[SECURITY] Fedora 16 Update: nut-2.6.3-4.fc16

These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...

[SECURITY] Fedora 15 Update: nut-2.6.3-4.fc15

These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...

pycrypto -- vulnerable ElGamal key generation

Dwayne C. Litzenberger of PyCrypto reports: In the ElGamal schemes for both encryption and signatures, g is supposed to be the generator of the entire Z^p group. However, in PyCrypto 2.5 and earlier, g is more simply the generator of a random sub-group of Z^p. The result is that the signature spa...

Apple Safari Webkit Multiple Vulnerabilities (May 2012) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Twitter Implements Do Not Track

Twitter has implemented the Do Not Track header on its site, giving users the option of telling the site that they do not want to be tracked across other sites on the Web. The implementation is being done through the DNT technology in the Firefox browser. Firefox, like other major browsers, allow...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4186)

This kernel update fixes the following security problems : - The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network amplification between two routers. CVE-2007-2242 The default is that RH0 is disabled now. To...

Liferay Portal 6.0.x < 6.1 - Privilege Escalation

Liferay users can assign themselves to organizations, leading to possible privilege escalation Description: Liferay Portal is an enterprise portal written in Java Due to insufficient permission checking in the updateOrganizations method of UserService any user can assign hem or her self to any...

Senator Seeks More Info On DOJ Location Tracking Practices

Senator Al Franken D-MN is demanding answers to questions about the U.S. Department of Justice DOJ practice of gathering data from wireless providers in order to monitor individuals’ movements using mobile phone location data. Franken released a copy of a letter to Attorney General Eric Holder on...

CVE-2012-0676

WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors...

PT-2012-2782

Name of the Vulnerable Software and Affected Versions Safari versions prior to 5.1.7 Description The issue allows remote attackers to fill in form fields on the pages of arbitrary web sites due to improper tracking of state information during form input processing. Recommendations For versions...

Mac OS X : Apple Safari < 5.1.7 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.1.7. It is, therefore, potentially affected by several issues : - Two unspecified errors exist that can allow malicious sites to perform cross-site scripting attacks. CVE-2011-3046, CVE-2011-3056 - An unspecified...

Safari < 5.1.7 Multiple Vulnerabilities

Binary data 6483.prm...

Several REST interfaces vulnerable to XSRF

Several REST web services are vulnerable to XSRF|https://www.owasp.org/index.php/Cross-SiteRequestForgeryCSRF, allowing malicious web pages to execute them under the context of a logged in users browser. It's understood that JIRA REST interfaces are typically protected against XSRF based on the...

Report: Google Negotiating with FTC over Apple Safari Privacy Breach

Search giant Google is in negotiations with the U.S. Federal Trade Commission FTC over the size of a fine it will pay. This, after the company was found in breach of privacy controls in Apple’s Safari browser earlier this year. According to an article from the Bloomberg news service, an unnamed...

Fedora Update for bugzilla FEDORA-2012-6396

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-6396 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for bugzilla FEDORA-2012-6368

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-6368 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: bugzilla-3.6.9-1.fc15

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

[SECURITY] Fedora 16 Update: bugzilla-4.0.6-1.fc16

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

CVE-2012-4598

creationtimestamp| type| source ---|---|--- 2012-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18805 2012-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18812 2018-05-29 15:50:33+00:00| seen|...

CVE-2012-2133

Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service system crash or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of...