Debian Linux Security Advisory 3181-1 – Multiple security issues have been found in the Xen virtualisation solution.
Monthly Archives: March 2015
Debian Security Advisory 3177-1
Debian Linux Security Advisory 3177-1 – Thomas Klute discovered that in mod-gnutls, an Apache module providing SSL and TLS encryption with GnuTLS, a bug caused the server’s client verify mode not to be considered at all, in case the directory’s configuration was unset. Clients with invalid certificates were then able to leverage this flaw in order to get access to that directory.
Ubuntu Security Notice USN-2522-3
Ubuntu Security Notice 2522-3 – USN-2522-1 fixed vulnerabilities in ICU. On Ubuntu 12.04 LTS, the font patches caused a regression when using LibreOffice Calc. The patches have now been updated to fix the regression.
Vastal I-tech phpVID 1.2.3 Cross Site Scripting
Vastal I-tech phpVID version 1.2.3 suffers from a cross site scripting vulnerability.
Vastal I-tech phpVID 1.2.3 SQL Injection
Vastal I-tech phpVID version 1.2.3 suffers from a remote SQL injection vulnerability.
WordPress Daily Edition Theme 1.6.2 Path Disclosure
WordPress Daily Edition theme version 1.6.2 suffers from a path disclosure vulnerability.
WordPress Daily Edition Theme 1.6.2 Cross Site Scripting
WordPress Daily Edition theme version 1.6.2 suffers from a cross site scripting vulnerability.
SuperWebMailer 5.50.0.01160 Cross Site Scripting
SuperWebMailer version 5.50.0.01160 suffers from a cross site scripting vulnerability.