bugtraq mailing list - 2012/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 4	³ 10	⁴ 11	⁵ 10	⁶ 11	⁷	⁸
⁹ 10	¹⁰ 9	¹¹ 11	¹² 13	¹³ 1	¹⁴	¹⁵
¹⁶ 19	¹⁷ 5	¹⁸ 9	¹⁹ 3	²⁰ 8	²¹	²²
²³ 12	²⁴ 3	²⁵ 13	²⁶ 3	²⁷ 4	²⁸	²⁹
³⁰ 14	³¹ 9

Messages by day:

January 2 (4 messages)

[SECURITY] [DSA 2376-2] ipmitool security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2011:198 ] phpmyadmin (security@...driva.com)
[SECURITY] [DSA 2377-1] cyrus-imapd-2.2 security update (Nico Golde <nion@...ian.org>)
[ MDVSA-2012:001 ] fcgi (security@...driva.com)

January 3 (10 messages)

[ MDVSA-2012:002 ] t1lib (security@...driva.com)
BigACE CMS - XSS Vulnerabilities (demonalex@....com)
OpenKM 5.1.7 Privilege Escalation ("Cyrill Brunschwiler" <cyrill.brunschwiler@...c.ch>)
OpenKM 5.1.7 OS Command Execution (XSRF based) ("Cyrill Brunschwiler" <cyrill.brunschwiler@...c.ch>)
Tinyguestbook XSS (tom <tom@...net.com>)
mavili guestbook - SQL Injection and XSS Vulnerabilities (demonalex@....com)
[RT-SA-2012-001] Bugzilla: Cross-Site Scripting in Chart Generator (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[SE-2011-01] Security vulnerabilities in a digital satellite TV platform (Security Explorations <contact@...urity-explorations.com>)
SQL Injection Vulnerability in OpenEMR 4.1.0 (Netsparker Advisories <advisories@...itunasecurity.com>)
Re: PHP Booking Calendar 10e XSS (Henri Salo <henri@...v.fi>)

January 4 (11 messages)

Re: Tinyguestbook XSS (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2378-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
InfoSec Southwest 2012 CFP First-round Speaker Selections ("I\)ruid" <druid@...ghq.org>)
TWSL2012-001: Cross-Site Scripting Vulnerability in Textpattern Content Management System (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: [SE-2011-01] Security vulnerabilities in a digital satellite TV platform (Security Explorations <contact@...urity-explorations.com>)
Google Chrome HTTPS Address Bar Spoofing ("ACROS Security Lists" <lists@...os.si>)
Re: OpenKM 5.1.7 Privilege Escalation (pavila@...nkm.com)
Multiple vulnerabilities in ImpressCMS (advisory@...ridge.ch)
Open Redirection Vulnerability in Orchard 1.3.9 (Netsparker Advisories <advisories@...itunasecurity.com>)
[SECURITY] [DSA 2379-1] krb5 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2380-1] foomatic-filters security update (Florian Weimer <fw@...eb.enyo.de>)

January 5 (10 messages)

[ GLSA 201201-01 ] phpMyAdmin: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
Revised IETF I-D: Advice on IPv6 RA-Guard Implementation (Fernando Gont <fgont@...networks.com>)
HServer webserver - Directory Traversal Vulnerability (demonalex@....com)
NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS ("Research@...Secure" <research@...secure.com>)
NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentica… ("Research@...Secure" <research@...secur…)
SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2 (SEC Consult Vulnerability Lab <research@...-consult.com>)
Ggb Guestbook - XSS Vulnerabilities (demonalex@....com)
VLC media player v1.1.11 (.amr) Local Crash PoC (hapsec@...il.com)
VertrigoServ 2.25 Cross-Site-Scripting vulnerability (security@...oserve.de)
SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities (security@...oserve.de)

January 6 (11 messages)

ZDI-12-001 : HP Managed Printing Administration img_id Multiple Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-002 : HP OpenView NNM ov.dll _OVBuildPath Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-003 : HP OpenView NNM webappmon.exe parameter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-005 : Apple Quicktime RLE BGRA Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-006 : Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ GLSA 201201-02 ] MySQL: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[SECURITY] [DSA 2381-1] squid3 security update (Florian Weimer <fw@...eb.enyo.de>)
IpTools(Tiny TCP/IP server) - WebServer Directory Traversal Vulnerability (demonalex@....com)
IpTools - Rcmd Remote Overflow Vulnerability (demonalex@....com)

