New Metasploit 3.6 Targets Security Compliance !

Security vulnerability testing is getting a boost this week with the release of Metasploit 3.6. Metasploit Pro, the commercial version of the product, now includes new PCI compliance reporting capabilities. There is also a new Project Activity Report, which helps organization manage and track...

firefox security and bug fix update

firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3 - Update to build2 3.6.14-2 - Update to 3.6.14 xulrunner: 1.9.2.14-3.0.1.el60 - Added xulrunner-oracle-default-prefs.js and removed the corresponding...

VERA v0.3 - Visualizing Executables for Reversing and Analysis tool !

"VERA is a Visualizing Executables for Reversing and Analysis tool. It is a tool for reverse engineering Windows executables. It is used in conjunction with the Ether framework to generate visualizations to help with the RE process." This is the official change log: Added processing of trace file...

SourceForge Detects Targeted Attack, Resets Millions of Passwords !

Last week, accessible antecedent computer application development and administration ability SourceForge the ambition of a directed attack. Once the advance was detected, the aggregation bound bottom ward the impacted hosts to abate the accident of accretion to added hosts. Thus, this prevented...

USN-1024-2: OpenJDK regression

USN-1024-1 fixed vulnerabilities in OpenJDK. Some of the additional backported improvements could interfere with the compilation of certain Java software. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that certain system property...

Experts Warn of Growing Data Theft as Government Lags in Cybersecurity

It will take several more years for the government to fully install high-tech systems to block computer intrusions. This prolonged timeline enables criminals to become more adept at stealing sensitive data, experts say. As the Department of Homeland Security DHS methodically works to secure the...

SuSE 11 Security Update : clamav (SAT Patch Number 2298)

Specially crafted CAB archives could crash clamav CVE-2010-1311 or bypass virus detection CVE-2010-0098. clamav has been updated to version 0.96 which fixes those issues. Citing freshmeat.net : This Release introduces new malware detection mechanisms and other significant improvements to the scan...

Arachni v0.2.1 - penetration testers Framework - latest release

"Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications." This is the official change log: Major performance improvements Major system refactoring and code clean-up Major module API...

Fedora 12 : poppler-0.12.4-5.fc12 (2010-15981)

Thu Oct 7 2010 Marek Kasik - 0.12.4-5 - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add poppler-0.12.4-CVE-2010-3704.patch Fix crash in broken pdf code - 0.12.4-4 - Accept 4-digit values in ToUnicode CMaps...

SuSE 10 Security Update : clamav (ZYPP Patch Number 6990)

Specially crafted CAB archives could crash clamav CVE-2010-1311 or bypass virus detection CVE-2010-0098. clamav has been updated to version 0.96 which fixes those issues. Citing freshmeat.net : This Release introduces new malware detection mechanisms and other significant improvements to the scan...

MDVA-2009:123 : kde4

Mandriva Linux 2009 Spring was released with KDE4 version 4.2.2. This update upgrades KDE4 in Mandriva Linux 2009 Spring to version 4.2.4, which brings many bugfixes and overall improvements. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

MDVA-2009:084 : x11-driver-video-intel

The intel graphics driver shipped in 2009.1 was the 2.7.0 version which has turned out to be somewhat unstable on some systems this was still more stable overall than earlier versions, but hardly any consolation to those having problems!. This updates the package to the 2.7.1 version recently...

500page.jsp Improvements

Some further improvements to the 500page.jsp: The following should not appear if there is no stack trace: quote Cause Stack Trace:hide quote \ \ Stack trace should not appear if the user triggering the page is anonymous user Changes to this sentence below: quote"Your Confluence administrator can...

500page.jsp Improvements

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-19601. panel Some further improvements to the 500page.jsp: The following should not appear if there is no stack trace: quote Cau...

SuSE9 Security Update : clamav (YOU Patch Number 12610)

Specially crafted CAB archives could crash clamav CVE-2010-1311 or bypass virus detection CVE-2010-0098. clamav has been updated to version 0.96 which fixes those issues. Citing freshmeat.net : This Release introduces new malware detection mechanisms and other significant improvements to the scan...

openSUSE Security Update : clamav (openSUSE-SU-2010:0149-1)

clamav has been updated to version 0.96. Citing freshmeat.net : This Release introduces new malware detection mechanisms and other significant improvements to the scan engine. Key features include the bytecode interpreter, heuristic improvements, signature improvements, support for new archives,...

Mandriva Update for slib MDVA-2010:091 (slib)

Check for the Version of slib OpenVAS Vulnerability Test Mandriva Update for slib MDVA-2010:091 slib Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for nufw MDVA-2010:094 (nufw)

Check for the Version of nufw OpenVAS Vulnerability Test Mandriva Update for nufw MDVA-2010:094 nufw Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Adobe Confirms 'Coordinated, Sophisticated' Cyber Attack

In an attack described as “sophisticated” and “coordinated,” Adobe said its corporate network systems were breached by hackers. The company said the attack also affected other unnamed companies. Adobe did not provide any other details except to say it was aware of the breach on January 2, 2010...

PHP 5.2.12 Release Announcement

PHP 5.2.12 Release Announcement The PHP development team would like to announce the immediate availability of PHP 5.2.12. This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to...