742 matches found
Security release: symfony 1.4.20 released
symfony 1.4.20 has just been released and it contains a security fix. Uli Hecht contacted us a couple of days ago about a security issue in symfony 1.4. The vulnerability allows reading any file stored on the server if it is readable by the web server. Your application is vulnerable if there is a...
Vulnerability in the EntityUserProvider as provided in the Doctrine bridge
More info at https://symfony.com/blog/security-release-symfony-2-0-6...
FreeBSD : Exim -- remote code execution (b0f3ab1f-1f3b-11e2-8fe9-0022156e8794)
This vulnerability affects Exim instances built with DKIM enabled this is the default for FreeBSD Exim port and running verification of DKIM signatures on the incoming mail messages. Phil Penncock reports : This is a SECURITY release, addressing a CRITICAL remote code execution flaw in versions o...
Fedora 18 : bind-9.9.1-10.P3.fc18 (2012-13922)
Update to the 9.9.1-P3 security release. This update also fixes following issues : - bind now uses systemd-rpm macros for starting/restarting of the named daemon. BZ850045 - the NetworkManager dispatcher script contained wrong path to systemcl utility. BZ837173 - named-chroot.service systemd unit...
Slackware: Security Advisory (SSA:2007-344-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 16 : Django-1.3.2-1.fc16 (2012-11416)
security release https://www.djangoproject.com/weblog/2012/jul/30/security-releases-iss ued/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
CakePHP 2.x-2.2.0-RC2 XXE Injection
Exploit title: CakePHP XXE injection Date: 01.07.2012 Software Link: http://www.cakephp.org Vulnerable version: 2.x - 2.2.0-RC2 Tested on: Windows and Linux Author: Pawel Wylecial http://h0wl.pl 1. Background Short description from the project website: "CakePHP makes building web applications...
CakePHP 2.x-2.2.0-RC2 XXE Injection
Exploit for php platform in category web applications Exploit title: CakePHP XXE injection Date: 01.07.2012 Software Link: http://www.cakephp.org Vulnerable version: 2.x - 2.2.0-RC2 Tested on: Windows and Linux Author: Pawel Wylecial http://h0wl.pl 1. Background Short description from the project...
CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection
Exploit title: CakePHP XXE injection Date: 01.07.2012 Software Link: http://www.cakephp.org Vulnerable version: 2.x - 2.2.0-RC2 Tested on: Windows and Linux Author: Pawel Wylecial http://h0wl.pl 1. Background Short description from the project website: "CakePHP makes building web applications...
Fedora 17 : gallery3-3.0.4-1.fc17 (2012-9705)
Gallery 3.0.4 was released with the following release notes : After several extensive internal and external security audits which discovered 22 distinct vulnerabilities, we are releasing Gallery 3.0.4 as a security release. All of the issues require that someone with malicious intent either have ...
Fedora 15 : asterisk-1.8.12.2-1.fc15 (2012-8685)
The Asterisk Development Team has announced the release of Asterisk 1.8.12.2. This release is available for immediate download at http://downloads.asterisk.org/pub/telephony/asterisk The release of Asterisk 1.8.12.2 resolves an issue reported by the community and would have not been possible...
Security Release: symfony 1.4.18 released
symfony 1.4.18 has just been released. Read the post carefully as this version fixes a security vulnerability. Dmitri Groutso contacted us a couple of days ago about a possible security issue in the session code: "The regenerate method as implemented by database backed session classes do not...
Fedora 17 : asterisk-10.3.1-1.fc17 (2012-6704)
The Asterisk Development Team has announced security releases for Asterisk 1.6.2, 1.8, and 10. The available security releases are released as versions 1.6.2.24, 1.8.11.1, and 10.3.1. These releases are available for immediate download at...
samba and samba3x security update
3.5.10-116 - Security Release, fixes CVE-2012-2111 - resolves: 815688...
samba3x security update
3.5.10-0.108 - Security Release, fixes CVE-2012-1182 - resolves: 804650...
samba security update
3.5.10-115 - Security Release, fixes CVE-2012-1182 - resolves: 804644...
[ANNOUNCE] Apache Traffic Server releases for security incident CVE-2012-0256
Everyone, Below is our announcement for the security issue reported to us from Codenomicon, via CERT-FI. All previous versions of Apache Traffic Server are vulnerable, and we urge users to upgrade to either v3.0.4 or v3.1.3 immediately. Both releases are available from our download site at...
Routes behind a firewall are accessible even when not logged in
More info at https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released...