Fedora 20 : firefox-27.0-1.fc20 / xulrunner-27.0-1.fc20 (2014-2040)

See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Boasting Better Encryption, Bug Fixes, OpenSSH 6.5 Released

The OpenBSD Project pushed out a new build on Thursday of the OpenSSH security suite, adding a new private key format, a new transport cipher and fixing 15 bugs in the Secure Shell. OpenSSH version 6.5 adds support for the key exchange using elliptic-curve Diffie Hellman within cryptographer Dani...

RealVNC VNC 多个本地权限提升漏洞

BUGTRAQ ID: 64560 CVECAN ID: CVE-2013-6886 RealVNC VNC Server是一款远程控制服务程序。 VNC 5.0.6在处理用户模式vncserver or vncserver-x11或虚拟模式Xvnc setuid-root帮助程序内VNC服务器的某些参数时存在安全漏洞，成功利用后可导致以root权限执行任意代码。 0 RealVNC RealVNC 5.0.6 厂商补丁： RealVNC ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.realvnc.com/...

Fedora 19 : thunderbird-24.2.0-2.fc19 (2013-23295)

Update to latest upstream - 24.2.0 See release notes here: http://www.mozilla.org/en-US/firefox/17.0.9/releasenotes/ See http://www.mozilla.org/en/thunderbird/24.0/releasenotes/ for full list of changes. See http://www.mozilla.org/en/thunderbird/24.0/releasenotes/ for full list of changes. Note...

[ANN] Struts 2.3.15.3 GA release available - security fix

The Apache Struts group is pleased to announce that Struts 2.3.15.3 is available as a "General Availability" release.The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed ...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux 6 kernel update

Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 6. This is the fifth regular update. The Red Hat Security Response Team has...

[SECURITY] Fedora 20 Update: bugzilla-4.2.7-1.fc20

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

[SECURITY] Fedora 19 Update: bugzilla-4.2.7-1.fc19

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

Fedora 20 : moodle-2.5.2-1.fc20 (2013-16410)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

Fedora 18 : moodle-2.3.9-1.fc18 (2013-16464)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

[CORE-2013-0809] Sophos Web Protection Appliance Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance Multiple Vulnerabilities Advisory ID: CORE-2013-0809 Advisory URL:...

Sophos Web Protection Appliance Command Injection Vulnerability

Core Security Technologies Advisory - Sophos Web Protection Appliance versions 3.7.9 and earlier, 3.8.1, and 3.8.0 suffer from multiple OS command injection vulnerabilities. Sophos Web Protection Appliance Multiple Vulnerabilities 1. Advisory Information Title: Sophos Web Protection Appliance...

Amazon Linux AMI : mysql (ALAS-2012-44)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section. CVE-2011-2262 , CVE-2012-0075 , CVE-2012-0087 , CVE-2012-0101 , CVE-2012-0102 , CVE-2012-0112 ,...

Amazon Linux AMI : cacti (ALAS-2011-23)

The release notes for Cacti 0.8.7h indicate that two security vulnerabilities were fixed, though no corresponding CVE has been issued. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2011-23...

NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0010 Synopsis: VMware Workstation host privilege escalation vulnerability Issue date: 2013-08-22 Updated on: 2013-08-22 initial...

joomsport pro and std

joomsport, pro 3.1.1 and std 2.0 , Directory Traversal developers release statement Security notes put in product description and put release notes on our site for both products http://joomsport.com/downloads/components.html?lang=en - Here is the link for standard updated release...

[ANN] Struts 2.3.14.1 GA (fast track | security)

The Apache Struts group is pleased to announce that Struts 2.3.14.1 is available as a "General Availability" release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed...

[ANN] Struts 2.3.14.3 GA (fast-track) release available

The Apache Struts group is pleased to announce that Struts 2.3.14.3 is available as a "General Availability" release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed...

Oracle Linux 3 / 4 : pidgin (ELSA-2009-1218)

From Red Hat Security Advisory 2009:1218 : Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program whic...

Fedora 17 : firefox-22.0-1.fc17 / thunderbird-17.0.7-1.fc17 / xulrunner-22.0-1.fc17 (2013-11799)

See http://www.mozilla.org/en-US/firefox/22.0/releasenotes/ and http://www.mozilla.org/en-US/thunderbird/17.0.7/releasenotes/ for list of changes and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...