[SECURITY] [DLA 422-1] python-imaging security update

Package : python-imaging Version : 1.1.7-2+deb6u2 CVE ID : CVE-2016-0775 Debian Bug : 813909 Two buffer overflows were discovered in python-imaging, a Python library for loading and manipulating image files, which may lead to the execution of arbitrary code. CVE-2016-0775 Buffer overflow in...

DLA-422-1 python-imaging - security update

Bulletin has no description...

cplusplus.com XSS vulnerability

Vulnerable URL: http://www.cplusplus.com/info/delete.cgi?" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5505 Google Pagerank| 6 VIP website status:| Yes Check cplusplus.com SSL...

Debian DLA-420-1 : libmatroska security update

It was discovered that there was a invalid memory address issue in libmatroska, an extensible open standard audio/video container format. When reading a block group or a simple block that uses EBML lacing the frame sizes indicated in the lacing weren't checked against the available number of byte...

RHEL 6 / 7 : thunderbird (RHSA-2016:0258)

The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:0258 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed web content. A we...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-0258)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2016-0258 advisory. 38.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.6.0-1 - Update to 38.6.0 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3519)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3519 advisory. - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection Andy Lutomirski Orabug: 22742507 CVE-2015-5157 - x86/nmi/64: Reorder nested NMI...

mypoints.com XSS vulnerability

Vulnerable URL: https://www.mypoints.com/emp/u/signup.do Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 13:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4120 Google Pagerank| 6 VIP website status:| Yes...

daac.ornl.gov XSS vulnerability

Vulnerable URL: https://daac.ornl.gov/cgi-bin/daacdoi/doisearchproc.pl Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP website status:| No Check daac.ornl.gov SSL...

Debian DLA-419-1 : gtk+2.0 security update

Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 'Squeeze', this issue has been fixed in gtk+2.0 version 2.20.1-2+deb6u1. We recommend you to upgrade your gtk+2.0...

Oracle: Security Advisory (ELSA-2016-3516)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 419-1] gtk+2.0 security update

Package : gtk+2.0 Version : 2.20.1-2+deb6u1 CVE ID : CVE-2013-7447 Debian Bug : 799275 Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 "Squeeze", this issue has been...

agri.huji.ac.il XSS vulnerability

Vulnerable URL: http://www.agri.huji.ac.il/local-bin/signup/index.cgi?mode=view=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

RHEL 6 : MRG (RHSA-2016:0224)

Updated kernel-rt packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which giv...

RHEL 6 : glibc (RHSA-2016:0175)

Updated glibc packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 6 / 7 : glibc (RHSA-2016:0225)

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 6.2, 6.4, and 6.5 Advanced Update Support, and Red Hat Enterprise Linux 6.6 and 7.1 Extended Update Support. Red Hat Product Security has rated this update as having Critical security impact. A Commo...

DLA-419-1 gtk+2.0 - security update

Bulletin has no description...

RHEL 6 : chromium-browser (RHSA-2016:0241)

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Debian DLA-417-1 : xdelta3 security update

It was discovered that there was a buffer overflow in in xdelta3, a diff utility which works with binary files. This vulnerability allowed arbitrary code execution from input files. For Debian 6 Squeeze, this issue has been fixed in xdelta3 version 0y.dfsg-1+deb6u1. NOTE: Tenable Network Security...

CentOS 6 : glibc (CESA-2016:0175)

Updated glibc packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...