2259 matches found
Lynis 2.0.0 - Security Auditing Tool for Unix/Linux Systems
Lynis is an open source security auditing tool. Primary goal is to help users with auditing and hardening of Unix and Linux based systems. The software is very flexible and runs on almost every Unix based system including Mac. Even the installation of the software itself is optional! How it works...
[SECURITY] Fedora 21 Update: firefox-35.0.1-3.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 21 Update: xdg-utils-1.1.0-0.35.rc3.fc21
The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop, such as Linux. They are intended to provide a set of defacto standards. This means that: Third party software developers can rely on these xdg-utils for all of their simple...
Matthew Green on the NSA and Compromising Crypto Standards
Dennis Fisher talks with Matthew Green of Johns Hopkins University about the NSA’s “regret” for continuing to support Dual EC after it had been shown to be compromised, the effects of the agency’s influence on crypto standards and the hope for more secure standards in the future. Download:...
[SECURITY] Fedora 20 Update: firefox-35.0-2.fc20
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 21 Update: firefox-35.0-2.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
NSA Official: Support for Compromised Dual EC Algorithm Was 'Regrettable'
In a new article in an academic math journal, the NSA’s former director of research says that the agency’s decision not to withdraw its support of the Dual ECDRBG random number generator after security researchers found weaknesses in it and questioned its provenance was a “regrettable” choice...
SEC Consult SA-20150113-0 :: Multiple critical vulnerabilities in all snom desktop IP phones
SEC Consult Vulnerability Lab Security Advisory 20150113-0 ======================================================================= title: Multiple critical vulnerabilities product: snom IP phones vulnerable version: all firmware versions 8.7.5.15, all firmware branches of all snom desktop IP phon...
[SECURITY] Fedora 21 Update: icecast-2.4.1-1.fc21
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
[SECURITY] Fedora 20 Update: icecast-2.4.1-1.fc20
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
[SECURITY] Fedora 19 Update: icecast-2.4.1-1.fc19
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
POODLE vulnerability comeback, the impact of the TLS secure transmission protocols-vulnerability warning-the black bar safety net
! The Google security team in October found that a high-risk SSL vulnerability POODLE, now it a comeback, this time it is SSL upgrade version-the TLS Protocol. POODLE（Padding Oracle On Downgraded Legacy Encryption）vulnerabilities that had affected the most widely used Encryption Standard-SSL v3. ...
[SECURITY] Fedora 19 Update: firefox-34.0-1.fc19
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 20 Update: firefox-34.0-1.fc20
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
EFF, Privacy Groups Say NIST Crypto Standards Must be Free From Backdoors
The EFF and a long list of civil and privacy groups have sent a letter to NIST, emphasizing the need for the agency to create “a process for establishing secure and resilient encryption standards, free from back doors or other known vulnerabilities.” The letter comes at a time when the agency is ...
libxml2 security update
CentOS Errata and Security Advisory CESA-2014:1885 Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
Moderate: Red Hat Security Advisory: libxml2 security update
Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fro...
Sql injection
Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for 1 import and 2 export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI...
CVE-2014-0228
Apache Hive before 0.13.1, when in SQL standards based authorization mode, does not properly check the file permissions for 1 import and 2 export statements, which allows remote authenticated users to obtain sensitive information via a crafted URI...