Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1

Jan. 12, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt1 - Updated to 1.0.1k fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570 closes: 30644...

Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt1

Jan. 12, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt1 - Updated to 1.0.1k fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570 closes: 30644...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1

Jan. 12, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt1 - Updated to 1.0.1k fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570 closes: 30644...

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1

Jan. 12, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt1 - Updated to 1.0.1k fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275, CVE-2014-3570 closes: 30644...

[SECURITY] [DSA 3125-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3125-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 11, 2015 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3125-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] openssl

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1k-i486-1slack14.1.txz: Upgraded. This update fixes several security issues: DTLS segmentation...

CVE-2014-3572

The ssl3getkeyexchange function in s3clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message...

CVE-2014-3572

OpenSSL OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k is vulnerable to an ECDHE‑to‑ECDH downgrade attack caused by omitting the ServerKeyExchange message, which can trigger loss of forward secrecy. The issue affects multiple platforms (e.g., AIX advisories and other vendor ...

OpenSSL Ephemeral ECDH Cipher Suite Handshake Downgrade (CVE-2014-3572)

A vulnerability has been detected in the way OpenSSL handles TLS handshakes involving certain cipher suites. An attacker might leverage this vulnerability to impersonate a server and intercept secure communications...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)

Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...

Ubiquiti UniFi Controller DHCP Hostname脚本注入漏洞

CVE ID:CVE-2013-3572 Ubiquiti Networks UniFi是一款企业级无线网络系统。 Ubiquiti Networks UniFi中的UniFi Controller管理接口存在跨站脚本漏洞，允许远程攻击者利用漏洞通过特制的客户端主机名，注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 Ubiquiti UniFi Controller 2.x 厂商补丁： Ubiquiti Networks ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2013-3572

UniFi Controller (Ubiquiti) 2.x before 2.3.5 is affected by an XSS in the administer interface. A crafted client hostname can cause remote attackers to inject arbitrary script/HTML, potentially exposing sensitive data or session hijacking when the payload is rendered. Root cause: insufficient inp...

CVE-2012-3572

The CVE-2012-3572 entry concerns OSCC MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, where uploaded documents are not properly verified. This allows remote authenticated users to execute arbitrary PHP code via a crafted document, indicating a remote code execution vulnerability in the docume...

CVE-2012-3572

Open Source Competency Center OSCC MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, does not properly verify uploaded documents, which allows remote authenticated users to execute arbitrary PHP code via a crafted document...

VMSA-2011-0013 : VMware third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. ESX third-party update for Service Console openssl RPM The Service Console openssl RPM is updated to openssl-0.9.8e.12.el55.7 resolving two security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-7270 and CVE-2010-4180 to these issues. b...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 7231)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51339;...

SuSE 10 Security Update : IBM Java 5 (ZYPP Patch Number 7205)

This update brings IBM Java 5 to Service Release 12 Fixpack 2. It fixes quite a large number of security problems and other bugs. The security issues are tracked by the following CVE ids: CVE-2009-3555 / CVE-2010-1321 / CVE-2010-3541 / CVE-2010-3548 / CVE-2010-3549 / CVE-2010-3550 / CVE-2010-3551...

SuSE9 Security Update : IBM Java 5 JRE and SDK (YOU Patch Number 12659)

This update brings IBM Java 5 to Service Release 12 Fixpack 2. It fixes quite a large number of security problems and other bugs. The security issues are tracked by the following CVE ids : - CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0807)

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...