Red Hat Enterprise Linux: Red Hat OpenStack Platform 9.0 (Mitaka) Release Candidate is now
available for Red Hat Enterprise Linux 7.2
Monthly Archives: August 2016
New Gmail Alerts Warn of Unauthenticated Senders
Google is rolling out new Gmail security features that warn users if the system could not authenticate the sender of a message.
Car Thieves Can Unlock 100 Million Volkswagens With A Simple Wireless Hack
In Brief
Some 100 Million cars made by Volkswagen are vulnerable to a key cloning attack that could allow thieves to unlock the doors of most popular cars remotely through a wireless signal, according to new research.
Next time when you leave your car in a parking lot, make sure you don’t leave your valuables in it, especially if it’s a Volkswagen.
What’s more worrisome?
The new attack
Gentoo Linux Security Advisory 201608-01
Gentoo Linux Security Advisory 201608-1 – Multiple vulnerabilities have been found in OptiPNG, the worst of which could lead to the remote execution of arbitrary code, or cause a Denial of Service condition. Versions less than 0.7.6 are affected.
Red Hat Security Advisory 2016-1595-01
Red Hat Security Advisory 2016-1595-01 – Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY principle. Security Fix: A cross-site scripting flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript’s Element.innerHTML to forge content in the admin’s add/change related popup. Element.textContent is now used to prevent XSS data execution.
Red Hat Security Advisory 2016-1596-01
Red Hat Security Advisory 2016-1596-01 – Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY principle. Security Fix: A cross-site scripting flaw was found in Django. An attacker could exploit the unsafe usage of JavaScript’s Element.innerHTML to forge content in the admin’s add/change related popup. Element.textContent is now used to prevent XSS data execution.