CVE-2012-3479

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...

Cisco Scientific Atlanta D20 and D30 Based Cable Modem Cross-Site Scripting Vulnerability

Cisco Scientific Atlanta cable modems D20 and D30 based products contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient sanitization of user-supplied input to the web wizard setup web page. An...

RHEL 4 : redhat-release (EOL Notice) (RHSA-2012:0073)

This is the 30 day notification of the End Of Life plans for Red Hat Enterprise Linux 4. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the 7 year life cycle of Red Hat Enterprise Linux 4 will end on February 29, 2012 and your subscription services for that version will...

RHEL 4 : redhat-release (EOL Notice) (RHSA-2011:1506)

This is the 3-month notification of the End Of Life plans for Red Hat Enterprise Linux 4. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 4 will end on February 29, 2012. After this date, Red Hat will discontinue the...

RHEL 4 : redhat-release (EOL Notice) (RHSA-2011:0219)

This is the 1-year notification of the End Of Life plans for Red Hat Enterprise Linux 4. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 4 will end on February 29, 2012. After this date, Red Hat will discontinue the...

Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability

============================================================================== Joomla! 1.0.x 1.0.15 | Cross Site Scripting XSS Vulnerability ============================================================================== 1. OVERVIEW The Joomla! 1.0.x series are currently vulnerable to Cross Site...

RHEL 3 / 4 : redhat-release (EOL Notice) (RHSA-2011:0001)

This is the End Of Life notification for RHN Satellite Server 4. On December 31st, 2010, per the life cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here :...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0734)

This is the 1-month notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0576)

This is the 3-month notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...

Bugzilla: Multiple vulnerabilities

Background Bugzilla is a bug tracking system from the Mozilla project. Description Multiple vulnerabilities have been reported in Bugzilla. Please review the CVE identifiers referenced below for details. Impact A remote attacker might be able to disclose local files, bug information, passwords, a...

RHEL 2.1 : redhat-release (EOL Notice) (RHSA-2009:1076)

This is the End Of Life notification for Red Hat Enterprise Linux 2.1. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the 7 year life cycle of Red Hat Enterprise Linux 2.1 has ended. Red Hat has discontinued the technical support services, bug fix, enhancement, and securit...

Solaris 9 (x86) : 113988-07

SunOS 5.9x86: libc Patch. Date this patch was last updated by Sun : Jan/26/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (x86) : 119671-01

Sun StorEdge EBS 7.1x86: Product Patch. Date this patch was last updated by Sun : Aug/16/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SUSE: Security Advisory for Sun Java 5 and 6 (SUSE-SA:2009:016)

The remote host is missing updates announced in advisory SUSE-SA:2009:016. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Sun Java J2SE 1.4.2 < Update 18 Multiple Vulnerabilities

The version of Sun Java Runtime Environment JRE J2SE 1.4.2 installed on the remote host is affected by multiple security issues : - A buffer overflow vulnerability in font processing module of the JRE could allow an untrusted applet/application to elevate its privilege to read, write and execute...

RHEL 2.1 : redhat-release (EOL Notice) (RHSA-2008:0521)

This is the 1-year notification of the End Of Life plans for Red Hat Enterprise Linux 2.1. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the 7 year life cycle of Red Hat Enterprise Linux 2.1 will end on May 31, 2009. After this date, Red Hat will discontinue the technical...

[slackware-security] php

New php-4.4.8 packages are available for Slackware 10.2 and 11.0 to fix security issues. More details about the issues may be found here: http://bugs.php.net/43010 Here are the details from the Slackware 11.0 ChangeLog: patches/packages/php-4.4.8-i486-1slack11.0.tgz: Upgraded to php-4.4.8. This i...

PostgreSQL 2007-01-07 Cumulative Security Release

Today the PostgreSQL Global Development Group is releasing updated versions which patch five security vulnerabilities. These releases update all current PostgreSQL versions, including 8.2, 8.1, 8.0, 7.4 and 7.3. They are considered CRITICAL and PostgreSQL DBAs and sysadmins should install the...

BIND 8 EOL and BIND 8 DNS Cache Poisoning &#40;Amit Klein, Trusteer&#41;

BIND 8 EOL and BIND 8 DNS Cache Poisoning Note: this is a different attack from BIND 9 DNS cache poisoning. I discovered a new weakness in BIND 8 DNS server which enables "DNS Forgery Pharming". An attacker can remotely poison the cache of any BIND 8 caching DNS server and force users who use thi...

Slackware 11.0 / 12.0 : firefox (SSA:2007-213-01)

New mozilla-firefox packages are available for Slackware 11.0 and 12.0 to fix security issues. Note that Firefox 1.5.x has reached its EOL end of life and is no longer being updated by mozilla.com. Users of Firefox 1.5.x are encouraged to upgrade to Firefox 2.x. Since we use the official Firefox...