kernel security and bug fix update

2.6.32-696.3.1.OL6 - Update genkey bug 25599697 2.6.32-696.3.1 - netdrv be2net: Fix endian issue in logical link config command Ivan Vecera 1442979 1436527 - scsi lpfc: update for r 11.0.0.6 Maurizio Lombardi 1439636 1429881 - scsi lpfc: The lpfc driver does not issue RFFID and RFTID in the corre...

openSUSE: Security Advisory for kernel (openSUSE-SU-2016:3085-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-1438)

The openSUSE 14.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. The...

Threat Outbreak Alert RuleID23479: Email Messages Distributing Malicious Software on June 16, 2016

Medium Alert ID: 46723 First Published: 2016 June 16 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23479 may contain the following files: Name | Siz...

Judge Tosses Evidence Gathered by FBI's Tor Exploit

The FBI’s refusal to share details about a network investigative technique it used to gather evidence against a Vancouver teacher charged with possession of child pornography has forced a federal judge’s hand to exclude the evidence from trial. The NIT used by the FBI to hack the Playpen website ...

Google Wins Epic Java Copyright Case Against Oracle

Google has finally won six-year long $9-billion legal battle with Oracle over the use of Java APIs in Android. Oracle filed its lawsuit against Google in 2010, claiming that the company illegally used 11,500 lines of Java code in its Android operating system, violating copyrights owned by Oracle...

SUSE-SU-2016:1250-1 Security update for java-1_7_0-openjdk

This update for java-170-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency bsc976340. - CVE-2016-0687: Better byte behavior bsc976340. - CVE-2016-0695: Make DSA more fair bsc976340. - CVE-2016-3425: Better buffering o...

Strawberry Shortcake Food Fair - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Strawberry Shortcake Food Fair published at the 'play' market has multiple vulnerabilities...

Baby Hazel Carnival Fair - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Baby Hazel Carnival Fair published at the 'play' market has multiple vulnerabilities...

Car Hacking, Mobile Jailbreaking Among DCMA Exemptions Granted

Car hackers and jailbreakers today apparently got a green light from the Librarian of Congress David Mao to tinker away. The Library of Congress’ triennial exemptions to the anti-circumvention rules within the Digital Copyright Millennium Act DCMA were released today, and among the exemptions to...

TYPO3 Job Fair Arbitrary File Upload Vulnerability

TYPO3 is a free and open source content management system, Job Fair is a marketplace work extension plugin based on Extbase and Fluid. An arbitrary file upload vulnerability exists in TYPO3 Job Fair, which allows remote attackers to exploit the vulnerability to submit a special file and execute i...

CVE-2015-4606

Unrestricted file upload vulnerability in the Job Fair jobfair extension before 1.0.1 for TYPO3, when using Apache with modmime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension...

Unrestricted file upload

Unrestricted file upload vulnerability in the Job Fair jobfair extension before 1.0.1 for TYPO3, when using Apache with modmime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension...

CVE-2015-4606

TYPO3 Job Fair (extension: jobfair) for TYPO3 is vulnerable to unrestricted file upload in versions before 1.0.1 when used with Apache and mod_mime. An attacker can upload a file with an executable extension and access it directly in the extension upload folder to execute arbitrary code, enabling...

CVE-2015-4606

Unrestricted file upload vulnerability in the Job Fair jobfair extension before 1.0.1 for TYPO3, when using Apache with modmime, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the extension...

Arbitrary Code Execution in extension Job Fair (jobfair)

It has been discovered that the extension "Job Fair" jobfair is susceptible to Arbitrary Code Execution Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.0 and below Vulnerability Type:...

Net Neutrality Wins — FCC votes to Protect the Internet

The Federal Communications Commission FCC on Thursday approved its strongest Net Neutrality Plan ever, setting new rules to keep broadband Internet in the United States "Fair, Fast and Open." Net Neutrality is simply the Internet Freedom — Free and Open Internet. It is the principle that Internet...

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ GNU/Gallery = 1.1.1.0 admin.php Local File Inclusion Vulnerability +==-- --==+================================================================================+==--...

Science Fair In A Box - SQLi & XSS Vulnerability

No description provided by source...

NSA Whistleblower Snowden on PRISM, surveillance, privacy

NSA whistleblower Edward Snowden said a “continuing litany of lies” from senior U.S. leaders prompted his public uncovering of widespread surveillance of Americans’ phone calls and alleged data sharing between large technology companies and the government. In a two-hour online question-and-answer...