[SECURITY] [DSA 4197-1] wavpack security updaze

2018-05-09 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian Security Advisory DSA-4197-1 secur...@debian.org https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2018

[security bulletin] MFSBGN03804 - HP Service Manager Software, Remote Disclosure of Information

2018-05-09 Thread cyber-psrt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03158061 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: KM03158061 Version: 1 MFSBGN03804 - HP

[SECURITY] [DSA 4198-1] prosody security update

2018-05-09 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian Security Advisory DSA-4198-1 secur...@debian.org https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2018

[security bulletin] MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

2018-05-09 Thread cyber-psrt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Note: the current version of the following document is available here: https://softwaresupport.hpe.com/document/-/facetsearch/document/KM03158014 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: KM03158014 Version: 1 MFSBGN03806 rev.1 - HP

t2'18: Call For Papers 2018 (Helsinki, Finland)

2018-05-09 Thread Tomi Tuominen
# # t2'18 - Call For Papers (Helsinki, Finland) - October 25 - 26, 2018 # Join us for the 15th anniversary celebrations on Oct 25-26! CFP and ticket sales are now open. To truly appreciate the full spectrum of cyber, one simply needs to visit Helsinki. Sooner or later you need a break from the

[ADV170017] Defense in depth -- the Microsoft way (part 54): escalation of privilege during installation of Microsoft Office 20xy

2018-05-09 Thread Stefan Kanthak
Hi @ll, during installation of Microsoft Office 2003 and newer versions as well as single components of Microsoft Office products, the executable of the "Office Source Engine", ose.exe, is copied as "%TEMP%\ose0.exe" and then executed with elevated privileges. %TEMP% is writable by

[SECURITY] [DSA 4196-1] linux security update

2018-05-09 Thread Salvatore Bonaccorso
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian Security Advisory DSA-4196-1 secur...@debian.org https://www.debian.org/security/ Salvatore Bonaccorso May 08, 2018