Upgrade Tomcat to latest minor version

See http://www.cvedetails.com/cve/CVE-2011-4084/. We're shipping 6.0.32 at the moment...

Fedora 15 : pam-1.1.5-1.fc15 (2011-16365)

Low impact security update from upstream. Only minor and safe changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings

Asterisk Project Security Advisory - AST-2011-013 Product Asterisk Summary Possible remote enumeration of SIP endpoints with differing NAT settings Nature of Advisory Unauthorized data disclosure Susceptibility Remote unauthenticated sessions Severity Minor Exploits Known Yes Reported On 2011-07-...

Fedora 15 : cgit-0.9.0.2-2.fc15 (2011-9589)

This update fixes a potential XSS vulnerability. A malicious user would need push access to the git server in order to exploit this issue. Refer to the cgit mailing list for : Numerous minor bugs are also fixed. For details, refer to the upstream release announcements for 0.9.0.1 and 0.9.0.2...

Linux kernel 2.6.38.6 ( stable) has been released !

Linux kernel 2.6.38.6 stable has been released ! The latest -Stable kernel has been raised again after Greg released a new version : 2.6.38.6. This is a maintenance update, so no new feature are included, only bug fixes and minor changes. Even though Greg urges users to upgrade to this version,...

SuSE 11 / 11.1 Security Update : postgresql (SAT Patch Numbers 2457 / 2458)

This update of postgresql fixes several minor security vulnerabilities : - Postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. CVE-2010-1975 - The PL/Tcl implementation in postgresql loa...

MDVA-2009:172 : drakxtools

This update fixes several minor issues with draksound: - it fixes starting firefox for tools help bug 29775 - it makes tools aware of the sndctxfi sound driver - it fixes memory detection in harddrake bug 50106 It also enable harddrake not to configure framebuffer and splash removal for OEM...

MDVA-2009:066 : perl-URPM

This update fixes several minor issues with perl-URPM: - it fixes handling of repositories with identical GPG keys same fingerprint but different public keys different emails addresses associated with the key for example Previously, urpmi.addmedia would complain about not being able to import the...

Fedora 13 : mediawiki-1.15.4-54.fc13 (2010-10779)

This update fixes two vulnerabilities in mediawiki CVE-2010-1647 Cross-site scripting XSS vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets CSS strings that are processed as...

Fedora 11 : postgresql-8.3.11-1.fc11 (2010-8723)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at http://www.postgresql.org/docs/8.3/static/release-8-3-11.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 12 : httpd-2.2.15-1.fc12.2 (2010-6055)

The Apache HTTP Server Project is proud to announce the release of version 2.2.15 of the Apache HTTP Server 'httpd'. This version is principally a security and bugfix release. This release fixes two minor security issues and includes a number of bug fixes. See the upstream changes file for furthe...

New Storm Variant Merely a Spambot, Experts Say

The new piece of malware that surfaced this week and has been hailed as a return of the Storm worm, is in fact simply the worm’s original spam engine with some new components wrapped around it, researchers say, and not a rebirth of the botnet itself. Storm was a major botnet threat during its...

CVE-2010-0740

The ssl3getrecord function in ssl/s3pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service crash via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained...

Mandriva Update for virt-manager MDVA-2010:029 (virt-manager)

Check for the Version of virt-manager OpenVAS Vulnerability Test Mandriva Update for virt-manager MDVA-2010:029 virt-manager Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for openssh MDVA-2010:026 (openssh)

Check for the Version of openssh OpenVAS Vulnerability Test Mandriva Update for openssh MDVA-2010:026 openssh Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

AST-2009-008: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-008 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | SIP responses expose valid usernames |...

AST-2009-009: Cross-site AJAX request vulnerability

Asterisk Project Security Advisory - AST-2009-009 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Cross-site AJAX request vulnerability |...

Ordinary users by udev vulnerability to elevate to root permissions demo-vulnerability warning-the black bar safety net

Recently exposed by the udev permissions hint of vulnerability, as long as with normal user permissions, you can elevate to root privileges, the experiment a handful, really easy to upgrade. Put the following code saved as test. sh file !/ bin/sh Linux 2.6 bug found by Sebastian Krahmer lame splo...

Linux kernel minor signal handling vulnerability

The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARENT flag, and then letting this new process exit...

MDVA-2009:042 : rpmdrake

This update fixes several minor issues with rpmdrake: - it makes the media manager use scrolling bars when the list of media to remove is too big 46773 - it fixes MandrivaUpdate not updating media anymore on startup since urpmi-6.14.12 upgrade 47209 - MandrivaUpdate now advices to reboot when...