FreeBSD-SA-16:26.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:26.openssl Security Advisory The FreeBSD Project Topic: Multiple OpenSSL vulnerabilities Category: contrib Module: openssl Announced: 2016-09-23; revised on...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1u-alt0.M70P.1

1.0.1u-alt0.M70P.1 built Sept. 23, 2016 Gleb Fotengauer-Malinovskiy in task 169809 Sept. 22, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.1u fixes CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303,...

DSA-3673-2 openssl - regression update

Bulletin has no description...

[slackware-security] openssl

New openssl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssl-1.0.2i-i586-1slack14.2.txz: Upgraded. This update fixes denial-of-service and other security issues. For more...

[SECURITY] [DSA 3673-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3673-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2016 https://www.debian.org/security/faq -...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2i-alt1

Sept. 22, 2016 Gleb Fotengauer-Malinovskiy 1.0.2i-alt1 - Updated to 1.0.2i fixes CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2i-alt1

1.0.2i-alt1 built Sept. 22, 2016 Gleb Fotengauer-Malinovskiy in task 169814 Sept. 22, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.2i fixes CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2i-alt1

Sept. 22, 2016 Gleb Fotengauer-Malinovskiy 1.0.2i-alt1 - Updated to 1.0.2i fixes CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306...

Debian: Security Advisory (DSA-3673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2016-2179

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service memory consumption by maintaining many crafted DTLS sessions simultaneously, related to...

BELL-CVE-2016-2179 CVE-2016-2179 does not affect BellSoft software

Bulletin has no description...

CVE-2016-2179

OpenSSL CVE-2016-2179: The DTLS implementation could exhaust memory by accepting many crafted DTLS sessions due to unprocessed, out-of-order handshake messages. This memory-DoS vectors arises from DTLS queue handling in d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c. Public advisories (...

CVE-2016-2179

It was discovered that the Datagram TLS DTLS implementation could fail to release memory in certain cases. A malicious DTLS client could cause a DTLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory...

CVE-2014-2179

CVE-2014-2179 concerns Cisco RV Series routers (RV120W, RV180, RV180W, RV220W). The issue allows remote attackers to upload files to arbitrary locations via a crafted HTTP request. Affected versions are RV120W firmware prior to 1.0.5.9 and RV180/RV180W firmware prior to 1.0.4.14; RV220W devices a...

AIX 7.1 TL 2 : bos.rte.odm (U865302)

The remote host is missing AIX PTF U865302, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Ubuntu Update for linux USN-2179-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN21791.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2179-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Ubuntu: Security Advisory (USN-2179-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2179

CVE-2013-2179 affects X.Org xdm 1.1.10 and 1.1.11 (and possibly other versions). The vulnerability arises when performing authentication using certain implementations of the crypt() API that can return NULL, enabling remote attackers to trigger a denial of service via a NULL pointer dereference (...

CVE-2012-2179

CVE-2012-2179 affects libodm.a on IBM AIX (versions 5.3, 6.1, 7.1) and allows local users to overwrite arbitrary files via a symlink attack on a temporary file. The issue is a file-overwrite vulnerability caused by the libodm implementation, with an additional note that CVE-2014-3977 exists becau...

Fedora Update for nagios FEDORA-2012-1592

Check for the Version of nagios OpenVAS Vulnerability Test Fedora Update for nagios FEDORA-2012-1592 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...