Virtuozzo 6 : qemu-guest-agent / qemu-img / qemu-kvm / etc (VZLSA-2017-1206)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Virtuozzo 6 : firefox (VZLSA-2017-0190)

An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Virtuozzo 6 : sudo / sudo-devel (VZLSA-2017-1382)

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Virtuozzo 6 : sudo / sudo-devel (VZLSA-2017-1574)

An update for sudo is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

Oracle Linux 6 : kernel (ELSA-2017-1723)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1723 advisory. - mm enlarge stack guard gap Larry Woodman 1452729 1452730 CVE-2017-1000364 CVE-2017-1000366 - fs nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce...

Oracle Linux 6 : httpd (ELSA-2017-1721)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1721 advisory. - Related: 1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing Whitespace Defects - Resolves: 1463205 - CVE-2017-7668 httpd: apfindtoken buffer overread...

CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...

ImageMagick 'ReadMATImage' Memory Disclosure Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in the 'ReadMATImage' function of the coders\mat.c file in ImageMagick version 7.0.5-6. An attacker can exploit this vulnerability t...

CentOS 6 : bind (CESA-2017:1679)

"An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 6 : bind (RHSA-2017:1679)

"An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CentOS Update for bind CESA-2017:1679 centos6

Check the version of bind SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882748";...

Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2017-061)

According to the version of the parallels-server-bm-release / vzkernel / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - An updated fix for CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations. The fix...

CVE-2017-7276

There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3590)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3590 advisory. - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366022 CVE-2017-7645 - HID: hid-cypress: validate length of report Greg Kroah-Hartm...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3589)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3589 advisory. - macsec: dynamically allocate space for sglist Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - macsec: avoid heap overflow in skbtosgvec Jason...

IBM DB2 Connect 9.7 < FP11 Special Build 36621 / 10.1 < FP6 Special Build 36610 / 10.5 < FP8 Special Build 36605 / 11.1.2 < FP2 Multiple Vulnerabilities (Windows)

According to its version, the installation of IBM DB2 Connect on the remote Windows host is either 9.7 prior to Fix Pack 11 Special Build 36621, 10.1 prior to Fix Pack 6 Special Build 36610, 10.5 prior to Fix Pack 8 Special Build 36605, or 11.1.2 prior to Fix Pack 2. It is, therefore, affected by...

CentOS 6 / 7 : mercurial (CESA-2017:1576)

An update for mercurial is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 6 / 7 : mercurial (RHSA-2017:1576)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1576 advisory. Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Security...

Oracle Linux 6 / 7 : mercurial (ELSA-2017-1576)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1576 advisory. 1.4-5 - Fixes CVE-2017-9462 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

[SECURITY] [DSA 3900-1] openvpn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3900-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 27, 2017 https://www.debian.org/security/faq -...