(Jun 18) LibRaw could be made to crash or run programs as your login if it opened aspecially crafted file.
Comment
(Jun 18) Puppet could be made to run programs if it received specially craftednetwork traffic.
6/18/2013
Houston, TX-
cPanel, Inc. announces the impending release of cPanel & WHM software version 11.38.
cPanel & WHM software release 11.38, is anticipated to move to the STABLE tier the week of June 24, 2013. This release offers significant improvements to SSL Management and Backups. It also provides enhancements to jail shell, email auto configuration, and more.
Included in 11.38:
Improved SSL Management
The improved SSL management system offers a number of enhancements; support for UCC certificates, SNI (Server Name Indication), and enhanced support for Wildcard SSL certificates. This allows cPanel users to host multiple SSL websites on the same account. cPanel & WHM software users will notice changes to the user interfaces that simplify installing, managing the various SSL certificates, keys, and signing requests associated with their domains.
System and Account Backups
cPanel introduces a new backup system with software release 11.38. Among the changes are the ability to store backups in multiple locations, reduction in the time needed to perform a full backup, and a complete set of functionality for automating backups.
Backup restoration is also enhanced. A new queuing system allows system administrators to perform other operations within cPanel & WHM software while restorations occur.
Other notable changes include:
* Ability to configure the host used by email autodiscovery, and auto configuration
* Improved email tracking ability by ensuring the From header matches the mail sender
* Use of a single template system for customizing the Apache configuration
* Changes to jail shell, mod_ruid2, and more
Detailed information on all 11.38 features can be found at http://docs.cpanel.net/twiki/bin/view/AllDocumentation/1138ReleaseNotes.For an overview of the latest features available in 11.38, visit http://releases.wp.stage.cpanel.net/category/releases/11-38/.
(Jun 17) Multiple vulnerabilities were discovered in the dissectors for CAPWAP, GMR-1 BCCH, PPP, NBAP, RDP, HTTP, DCP ETSI and in the Ixia IxVeriWave file parser, which could result in denial of service or the execution of arbitrary code. [More…]