Debian DLA-645-1 : bind9 security update

CVE-2016-2775 lwresd crash with long query name Backport of upstream commit 38cc2d14e218e536e0102fa70deef99461354232. CVE-2016-2776 assertion failure due to unspecified crafted query Fix based on 43139-9-9.patch from ISC. For Debian 7 'Wheezy', these problems have been fixed in version...

RHEL 6 : chromium-browser (RHSA-2016:2007)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:2007 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 53.0.2785.143. Security Fixes:...

Oracle Linux 6 : kernel (ELSA-2016-2006)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2006 advisory. - net tcp: make challenge acks less predictable Florian Westphal 1355606 1355607 CVE-2016-5696 - usbhid hiddev: validate numvalues for HIDIOCGUSAGES,...

Security fix for the ALT Linux 6 package bind version 9.3.6-alt7.M60P.2

9.3.6-alt7.M60P.2 built Oct. 4, 2016 Gleb Fotengauer-Malinovskiy in task 170130 Sept. 29, 2016 Gleb Fotengauer-Malinovskiy - Applied upstream fix for CVE-2016-2776...

Debian Security Advisory DSA 3685-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at https://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v11.8 OpenVAS Vulnerability Test $Id: deb3685.nasl 6608 2017-07-07 12:05:05Z...

Apache Tomcat packaging on Debian-based distros - Local Root Privilege Escalation

I. VULNERABILITY ------------------------- Apache Tomcat® packaging on Debian-based distros - Local Root Privilege Escalation Affected debian packages: Tomcat 8 = 8.0.36-2 Tomcat 7 = 7.0.70-2 Tomcat 6 = 6.0.45+dfsg-1deb8u1 Ubuntu systems are also affected. See section VII. for details. Other...

Apache Tomcat 876 (Debian-Based Distros) - Local Privilege Escalation

Apache Tomcat 876 Debian-Based Distros - Local Privilege Escalation ============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-1240 - Release date: 30.09.2016 - Revision: 1 - Severity: High...

RHEL 6 / 7 : python-twisted-web (RHSA-2016:1978)

An update for python-twisted-web is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

UBUNTU-CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

DEBIAN-CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

CVE-2016-0617

CVE-2016-0617 corresponds to an unspecified vulnerability in the kernel-uek component of Oracle Linux 6. The CVSS data indicates a local-privilege context with a local attacker, aiming to affect availability (Impact: Availability = HIGH; Integrity/Confidentiality = NONE). Publicly detailed exploi...

CVE-2016-0617

Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors...

Zerodium Triples its iOS 10 Bounty to $1.5 Million

Zerodium has tripled the bounty it offers for an Apple iOS 10 remote jailbreak, boosting the reward today to $1.5 million USD, founder Chaouki Bekrar said. Zerodium had previously offered $1 million for iOS 9 attacks that result in an untethered jailbreak, but that bounty was for a specific time...

RHEL 6 : kernel (RHSA-2016:1939)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1939 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: It was found that the RFC 5961 challenge ACK ra...

Oracle Linux 6 / 7 : openssl (ELSA-2016-1940)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1940 advisory. - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in...