Blogs

Opera 10.50 (with Opera Widgets for Desktop) for Windows released

http://www.opera.com/docs/changelogs/windows/1050/

This release of Opera includes two security updates:

* Fixed vulnerability in Renegotiation feature of the TLS protocol
* Fixed a moderately severe security issue; details will be disclosed at
a later date.

It is recommended that Opera users on Windows platforms update their
browsers to the latest release.

Thanks,
Brian

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

http://www.kb.cert.org/vuls/id/166739

"The web management interface for the APC Network Monitoring Card (NMC)
used in various APC devices contains cross-site scripting (XSS) and
cross-site request forgery (CSRF/XSRF) vulnerabilities. By convincing a
victim to load a specially crafted URL while authenticated to an NMC, an
attacker could obtain credentials or perform certain actions as the
victim, including turning off the NMC-based device and any systems
attached to it. "

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

http://www.kb.cert.org/vuls/id/166739

"The web management interface for the APC Network Monitoring Card (NMC)
used in various APC devices contains cross-site scripting (XSS) and
cross-site request forgery (CSRF/XSRF) vulnerabilities. By convincing a
victim to load a specially crafted URL while authenticated to an NMC, an
attacker could obtain credentials or perform certain actions as the
victim, including turning off the NMC-based device and any systems
attached to it. "

Important sudo security update for RHEL

http://rhn.redhat.com/errata/RHSA-2010-0122.html

"An updated sudo package that fixes two security issues is now available for
Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

The sudo (superuser do) utility allows system administrators to give
certain users the ability to run commands as root.

Pages