[SECURITY] Fedora 18 Update: kdeutils-4.10.4-1.fc18

Kdeutils metapackage, to ease migration to split applications...

[SECURITY] Fedora 18 Update: kdegraphics-4.10.4-1.fc18

Kdegraphics metapackage, to ease migration to split applications...

[SECURITY] Fedora 18 Update: kdeedu-4.10.4-1.fc18

kdeedu metapackage, to ease migration to split applications...

[SECURITY] Fedora 18 Update: kdemultimedia-4.10.4-1.fc18

Kdemultimedia metapackage, to ease migration to split applications...

[SECURITY] Fedora 18 Update: kdebindings-4.10.4-1.fc18

Kdebindings metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdemultimedia-4.10.4-1.fc19

Kdemultimedia metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdeutils-4.10.4-1.fc19

Kdeutils metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdebindings-4.10.4-1.fc19

Kdebindings metapackage, to ease migration to split applications...

[SECURITY] Fedora 19 Update: kdeaccessibility-4.10.4-1.fc19

Kdeaccessibility metapackage, to ease migration to split applications...

Debian Security Advisory DSA 2696-1 (otrs2 - privilege escalation)

A vulnerability has been discovered in the Open Ticket Request System, which can be exploited by malicious users to disclose potentially sensitive information. An attacker with a valid agent login could manipulate URLs in the ticket split mechanism to see contents of tickets they are not permitte...

Debian: Security Advisory (DSA-2696-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2777

sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling...

Input validation

sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the ttytickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard...

Debian DSA-2600-1 : cups - privilege escalation

Jann Horn discovered that users of the CUPS printing system who are part of the lpadmin group could modify several configuration parameters with security impact. Specifically, this allows an attacker to read or write arbitrary files as root which can be used to elevate privileges. This update...

CVE-2012-6037

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are not properly handled in error messages in the 1...

UBUNTU-CVE-2012-3421

The pduread function in pdu.c in libpcp in Performance Co-Pilot PCP before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service pmcd hang by sending individual bytes of a PDU separately, related to an "event-driven programming flaw."...

CVE-2012-3455

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

kernel: ext4: ext4_ext_insert_extent() kernel oops

fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting, which allows local users to cause a denial of service system crash via vectors involving ext4 umount and mount operations...

CVE-2011-5063

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weak...

DHS Names Weatherford as Deputy Under Secretary for Cybersecurity

Department of Homeland Security DHS Secretary Janet Napolitano appointed Mark Weatherford today as the National Protection and Programs Directorate’s NPPD new Deputy Under Secretary for Cybersecurity, according to a press release on the DHS’ site. The role was created by the Directorate in...