Archive for January 14th, 2014
Ubuntu: 2079-1: OpenSSL vulnerabilities
(Jan 9) Several security issues were fixed in OpenSSL.
Ubuntu: 2080-1: Memcached vulnerabilities
(Jan 13) Several security issues were fixed in Memcached.
Red Hat: 2014:0018-01: libXfont: Important Advisory
(Jan 10) Updated libXfont packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having [More…]
Debian: 2841-1: movabletype-opensource: cross-site scripting
(Jan 11) A cross-site scripting vulnerability was discovered in the rich text editor of the Movable Type blogging engine. For the oldstable distribution (squeeze), this problem has been fixed in [More…]
Debian: 2842-1: libspring-java: denial of service
(Jan 13) Alvaro Munoz discovered a XML External Entity (XXE) injection in the Spring Framework which can be used for conducting CSRF and DoS attacks on other sites. [More…]