(Nov 4) Libav could be made to crash or run programs as your login if it opened aspecially crafted file.
Debian: 2792-1: wireshark: Multiple vulnerabilities
(Nov 4) Multiple vulnerabilities were discovered in the dissectors for IEEE 802.15.4, NBAP, SIP and TCP, which could result in denial of service. The oldstable distribution (squeeze) is only affected by CVE-2013-6340. [More…]
Red Hat: 2013:1500-01: gc: Moderate Advisory
(Nov 4) Updated gc packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate [More…]
11/5/2013
Houston, TX –
cPanel, Inc. is thrilled to release cPanel & WHM software version 11.40, which is now available in the RELEASE tier.
cPanel & WHM version 11.40 offers support for IPv6 and 1:1 NAT, an API Shell, and more.
IPv6 Support
cPanel & WHM is now IPv6-enabled with dual-stack support, allowing customers to add IPv6 or IPv4 to any account. This feature prepares our customers for future demand.
1:1 NAT Support
cPanel & WHM version 11.40 provides 1:1 NAT, giving customers the ability to support a broader range of hosting environments.
API Shell
In 11.40, cPanel & WHM includes an API Shell, enabling customers to run and troubleshoot API calls interactively through the cPanel & WHM user interfaces. This feature helps our customers better understand API calls.
Detailed information on all cPanel & WHM version 11.40 features can be found at http://docs.cpanel.net. An overview of the latest features and benefits is also available at http://releases.cpanel.net.
To ensure that you receive up-to-date product news from cPanel, we encourage you to subscribe to the “Security Advisories and Product Release Announcements” mailing list here: http://cpanel.net/mailing-lists.
Debian: 2791-1: tryton-client: missing input sanitization
(Nov 4) Cedric Krier discovered that the Tryton client does not sanitize the file extension supplied by the server when processing reports. As a result, a malicious server could send a report with a crafted file extension that causes the client to write any local file to which the [More…]