Monthly Archives: February 2016

NVD

CVE-2015-7678

Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

NVD

CVE-2015-7679

Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/.

NVD

CVE-2015-7680

Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx.

Hackers News

Bye bye, Flash! Google to Ban Flash-based Advertising

Google had also joined the path of Apple, Facebook, and Youtube to kill the “Adobe Flash Player” by announcing that the company is banning Flash banner support from its Adwords Advertising platform.

“To enhance the browsing experience for more people on more devices, the Google Display Network and DoubleClick Digital Marketing are now going 100% HTML5” Google says.

It’s been two decades

CentOS

CEBA-2016:0150 CentOS 6 kernel BugFix Update

CentOS Errata and Bugfix Advisory 2016:0150 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0150.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
b5f33a81b28d0a89af970bc08c4a07856c13f9789fe520e90d237dc7a2e5df65  kernel-2.6.32-573.18.1.el6.i686.rpm
8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793  kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm
cba169e9faf5ebc0ba25011f3b920de1a3a2943b7e46be6292193b31df7b8a5a  kernel-debug-2.6.32-573.18.1.el6.i686.rpm
a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d  kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm
5151ae3d0f6dde51c1ec991e14b88f0308ef7d46975ee7e9ed036f1381153901  kernel-devel-2.6.32-573.18.1.el6.i686.rpm
74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb  kernel-doc-2.6.32-573.18.1.el6.noarch.rpm
38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a  kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm
f318d66d12c72c060e8f644aa90d0c10099f1ab8ba5e24875f2a1ace22e35a57  kernel-headers-2.6.32-573.18.1.el6.i686.rpm
81ef77b0d7841946bf8825e599c1f6a6015082013b5ea02a836db34e19ca7fbc  perf-2.6.32-573.18.1.el6.i686.rpm
a8fa3ef717f09235052dd6bd4285be52ff494ea8c242788df16eda5b9aed7fb6  python-perf-2.6.32-573.18.1.el6.i686.rpm

x86_64:
1cb5031871e077e7d70fec7801901a948438d10f226ffb4311540c28f9253a55  kernel-2.6.32-573.18.1.el6.x86_64.rpm
8b375b6d363800343bc325966b4db96347e2508db458547b0df5dc63581e2793  kernel-abi-whitelists-2.6.32-573.18.1.el6.noarch.rpm
9f31b8f7f4db48d8ba30c16564cb6ad614d04b7d63811c274134654607cbce08  kernel-debug-2.6.32-573.18.1.el6.x86_64.rpm
a4bf157c52dc0d736ef7a65a073e543b3f2cf0070aa938da41eeecaca11e783d  kernel-debug-devel-2.6.32-573.18.1.el6.i686.rpm
16cb431b4a01c6b3b915e646c971fa0c79e62f4feeffd57939f39df687ebc6a3  kernel-debug-devel-2.6.32-573.18.1.el6.x86_64.rpm
b81c297339078d80dda73d86a1aec61c50d7fb05728585c1ebbe81bb088851bf  kernel-devel-2.6.32-573.18.1.el6.x86_64.rpm
74ff6b30bd2603f2e859e899a653aaac2daa0ee534abd5ab3e32a8ffc2cdb2fb  kernel-doc-2.6.32-573.18.1.el6.noarch.rpm
38a27fbf4e7fa229fe8ab6b8cf25ec08031c376cf51ec38400197bc478d0255a  kernel-firmware-2.6.32-573.18.1.el6.noarch.rpm
9dd3a3533ebb6646bafafef2229b6142fa0277f34a534e7c74f3c8cacafd7296  kernel-headers-2.6.32-573.18.1.el6.x86_64.rpm
5ff27ecbdca7013f093d697f4ba3bcaa9b14be03ef79cafb4a3ed3d0aef1bf69  perf-2.6.32-573.18.1.el6.x86_64.rpm
c5fee073bee1f19dc848a8302e07e4241e49cbff55f35a3db5ae903352f11dc4  python-perf-2.6.32-573.18.1.el6.x86_64.rpm

Source:
ef3c944af9b7e94448e3c343da7d6f582b267aa9a5653586b8b9332351b01afc  kernel-2.6.32-573.18.1.el6.src.rpm
CentOS

CESA-2016:0152 Moderate CentOS 6 sos SecurityUpdate

CentOS Errata and Security Advisory 2016:0152 Moderate

Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-0152.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
548987e4eedc2c4a63186790fa4f196525765d08460578d07ee28d7922ae12c7  sos-3.2-28.el6.centos.2.noarch.rpm

x86_64:
548987e4eedc2c4a63186790fa4f196525765d08460578d07ee28d7922ae12c7  sos-3.2-28.el6.centos.2.noarch.rpm

Source:
7ebe43dc6e675b49849eeafe99285a67f1718b4fc9b72fb289a038ff2f75ae9a  sos-3.2-28.el6.centos.2.src.rpm
CentOS

CEBA-2016:0135 CentOS 6 initscripts BugFix Update

CentOS Errata and Bugfix Advisory 2016:0135 

Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0135.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
8b01c5a973be1847170dd540c677e764b2282c39bf7230897af64fd72a78aac6  debugmode-9.03.49-1.el6.centos.4.i686.rpm
10fd055a885c30ef304379e9a96a5541823e02527f8a7e7a09ccf03af8e38527  initscripts-9.03.49-1.el6.centos.4.i686.rpm

x86_64:
e5fc9a1f0b997ee675da188ece3f61891773e33ec3291385afcdee42c46f8b1b  debugmode-9.03.49-1.el6.centos.4.x86_64.rpm
84c2251f9a7ee410a292ad0db3371b6b8deaae55906f18f3f269e2dafbd16d1c  initscripts-9.03.49-1.el6.centos.4.x86_64.rpm

Source:
93875323760b38d60f4741b8de01d33e55e074a185bb14e1bb085fe03e23e80f  initscripts-9.03.49-1.el6.centos.4.src.rpm