[slackware-security] mysql

New mysql packages are available for Slackware 14.0 to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mysql-5.5.43-i486-1slack14.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

mariadb: denial of service

CVE-2014-8964 denial of service A heap-based buffer overflow was found in the way PCRE handled certain malformed regular expressions. This issue could cause a crash while parsing malicious regular expressions related to an assertion that allows zero repeats. - CVE-2015-0499 denial of service...

Mandriva Linux Security Advisory : mariadb (MDVSA-2015:227)

This update provides MariaDB 5.5.43, which fixes several security issues and other bugs. Please refer to the Oracle Critical Patch Update Advisories and the Release Notes for MariaDB for further information regarding the security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Oracle MySQL Multiple Unspecified vulnerabilities-03 (Apr 2015) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3229-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3229-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 19, 2015 http://www.debian.org/security/faq -...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:0309-1)

java-160-openjdk was updated to the b24 release, fixing multiple security issues : dbg114-java-160-openjdk-5856 java-160-openjdk-5856 newupdateinfo Security fixes - S7082299, CVE-2011-3571: Fix inAtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502:...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-2012-136)

update to version 1.11.1 to fix several security issues : - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class -...

Adobe Shockwave Player内存破坏漏洞(CVE-2014-0501)

BUGTRAQ ID: 65490 CVECAN ID: CVE-2014-0500 Adobe Shockwave Player是播放使用Macromedia和Adobe Director制作的网页内容的软件。 Adobe Shockwave Player 12.0.7.148及之前版本在实现上存在远程内存破坏漏洞，攻击者可利用此漏洞在受影响应用用户上下文中执行任意代码。 0 Adobe Shockwave Player 12.0.7.148 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb14-06）以及相应补丁: apsb14-06：Adobe...

Adobe Shockwave Player Multiple Memory Corruption Vulnerabilities (Feb 2014) - Windows

Adobe Shockwave Player is prone to multiple memory corruption vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-0501

Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0500...

Memory corruption

Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0501...

CVE-2014-0501

Adobe Shockwave Player before 12.0.9.149 is affected by CVE-2014-0501 (distinct from CVE-2014-0500) and can allow remote code execution or memory corruption via unspecified vectors. The vulnerability affects Shockwave Player on Windows and macOS; Adobe issued APSB14-06 to address these issues (up...

CVE-2014-0500

Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-0501...

Oracle Linux 5 : firefox (ELSA-2010-0501)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0501 advisory. devhelp: 0.12-21 - Rebuild against xulrunner esc: 1.1.0-12 - Rebuild for xulrunner update firefox: 3.6.4-8.0.1.el5 - Add firefox-oracle-default-prefs.j...

CVE-2013-0501

The CVE-2013-0501 entry involves the EdrawSoft EDOFFICE.EDOfficeCtrl.1 ActiveX control (used by Edraw Office Viewer Component and IBM Cognos Disclosure Management 10.2.0). The vulnerability arises from this ActiveX control permitting a crafted web site to read arbitrary files on a client, or down...

Fedora Update for java-1.6.0-openjdk FEDORA-2013-2197

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

Fedora Update for java-1.6.0-openjdk FEDORA-2013-1898

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 6225)

IBM Java 1.6.0 was updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

Fedora Update for java-1.7.0-openjdk FEDORA-2012-16351

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...