January 9 (10 messages)

[SECURITY] [DSA 2382-1] ecryptfs-utils security update (Jonathan Wiltshire <jmw@...ian.org>)
[ GLSA 201201-03 ] Chromium, V8: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[SECURITY] [DSA 2383-1] super security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBPI02728 SSRT100692 rev.3 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default (security-alert@...com)
[security bulletin] HPSBPI02733 SSRT100646 rev.1 - Certain HP LaserJet Printers, Remote Unauthorized Access to Files (security-alert@...com)
[SECURITY] [DSA 2384-1] cacti security update (<@securityfocus.com Luk Claes <luk@...ian.org>>)
Re: [SE-2011-01] Security vulnerabilities in a digital satellite TV platform (Security Explorations <contact@...urity-explorations.com>)
DDIVRT-2011-37 HP JetDirect Device Page Directory Traversal (CVE-2011-4785) (ddivulnalert@...frontline.com)
Simple Mail Server - SMTP Authentication Bypass Vulnerability (demonalex@....com)
AppSec DC 2012 CFP EXTENDED! (AppSec DC <cfp@...secdc.org>)

January 10 (9 messages)

p0f3 release candidate (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Simple Mail Server - SMTP Authentication Bypass Vulnerability (Peter Conrad <conrad@...ano.de>)
Is Your Online Bank Vulnerable To Currency Rounding Attacks? ("ACROS Security Lists" <lists@...os.si>)
[ MDVSA-2012:003 ] apache (security@...driva.com)
ZDI-12-008 : Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoi…)
ZDI-12-009 : Citrix Provisioning Services Stream Service 0x40020000 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-010 : Citrix Provisioning Services Stream Service 0x40020006 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-011 : Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2385-1] pdns security update (Florian Weimer <fw@...eb.enyo.de>)

January 11 (11 messages)

Multiple Cross-Site-Scripting vulnerabilities in x3cms (security@...oserve.de)
VUPEN Security Research - Adobe Acrobat and Reader Image Processing Integer Overflow (APSB12-01) ("VUPEN Security Research" <advisories@...en.com>)
[PT-2011-01] Cross-Site Scripting in Kayako Support Suite (noreply@...ecurity.ru)
[PT-2011-02] PHP code Injection in Kayako Support Suite (noreply@...ecurity.ru)
Multiple XSS in KnowledgeTree Community Edition (advisory@...ridge.ch)
[PT-2011-03] Information disclosure in Kayako Support Suite (noreply@...ecurity.ru)
[PT-2011-03] Information disclosure in Kayako Support Suite (noreply@...ecurity.ru)
[PT-2011-04] Cross-Site Scripting in Kayako Support Suite (noreply@...ecurity.ru)
Secunia Research: NTR ActiveX Control Four Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: NTR ActiveX Control "StopModule()" Input Validation Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 2387-1] simplesamlphp security update (Thijs Kinkhorst <thijs@...ian.org>)

January 12 (13 messages)

[SECURITY] [DSA 2386-1] openttd security update (Luk Claes <luk@...ian.org>)
[security bulletin] HPSBPI02698 SSRT100404 rev.2 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)
GreenBrowser iframe content Double Free Vulnerability (vuln@...c.org.cn)
Office arbitrary ClickOnce application execution vulnerability (Akita Software Security <lists@...tasecurity.nl>)
AthCon 2012 CFP is now OPEN! (Christian Papathanasiou <chris@...con.org>)
Revised IETF I-D: IPv6 Neighbor Discovery, SEND, and IPv6 Fragmentation (Fernando Gont <fgont@...networks.com>)
SafeSEH+SEHOP all-at-once bypass explotation method principles (geinblues@...il.com)
[ MDVSA-2012:004 ] t1lib (security@...driva.com)
ZDI-12-012 : (0Day) McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-013 : HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-016 : (0Day) HP Diagnostics Server magentservice.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

January 13 (1 message)

ME020567: MailEnable webmail cross-site scripting vulnerability CVE-2012-0389 (Henri Salo <henri@...v.fi>)

January 16 (19 messages)

