security

Slackware: 2013-161-01: php: Security Update

LinuxSecurity.com - Mon, 2013-06-10 17:18
LinuxSecurity.com: New php packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. [More Info...]
Categories: linux, news, security

Tagging and Location Technologies

Schneier on Security - Mon, 2013-06-10 12:50
Interesting speculative article....
Categories: security

Red Hat: 2013:0911-01: kernel: Important Advisory

LinuxSecurity.com - Mon, 2013-06-10 12:27
LinuxSecurity.com: Updated kernel packages that fix three security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having [More...]
Categories: linux, news, security

Ubuntu: 1871-1: xserver-xorg-video-openchrome vulnerability

LinuxSecurity.com - Mon, 2013-06-10 09:53
LinuxSecurity.com: Several security issues were fixed in xserver-xorg-video-openchrome.
Categories: linux, news, security

Debian: 2706-1: chromium-browser: Multiple vulnerabilities

LinuxSecurity.com - Mon, 2013-06-10 08:43
LinuxSecurity.com: Several vulnerabilities have been discovered in the chromium web browser. CVE-2013-2855 [More...]
Categories: linux, news, security

Debian: 2705-1: pymongo: denial of service

LinuxSecurity.com - Mon, 2013-06-10 08:00
LinuxSecurity.com: Jibbers McGee discovered that pymongo, a high-performance schema-free document-oriented data store, is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB [More...]
Categories: linux, news, security

Government Secrets and the Need for Whistle-blowers

Schneier on Security - Mon, 2013-06-10 06:12
Yesterday, we learned that the NSA received all calling records from Verizon customers for a three-month period starting in April. That's everything except the voice content: who called who, where they were, how long the call lasted -- for millions of people, both Americans and foreigners. This "metadata" allows the government to track the movements of everyone during that period,...
Categories: security

Government Secrets and the Need for Whistle-blowers

LinuxSecurity.com - Mon, 2013-06-10 03:54
LinuxSecurity.com: Yesterday, we learned that the NSA received all calling records from Verizon customers for a three-month period starting in April. That's everything except the voice content: who called who, where they were, how long the call lasted -- for millions of people, both Americans and foreigners.
Categories: linux, news, security

Testing the Faith of the Linux Masses

LinuxSecurity.com - Mon, 2013-06-10 03:51
LinuxSecurity.com: Just how committed are Linux users to their operating system? Would they ever switch back? That depends who you ask. "I could see myself switching to BSD," offered Chris Travers, a blogger who works on the LedgerSMB project. "I have found hardware support remarkably unreliable on Linux." Of course, that's "part and parcel of the constructive chaos that is Linux," he said.
Categories: linux, news, security

NSA snooping bolsters opponents of U.S. Internet control

LinuxSecurity.com - Mon, 2013-06-10 03:44
LinuxSecurity.com: The National Security Agency's massive data gathering from the world's largest Internet companies could bolster arguments that the United States should have less control over the Internet, an expert says.
Categories: linux, news, security

Debian: 2704-1: mesa: out of bounds access

LinuxSecurity.com - Sun, 2013-06-09 12:54
LinuxSecurity.com: It was discovered that applications using the mesa library, a free implementation of the OpenGL API, may crash or execute arbitrary code due to an out of bounds memory access in the library. This vulnerability only affects systems with Intel chipsets. [More...]
Categories: linux, news, security

Debian: 2703-1: subversion: Multiple vulnerabilities

LinuxSecurity.com - Sat, 2013-06-08 21:41
LinuxSecurity.com: Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: [More...]
Categories: linux, news, security

PRISM Program Gives NSA Access to Data on Servers of Major US Internet Companies (June 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

It now appears that the National Security Agency's (NSA's) reach extends beyond just Verizon's call records.......

Categories: security

FISA Order Requires Verizon to Provide NSA With Metadata on All Calls (June 5 & 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

According to a document obtained by The Guardian, the US Foreign Intelligence Surveillance Court issued an order forcing Verizon to provide the NSA metadata on all calls made through its systems over the three-month period between April 25 and July 19 2013.......

Categories: security

FBI and Microsoft take Down Citadel Botnet (June 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

Microsoft and the FBI worked together to take down the Citadel botnet, which is believed to have been instrumental in an estimated US $500 million in thefts from online bank accounts.......

Categories: security

Eleven People Arrested in Connection with Carder Forum (June 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

In a coordinated effort, authorities in the US, the UK, and Vietnam have shut down a carder forum known as Mattfeuter, which was the starting point for 1.......

Categories: security

Microsoft's June Security Update to Address 23 Flaws in Windows, IE, and Office (June 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

On Tuesday, June 11, Microsoft plans to issue five security bulletins to address a total of 23 vulnerabilities.......

Categories: security

Draft Legislation in Spain Would Allow Police to Place Spyware on Suspects' Devices (June 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

Draft legislation from Spain's ministry of justice would give police the authority to remotely install spyware on computers, storage devices, and mobile devices being used by suspected criminals.......

Categories: security

California Police Baffled by Electronic Device Used to Break Into Cars (June 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

Police in California are asking for the public's help regarding a rash of car break-ins in which the thieves used an unidentified electronic device to unlock the vehicles.......

Categories: security

Proposed Legislation Would Impose "Real Consequences and Punishments" on Foreign Hackers (June 5 & 6, 2013)

SANS NewsBites - Fri, 2013-06-07 17:00

US lawmakers have introduced a bill that would punish foreign hackers who steal sensitive data.......

Categories: security