB Control and the DB Plugin for 12.1.x. Affected components include EM Base Platform (10.2.0.5, 11.1.0.1), EM DB Control (11.1.0.7, 11.2.0.2, 11.2.0.3), and EM Plugin for DB (12.1.0.2–12.1.0.3). The description notes an unspecified rem...

Oracle Linux 5 : glibc (ELSA-2013-1411)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1411 advisory. 2.5-118.2 - Fix integer overflows in valloc and memalign. 1011804. 2.5-118.1 - Add support for newer L3 caches on x86-64 and correctly count the number of...

sssd security and bug fix update

1.5.1-70 - Fix IPA provider performance issue when storing large host groups - Resolves: rhbz979047 - sssdbe goes to 99% CPU and causes significant login delays when client is under load 1.5.1-69 - Fix startup with a broken configuration - Resolves: rhbz974036 - sssd core process keeps running...

Openfire 3.8.2 server new admin password/add new admin Exploit

This expoit use multiple vulnerabilites in Openfire. Openfire admin must visit exploit link. Attacker can create new admin or change admin password. Openfire is a real time collaboration RTC server licensed under the Open Source Apache License. It uses the only widely adopted open protocol for...

Fedora Update for firefox FEDORA-2013-17047

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2013-17047 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Oracle Linux 5 kernel update

kernel 2.6.18-371.0.0.0.1 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use...

[SECURITY] Fedora 18 Update: firefox-24.0-1.fc18

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

HP OpenView Communication Broker Arbitrary File Deletion (HPSBMU02691)

According to its self-reported version, the version of the HP OpenView Communication Broker service running on the remote host has a vulnerability that could allow an unauthenticated attacker to delete arbitrary files on the system. Successful exploits will result in a denial of service condition...