[security bulletin] HPSBST02735 SSRT100516 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Execution of Arbitrary Code (security-alert@...com)
PHP 5.3.8 Multiple vulnerabilities (cxib@...ecurity.com)
BoltWire 3.4.16 Multiple XSS vulnerabilities (sschurtz@...ksecurity.de)
ATutor 2.0.3 Multiple XSS vulnerabilities (sschurtz@...ksecurity.de)
[SECURITY] [DSA 2388-1] t1lib security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2390-1] openssl security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2389-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
[Announcement] ClubHack Mag Issue 24-Jan 2012 Released (abhijeet@...bhack.com)
First-hop security in IPv6 (Fernando Gont <fgont@...networks.com>)
Re: Multiple XSS in KnowledgeTree Community Edition (Henri Salo <henri@...v.fi>)
Family Connections 2.7.2 Multiple XSS (tom <tom@...net.com>)
phpVideoPro Multiple XSS vulnerabilities (sschurtz@...ksecurity.de)
Beehive Forum 101 Multiple XSS vulnerabilities (sschurtz@...ksecurity.de)
(CFP) LACSEC 2012: 7th Network Security Event for Latin America and the Caribbean (Fernando Gont <fgont@...networks.com>)
[Announcement] ClubHack Mag - Call for Articles (abhijeet@...bhack.com)
Re: Multiple XSS in KnowledgeTree Community Edition (advisory@...ridge.ch)
[ MDVSA-2012:005 ] libxml2 (security@...driva.com)
[ MDVSA-2012:006 ] openssl (security@...driva.com)
[ MDVSA-2012:007 ] openssl (security@...driva.com)

January 17 (5 messages)

Re: p0f3 release candidate (Michal Zalewski <lcamtuf@...edump.cx>)
[SECURITY] CVE-2011-3375 Apache Tomcat Information disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2012-0022 Apache Tomcat Denial of Service (Mark Thomas <markt@...che.org>)
pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
ESA-2012-003: EMC SourceOne Web Search Sensitive Information Disclosure Vulnerability. (<Security_Alert@....com>)

January 18 (9 messages)

Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
Reflection Scan: an Off-Path Attack on TCP (Jan Wrobel <wrr@...edbit.org>)
XSS in OneOrZero AIMS (advisory@...ridge.ch)
[ MDVSA-2012:008 ] perl (security@...driva.com)
[ MDVSA-2012:009 ] perl (security@...driva.com)
Cisco Security Advisory: Cisco Digital Media Manager Privilege Escalation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IP Video Phone E20 Default Root Account (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS (InterN0T Advisories <advisories@...ern0t.net>)
Xpra memory disclosure (Antoine Martin <antoine@...afix.co.uk>)

January 19 (3 messages)

[security bulletin] HPSBMU02736 SSRT100699 rev.1 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Una… (security-alert@...com)
Microsoft Anti-XSS Library Bypass (MS12-007) (adic@...ibm.com)
Advisory 01/2012: Suhosin PHP Extension Transparent Cookie Encryption Stack Buffer Overflow (Stefan Esser <stefan.esser@...tioneins.de>)

January 20 (8 messages)

Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
appRain CMF <= 0.1.5 (uploadify.php) Unrestricted File Upload Vulnerability (n0b0d13s@...il.com)
Webcalendar 1.2.4 'location' XSS (tom <tom@...net.com>)
[Suspected Spam] Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
InfoSec Southwest 2012 Open Registration ("I\)ruid" <druid@...ghq.org>)
DC4420 - London DEFCON - 24 January 2012 (Major Malfunction <majormal@...ate-radio.org>)
[ MDVSA-2012:010 ] cacti (security@...driva.com)
[ GLSA 201201-04 ] Logsurfer: Arbitrary code execution (Sean Amoss <ackle@...too.org>)

January 23 (12 messages)

ZDI-12-017 : Oracle Outside In OOXML Relationship Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2391-1] phpmyadmin security update (Thijs Kinkhorst <thijs@...ian.org>)
AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload (pavel@...an.com)
Re: pwgen: non-uniform distribution of passwords (Solar Designer <solar@...nwall.com>)
[Suspected Spam] Bart`s CMS - SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass (ddivulnalert@...frontline.com)
[SECURITY] [DSA 2301-2] rails regression (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2392-1] openssl security update (Florian Weimer <fw@...eb.enyo.de>)
SQL injection in Bigware shop software (rwenzel@...itsecurity.de)
[ GLSA 201201-12 ] Tor: Multiple vulnerabilities (Sean Amoss <ackle@...too.org>)
Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability (n0b0d13s@...il.com)
[ GLSA 201201-13 ] MIT Kerberos 5: Multiple vulnerabilities (Sean Amoss <ackle@...too.org>)

