Debian DLA-364-1 : gnutls26 security update

Hanno Bck discovered that GnuTLS, a library implementing the TLS and SSL protocols, incorrectly validated the first padding byte in CBC modes. A remote attacker can possibly take advantage of this flaw to perform a padding oracle attack. For Debian 6 'Squeeze', this issue has been fixed in gnutls...

[SECURITY] [DLA 365-1] foomatic-filters security update

Package : foomatic-filters Version : 4.0.5-6+squeeze2+deb6u11 CVE ID : CVE-2015-8327 Debian Bug : 806886 It was discovered that there was an injection vulnerability in foomatic-filters which is used by printer spoolers to convert incoming PostScript data into the printers native format. For Debia...

Debian DLA-361-1 : bouncycastle security update

The Bouncy Castle Java library before 1.51 does not validate that a point is within the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman ECDH key exchanges, aka an 'invalid curve attack.' For Debian 6 'Squeeze'...

DLA-365-1 foomatic-filters - security update

Bulletin has no description...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt57

3:11-alt57 built Dec. 9, 2015 Sergey V Turchin in task 154717 Dec. 9, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-8045, CVE-2015-8047, CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8418, CVE-2015-8454, CVE-2015-8455, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057,...

[SECURITY] [DLA 363-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.1-1+deb6u11 CVE ID : CVE-2015-8476 Debian Bug : 807265 It was discovered that there was a header injection vulnerability in libphp-phpmailer, am email transfer library for PHP. For Debian 6 Squeeze, this issue has been fixed in libphp-phpmailer version...

[SECURITY] [DLA 362-1] dhcpcd security update

Package : dhcpcd Version : 1:3.2.3-5+squeeze2 CVE ID : CVE-2012-6698 CVE-2012-6699 CVE-2012-6700 Guido Vranken discovered several memory-related vulnerabilities while fuzzing DHCP messages sent to dhcpcd. For Debian 6 “Squeeze”, those issues have been fixed in version 1:3.2.3-5+squeeze2...

Oracle: Security Advisory (ELSA-2015-2549)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-362-1 dhcpcd - security update

Bulletin has no description...

DLA-363-1 libphp-phpmailer - security update

Bulletin has no description...

CentOS 6 : libxml2 (CESA-2015:2549)

Updated libxml2 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

DLA-364-1 gnutls26 - security update

Bulletin has no description...

DLA-361-1 bouncycastle - security update

Bulletin has no description...

Oracle Linux 6 : libxml2 (ELSA-2015-2549)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2549 advisory. - CVE-2015-7941 Cleanup conditional section error handling - CVE-2015-8317 Fail parsing early on if encoding conversion failed - CVE-2015-7942 Another...

bufvc.ac.uk XSS vulnerability

Vulnerable URL: http://bufvc.ac.uk/gateway/search.php/site?q=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 794501 Google Pagerank| 6...

CVE-2015-6783

The FindStartOffsetOfFileInZipFile function in crazylinkerzip.cpp in crazylinker aka Crazy Linker in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP...

CVE-2015-6783

The FindStartOffsetOfFileInZipFile function in crazylinkerzip.cpp in crazylinker aka Crazy Linker in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP...

CVE-2015-6783

CVE-2015-6783 affects Google Chrome components on Android 5.x–6.x that use Crazy Linker. The vulnerability is in crazy_linker_zip.cpp FindStartOffsetOfFileInZipFile, where EOCD record search is faulty, allowing signature-validation bypass via a crafted ZIP archive. Public docs confirm this CVE wa...

twoo.com XSS vulnerability

Vulnerable URL: http://www.twoo.com/ Details: Description| Value ---|--- Patched:| Yes, at 14.12.2015 Latest check for patch:| 14.12.2015 12:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 723 Google Pagerank| 6 VIP website status:| Yes Check twoo.com SSL...

Ubuntu 12.04 LTS : openjdk-6 vulnerabilities (USN-2827-1)

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-4805, CVE-2015-4835, CVE-2015-4843, CVE-2015-4844,...