Oracle: Security Advisory (ELSA-2015-2180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : rubygem-bundler and rubygem-thor (RHSA-2015:2180)

Updated rubygem-bundler and rubygem-thor packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS...

SUSE: Security Advisory for flash-player (SUSE-SU-2015:0491-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : rubygem-bundler (openSUSE-2015-275)

rubygem-bunder was updated to fix security vulnerabilities and non-security issues The following security issues were fixed : - Hide credentials while warning about gems with ambiguous sources - Warn when more than one top-level source is present - Bundler may install gems from a different source...

Adobe Flash Player Type Confusion Code Execution (APSB15-05: CVE-2015-0334)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file. Successful exploitation...

RHEL 5 / 6 : flash-plugin (RHSA-2015:0697)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0697 advisory. - flash-plugin: multiple code execution issues fixed in APSB15-05 CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335,...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10458)

flash-player has been updated to fix eleven security vulnerabilities : - Multiple memory corruption issues exist due to not properly validating user input, which an attacker can exploit to execute arbitrary code. CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339 - Multiple type confusion...

openSUSE Security Update : flash-player (openSUSE-2015-225)

Adobe Flash Player was updated to 11.2.202.451 bsc922033. These security issues were fixed : - Memory corruption vulnerabilities that could lead to code execution CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339. - Type confusion vulnerabilities that could lead to code execution...

Adobe fixes 1 1 Flash high-risk vulnerabilities, mostly by the Google Project Zero team found-vulnerability warning-the black bar safety net

Following the Microsoft in this week's bug fix may fix the Stuxnet and FREAK vulnerability after, Adobe also ushered in a massive patch update. The Adobe update the Flash Player on the 1 1 high-risk vulnerabilities, most of which are remote arbitrary code execution vulnerability. Affected Softwar...

CVE-2015-0334

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0336...

CVE-2015-0334

CVE-2015-0334 is a type confusion vulnerability in Adobe Flash Player’s NetConnection handling that allowed remote code execution. Affected are Windows/OS X Flash Player builds before 13.0.0.277 and 14.x through 17.x before 17.0.0.134, and Linux before 11.2.202.451. The issue enables arbitrary co...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt42

3:11-alt42 built March 13, 2015 Sergey V Turchin in task 141821 March 13, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt42

3:11-alt42 built March 13, 2015 Sergey V Turchin in task 141820 --- March 13, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342...

KLA10462 Multiple vulnerabilities in Adobe Flash Player

Multiple critical vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. An unspecified vulnerability can be exploited locally via type...

SUSE-SU-2015:0795-1 Security update for rubygem-bundler

The Rubygem Bundler was updated to version 1.7.0. Bundler 1.7 is a security-only release to address CVE-2013-0334, a vulnerability where a gem might be installed from an unintended source server, particularly while using both rubygems.org and gems.github.com. Upstream changes entry with more...

CVE-2013-0334

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source...

CVE-2013-0334

CVE-2013-0334 affects Bundler prior to 1.7, where using multiple top-level gem sources allows a remote attacker to install a gem with the same name from a different source, enabling arbitrary gem installation. The connected MiracleLinux advisory AXSA:2015-789 fixes Bundler by upgrading Bundler to...

CVE-2013-0334

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source...

Fedora 19 : rubygem-bundler-1.7.3-1.fc19 (2014-11649)

This update fixes CVE-2013-0334: 'bundle install' may install a gem from a source other than expected Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...