January 24 (3 messages)

[ GLSA 201201-14 ] MIT Kerberos 5 Applications: Multiple vulnerabilities (Sean Amoss <ackle@...too.org>)
NGS00193 Patch Notification: Trend Micro DataArmor and DriveArmor - Restricted Environment breakout, Privilege Escalati… ("Research@...Secure" <research@...secur…)
Only 7 Days Left: SANS AppSec 2012 CFP (SANS AppSec CFP <callforpapers-appsec@...s.org>)

January 25 (13 messages)

TWSL2012-002: Multiple Vulnerabilities in WordPress (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
[security bulletin] HPSBUX02730 SSRT100710 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
[security bulletin] HPSBUX02734 SSRT100729 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access (security-alert@...com)
[security bulletin] HPSBUX02719 SSRT100658 rev.4 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02729 SSRT100687 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
NGS00118 Patch Notification: Symantec PCAnywhere Remote Code Execution as SYSTEM ("Research@...Secure" <research@...secure.com>)
NGS00117 Patch Notification: Symantec PCAnywhere Local Privilege Escalation ("Research@...Secure" <research@...secure.com>)
Multiple vulnerabilities in OSclass (advisory@...ridge.ch)
CSRF (Cross-Site Request Forgery) in DClassifieds (advisory@...ridge.ch)
D-Link DIR-601 TFTP Directory Traversal Vulnerability (robkraus@...tionary.com)
[SECURITY] [DSA-2393-1] bip security update (dann frazier <dannf@...ian.org>)
NX Web Companion Spoofing Arbitrary Code Execution Vulnerability (otr@...kcay.de)
ZDI-12-018 : Symantec PCAnywhere awhost32 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

January 26 (3 messages)

Cisco Security Advisory: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...c…)
ESA-2012-005: EMC NetWorker buffer overflow vulnerability (<Security_Alert@....com>)
ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision (<Security_Alert@....com>)

January 27 (4 messages)

[SECURITY] [DSA 2394-1] libxml2 security update (Luciano Bello <luciano@...ian.org>)
[ GLSA 201201-15 ] ktsuss: Privilege escalation (Sean Amoss <ackle@...too.org>)
[HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon (Hafez Kamal <aphesz@...kinthebox.org>)
AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS (Thomas Quinot <quinot@...core.com>)

January 30 (14 messages)

[SECURITY] [DSA 2395-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2396-1] qemu-kvm security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 201201-16 ] X.Org X Server/X Keyboard Configuration Database: Screen lock bypass (Alex Legler <a3li@...too.org>)
[ GLSA 201201-17 ] Chromium: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
eBank IT Online Banking - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
FAA US Academy (AFS) - Auth Bypass Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
[SECURITY] [DSA 2397-1] icu security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2012:011 ] openssl (security@...driva.com)
Mibew messenger multiple XSS (Filippo Cavallarin <filippo.cavallarin@...seq.it>)
Multiple vulnerabilities in postfixadmin (Filippo Cavallarin <filippo.cavallarin@...seq.it>)
Multiple vulnerabilities in OSClass (Filippo Cavallarin <filippo.cavallarin@...seq.it>)
[ GLSA 201201-18 ] bip: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 201201-19 ] Adobe Reader: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
Advisory: sudo 1.8 Format String Vulnerability (joernchen of Phenoelit <joernchen@...noelit.de>)

January 31 (9 messages)

ZDI-12-019 : IBM SPSS mraboutb.dll ActiveX Control SetLicenseInfoEx Method Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.c…)
[SECURITY] [DSA 2398-1] curl security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMU02738 SSRT100748 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote Unauthorized Acces… (security-alert@...com)
[security bulletin] HPSBUX02737 SSRT100747 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02697 SSRT100591 rev.2 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
[security bulletin] HPSBUX02724 SSRT100650 rev.3 - HP-UX Running System Administration Manager (SAM), Local Increase in Privilege (security-alert@...com)
VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console (VMware Security Team <security@...are.com>)
[SECURITY] [DSA 2399-1] php5 security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2399-2] php5 regression fix (Thijs Kinkhorst <thijs@...ian.org>)

192 messages

Powered by blists - more mailing lists