Oracle Linux 5 : wget (ELSA-2009-1549)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1549 advisory. 1.11.4-3 - add fix for CVE-2009-3490, incorrect verification of SSL certificate with NUL in name Tenable has extracted the preceding description block directly...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2011-2024)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2024 advisory. - inetdiag: fix inetdiagbcaudit Eric Dumazet CVE-2011-2213 - net gre: fix netns vs proto registration ordering CVE-2011-1767 - net tunnels: fix netns v...

Oracle Linux 5 : boost (ELSA-2012-0305)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0305 advisory. 1.33.1-15 - Fix bugs in parsing invalid regexps - Resolves: 766755 1.33.1-14 - Delete leftover .orig files after patches are successfully applied...

Oracle Linux 6 : mesa (ELSA-2013-0897)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0897 advisory. - CVE-2013-1872: Updated patch with testing from upstream 963063 - CVE-2013-1872: Updated patch from upstream 963063 - CVE-2013-1872: Updated patch...

Oracle Linux 5 : krb5 (ELSA-2010-0926)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0926 advisory. 1.6.1-36.el55.6 - incorporate candidate patch for checksum acceptance issues from MITKRB5-SA-2010-007 CVE-2010-1323, 652307 Tenable has extracted the preceding...

Oracle Linux 4 : thunderbird (ELSA-2008-0616)

From Red Hat Security Advisory 2008:0616 : Updated thunderbird packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbi...

Oracle Linux 6 : 389-ds-base (ELSA-2013-0742)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0742 advisory. 1.2.11.15-14 - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so ticket 627 - Resolves: Bug 929114 - cleanAllRUV task...

Oracle Linux 5 : openldap (ELSA-2010-0542)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0542 advisory. 2.3.43-12.1 - fixed segfault issues in modrdn 606375 - added patch handling null char in TLS to compat package 606375, patch backported by Jan Vcelak...

Oracle Linux 5 : firefox (ELSA-2008-0597)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0597 advisory. devhelp: 0.12-18 - Rebuild against xulrunner firefox: 3.0.1-1.0.1.el5 - Replaced the RedHat prefs and bookmarks with Oracle prefs and bookmarks - Add...

Oracle Linux 5 : cups (ELSA-2008-0498)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0498 advisory. 1.2.4-11.18:.1 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790. Tenable has extracted the preceding description bloc...

Oracle Linux 5 : xen (ELSA-2013-0599)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0599 advisory. 3.0.3-142.el59.2 - e1000: discard packets that are too long if !SBP and !LPE rhbz 910843 - e1000: discard oversized packets based on SBP|LPE rhbz 910843 Tenable...

I've only gone and done a blog

I've been promising myself I'd start a blog for about 100 years now, but it's finally here! I decided to build everything from scratch to force myself to learn Vagrant, Puppet and other general sysops stuff that was on my "to explore" list. This was dumb in terms of how long it took me to get...

Vobfus Worm, Beebone Trojan Create Malware Infection Loop

It’s often difficult to say what came first. This is certainly the case when it comes to recent interactions between the Vobfus worm and Beebone Trojan families. Microsoft’s Malware Protection Center observed an infection cycle in the wild where Vobfus variants download Beebone variants that in...

CVE-2013-0521: IBM Sterling External Authentication Server self-signed certificate

IBM Sterling External Authentication Server is affected by CVE-2013-0521 due to the Webstart GUI being signed with a self-signed certificate, causing browsers to not recognize authenticity and potentially enabling attacks via untrusted code execution. The IBM bulletin lists affected SEAS versions...

Beta Bot Trojan Emerges as New Type of Banking Malware

A new strain of banking malware, Beta Bot, has been refined over the last few months to target ecommerce and comes complete with an array of features to help prevent it from being caught by usual security measures. According to research conducted by RSA Security’s Limor Kessem, the bot started ou...

Privacy in the Age of Ubiquitous Computing

REDMOND, Wash.–If one were to draw up a list of the most challenging jobs in the technology industry, chief privacy officer at Microsoft likely would be pretty near the top of it. For a company with the size and scope of Microsoft, the volume of potential privacy issues is nearly endless, and if...

Google bans Facebook and other self updating Android apps

Google just released a new Play Store version 4.0.27 that, contains only very minor tweaks and Google has changed the rules of its Google Play Store to put an end to the practice of developers updating their apps through their own means rather than the official Google Play channel. Shortly before...

Fedora 18 : phpMyAdmin-3.5.8-1.fc18 (2013-5620)

phpMyAdmin 3.5.8.0 2013-04-08 =============================== - bug MariaDB reported as MySQL - bug Incorrect header for Safari 6.0 - bug Attempt to open trigger for edit gives NULL - change Use HTML5 DOCTYPE - security Self-XSS on GIS visualisation page, reported by Janek Vind - bug Incorrect...

Fedora 19 : phpMyAdmin-3.5.8-1.fc19 (2013-5604)

phpMyAdmin 3.5.8.0 2013-04-08 =============================== - bug MariaDB reported as MySQL - bug Incorrect header for Safari 6.0 - bug Attempt to open trigger for edit gives NULL - change Use HTML5 DOCTYPE - security Self-XSS on GIS visualisation page, reported by Janek Vind - bug Incorrect...

Tallinn Manual Interprets International Law in Cyberwar Context

When nations eventually adopt ground rules for conflict in cyberspace as they apply in an actual kinetic war, the Tallinn Manual on the International Law Applicable to Cyber Warfare, is likely to be their key reference material in doing so. The Tallinn Manual, officially released late last week, ...