Google Patches WebKit Bug in Chrome

Google has patched one of the vulnerabilities that a team of researchers used last week to win one portion of the Pwn2Own contest at CanSecWest. The bug is in the WebKit rendering engine. WebKit is the rendering engine that is at the heart of the Chrome browser, as well as Apple’s Safari browser...

Chrome 9 Security Update

Following last week’s release of Chrome 9 and a rather brazen $20,000 offering to anyone who can hack their browser at CanSecWest, Google released a stable channel update addressing some security flaws and containing a new version of Flash Player 10.2. Of the vulnerabilities, three were high...

Progress Crawls in Securing Critical Infrastructure

The US government is progressing at a snail’s pace in securing critical American infrastructure according to a Center for Strategic and International Studies CSIS commission on cybersecurity examining the first two years of the 44th presidency. Two years ago the CSIS published Securing Cyberspace...

Fedora 13 : clamav-0.96.5-1300.fc13 (2010-18564)

Sat Dec 4 2010 Enrico Scholz - 0.96.5-1300 - updated to 0.96.5 - CVE-2010-4260 Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. - CVE-2010-4261 An off-by-one error within the 'iconcb' function can be exploited to cause a memory corruption. - Sun Oct 31...

Google Releases Chrome 6 With 14 Security Updates

Google has released a new version of its Chrome browser and has included more than a dozen security fixes in the update. The new version, 6.0.472.53, was released two years to the day after the company pushed out the first version of Chrome. Google Chrome 6 includes patches for 14 total security...

Google's New Priority Inbox Hits a Snag

The buzz this morning isn’t Google’s Buzz, but its new Priority Inbox feature for the company’s Web based Gmail messaging service. The new feature allows heavy e-mail users to filter out and prioritize important messages. But the search giant has already hit a snag in releasing it to the public...

Видео и голосовой чат Gmail работают теперь и в Linux

Google сделал наконец так, что бы важные возможности Gmail - видео и голосовой чат - работали под Linux. Ubuntu и другие основанные на Debian дистрибутивы Linux могут работать с этим уже сейчас, поддержка RPM появиться в самом ближайшем времени. Для тестирования вы можете попробовать загрузить...

kernel: futex: Handle user space corruption gracefully

The wakefutexpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allows local users to cause a denial of service OOPS and possibly have unspecified other impact via vectors involving...

Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC

Exploit for hardware platform in category dos / poc ======================================================== Motorola SB5101 Hax0rware Rajko HTTPD Remote Exploit PoC ======================================================== !/usr/bin/perl Motorola SB5101 Hax0rware Rajko HttpD Remote Exploit PoC...

Microsoft to Patch Critical Windows, Office Flaws

Microsoft plans to ship two bulletins next Tuesday to fix multiple remote code execution vulnerabilities in Windows, Microsoft Office and Microsoft Visual Basic for Applications. Both bulletins are rated “critical,” Microsoft’s highest severity rating. The company describes a critical flaw as one...

Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability 13/04/2010 Priority: High Type: Remote Impact: Remote code execution CVE id: CVE-2010-0478 CVSSv2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C - ---------- 1. Software...

Feds Admit Not Doing Enough in ID Theft

An internal review has found that the Justice Department has not done enough to fight identity theft, the fastest-growing crime in the country. Justice Department Inspector General Glenn Fine says in a report that the department is falling short in efforts to combat identity theft, and that the...

kernel: futex: Handle user space corruption gracefully

The wakefutexpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allows local users to cause a denial of service OOPS and possibly have unspecified other impact via vectors involving...

Eshbel Priority MarketGate module Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Eshbel Priority MarketGate module Cross Site Scripting Vulnerability ==================================================================== ===================== I...

Design/Logic Flaw

The wakefutexpi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance PI futex, which allows local users to cause a denial of service OOPS and possibly have unspecified other impact via vectors involving...

Fedora Update for condor FEDORA-2010-0227

Check for the Version of condor OpenVAS Vulnerability Test Fedora Update for condor FEDORA-2010-0227 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Microsoft Patches Critical IE, Windows Vulnerabilities

Microsoft today shipped six bulletins with patches for a total of 12 documented security vulnerabilities in a wide range of widely deployed software products. Three of the six bulletins are rated “critical,” Microsoft’s highest severity rating. The most serious issues affect the company’s Interne...

Abdicating on a Cyber Security Czar?

In May, President Obama completed his long-awaited “cyberspace policy review,” concluding that cyberspace is a strategic asset that must be safeguarded from attack as a national security priority. The president promised to appoint a permanent “cyber czar” who would coordinate the work of federal...

python security update

2.2.3-6.11 - Fix all of the low priority security bugs: - Resolves: rhbz486114 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows discovered ...

python security update

2.3.4-14.7.el48.2 - Fix all of the low priority security bugs: - Resolves: rhbz486329 - Multiple integer overflows in python core CVE-2008-2315 - Resolves: 455008 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Resolves: 443810 - Multiple integer overflows...