Threat Outbreak Alert: Fake Photo Attachment Email Messages on January 16, 2014

Medium Alert ID: 32472 First Published: 2014 January 16 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Fund Transfer Notification Email Messages on January 14, 2014

Medium Alert ID: 32432 First Published: 2014 January 15 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fund transfer notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Financial Tips Attachment Email Messages on January 11, 2014

Medium Alert ID: 32407 First Published: 2014 January 13 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a financial tips attachment for the recipient. The text in the email message attempts to convince the recipien...

Design/Logic Flaw

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to signatures...

UBUNTU-CVE-2013-4517

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to signatures...

CVE-2013-4517

CVE-2013-4517: Apache Santuario XML Security for Java before 1.5.6 is vulnerable to a denial of service via crafted DTDs in Transform processing. IBM advisories reference this CVE affecting IBM InfoSphere Information Server (11.7) and note remediation by upgrading to 11.7.1.0 or 11.7.1.4 (and rel...

CVE-2013-4517

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service memory consumption via crafted Document Type Definitions DTDs, related to signatures...

Threat Outbreak Alert: Email Messages with Malicious Attachments on January 9, 2014

Medium Alert ID: 32397 First Published: 2014 January 10 15:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment f...

CentOS Update for gnupg CESA-2014:0016 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert: Email Messages with Malicious Link on January 6, 2014

Medium Alert ID: 32330 First Published: 2014 January 8 20:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain links to a file hosted on a compromised or malicious website. The email message may attempt to convince the recipient to...

Moderate: Red Hat Security Advisory: gnupg security update

An updated gnupg package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Threat Outbreak Alert: Email Messages with Malicious Attachments on January 7, 2014

Medium Alert ID: 32338 First Published: 2014 January 7 21:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an image for the recipient. The email message attempts to convince the recipient to open the attachment to view...

MGASA-2014-0002 Updated xml-security package fixes security vulnerability

James Forshaw discovered that Apache XML Security for Java incorrectly validated CanonicalizationMethod parameters. An attacker could use this flaw to spoof XML signatures CVE-2013-2172...

Updated xml-security package fixes security vulnerability

James Forshaw discovered that Apache XML Security for Java incorrectly validated CanonicalizationMethod parameters. An attacker could use this flaw to spoof XML signatures CVE-2013-2172...

Threat Outbreak Alert: Fake Account Bill Statement Email Messages on January 1, 2014

Medium Alert ID: 32309 First Published: 2014 January 3 16:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order receipt notification for the recipient. The text in the email message attempts to convince the recipie...

[Binwalk] Firmware Analysis Tool

Binwalk is a firmware analysis tool designed to assist in the analysis, extraction, and reverse engineering of firmware images and other binary blobs. It is simple to use, fully scriptable, and can be easily extended via custom signatures, extraction rules, and plugin modules. Binwalk supports...

[SECURITY] Fedora 18 Update: gnupg-1.4.16-2.fc18

GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...

[SECURITY] Fedora 19 Update: gnupg-1.4.16-2.fc19

GnuPG GNU Privacy Guard is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with...

Fedora Update for gnupg FEDORA-2013-23678

Check for the Version of gnupg OpenVAS Vulnerability Test Fedora Update for gnupg FEDORA-2013-23678 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[slackware-security] llvm (SSA:2013-350-03)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security llvm SSA:2013-350-03 New llvm packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...