Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-35.1.1.el6uek - futex: Make lookuppistate more robust Thomas Gleixner Orabug: 18918552 CVE-2014-3153 - futex: Always cleanup owner tid in unlockpi Thomas Gleixner Orabug: 18918552 CVE-2014-3153 - futex: Validate atomic acquisition in futexlockpiatomic Thomas Gleixner Orabug:...

UBUNTU-CVE-2014-2580

The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service "scheduling while atomic" error and host crash via a malformed packet, which causes a mutex to be taken when trying to disable...

OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE:...

Malware infected International Atomic Energy Agency Computers

None...

NSA misused PRISM - Spied on Al Jazeera, bugged UN headquarters and used for personal spying

Before NSA said that they has zero tolerance for willful violations of the agency's authorities, but NSA had violated privacy rules on thousands of occasions. According to documents seen by SPIEGEL, Arab news broadcaster Al Jazeera was spied on by the National Security Agency. The US intelligence...

OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE:...

OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE:...

OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE:...

OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE:...

SuSE 11.1 Security Update : libfreebl3 (SAT Patch Number 5138)

This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read : MFSA 2011-34 - update to 3.12.10 - root CA changes - filter certain bogus certs bmo642815 - fix minor memory leaks - other bugfixes - update to...

Atomic Photo Album 1.0.2 SQL Injection / Cross Site Scripting

Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-999...

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities

Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...

Atomic Photo Album 1.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================= Atomic Photo Album 1.0.2 Multiple Vulnerabilities ================================================= Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities...

OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

SuSE 11 Security Update : Linux kernel (SAT Patch Number 1086)

The SUSE Linux Enterprise 11 kernel was updated to fix various bugs and several security issues. It was also updated to the stable release 2.6.27.25. The following security issues were fixed : - A local denial of service problem in the splice2 system call was fixed. CVE-2009-1961 - A crash on r81...

kernel: nfs: fix NFS v4 client handling of MAY_EXEC in nfs_permission

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...

kernel: nfs: fix NFS v4 client handling of MAY_EXEC in nfs_permission

The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...