(May 6) OpenStack Swift would allow unintended access to files over the network.
Archive for May, 2014
After three weeks and more than 9 million downloads of WordPress 3.9, we’re pleased to announce that WordPress 3.9.1 is now available. This maintenance release fixes 34 bugs in 3.9, including numerous fixes for multisite networks, customizing widgets while previewing themes, and the updated visual editor. We’ve also made some improvements to the new audio/video […]
(May 3) Security Report Summary
(May 3) Security Report Summary
(May 6) OpenStack Cinder could be made to expose sensitive information over thenetwork.
(May 6) OpenStack Quantum could be made to expose sensitive information over thenetwork.
(May 7) Updated struts packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having [More…]
In the May 2014 survey we received responses from 975,262,468 sites — 16 million more than last month. Microsoft threatening Apache’s market lead Microsoft gained nine million additional sites this month, increasing its market share by a further 0.37 percentage points. Meanwhile, despite gaining 4.3 million sites, Apache’s market share fell by 0.18 points. Although Apache still […]
(May 5) Security Report Summary
(May 4) Security Report Summary
(May 5) The system could be made to crash or run programs as an administrator.
(May 5) The system could be made to crash or run programs as an administrator.
EasyApache 3.24.18 Released
SUMMARY cPanel, Inc. has released EasyApache 3.24.18 with PHP versions 5.5.12 and 5.4.28. This release addresses the PHP vulnerability CVE-2014-0185 with the fix to a bug in the FPM package. We encourage all PHP users to upgrade to PHP version 5.5.12 or PHP version 5.4.28. AFFECTED VERSIONS All versions of …
Nearly 100 Thai Government websites were hacked and used to serve malware last month.
(May 5) Security Report Summary
(May 5) Security Report Summary
(Apr 30) Several security issues were fixed in OpenJDK 7.
(May 5) OpenSSL could be made to crash if it received specially crafted networktraffic.
Use of the SHA-2 cryptographic signature algorithm has received a significant boost in the wake of the Heartbleed Bug. More than half a million SSL certificates were potentially compromised as a result of the Heartbleed vulnerability — affected certificates require urgent re-issuance and revocation. The good news is that many of the new certificates have been […]
(Apr 30) elfutils could be made to crash or run programs if it processed a speciallycrafted file.
(Apr 30) The Unity lock screen could be bypassed.
(Apr 30) Updated Django packages that fix three security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Moderate [More…]
(Apr 30) Several security issues were fixed in Thunderbird.
(May 1) A malicious source package could write files outside the unpack directory.
(Apr 30) Updated openstack-glance packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having [More…]
(Apr 30) Updated Django packages that fix three security issues are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate [More…]
(Apr 30) Security Report Summary
(May 1) JBIG-KIT could be made to crash or run programs if it processed a speciallycrafted image file.
(May 1) Several security issues were fixed in OpenJDK 6.