20292 matches found
SUSE SLES11 Security Update : IBM Java 1.7.0 (SUSE-SU-2012:1489-2)
IBM Java 1.7.0 has been updated to SR3 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3159, CVE-2012-3216, CVE-2012-5070, CVE-2012-5067, CVE-2012-3143, CVE-2012-5076, CVE-2012-5077, CVE-2012-5073,...
SUSE SLED10 / SLES10 Security Update : kernel (SUSE-SU-2013:0856-1)
The SUSE Linux Enterprise 10 SP4 kernel has been updated to fix various bugs and security issues. Security issues fixed : CVE-2012-4444: The ip6fragqueue function in net/ipv6/reassembly.c in the Linux kernel allowed remote attackers to bypass intended network restrictions via overlapping IPv6...
SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1487-1)
XEN received various security and bugfixes : - CVE-2012-4535: xen: Timer overflow DoS vulnerability XSA-20 - CVE-2012-4537: xen: Memory mapping failure DoS vulnerability XSA-22 The following additional bugs have been fixed : - bnc784087 - L3: Xen BUG at ioapic.c:129...
SUSE SLES11 Security Update : kernel (SUSE-SU-2015:0481-1)
The SUSE Linux Enterprise 11 Service Pack 2 LTSS kernel has been updated to fix security issues on kernels on the x8664 architecture. The following security bugs have been fixed : - CVE-2012-4398: The requestmodule function in kernel/kmod.c in the Linux kernel before 3.4 did not set a certain...
SUSE SLED10 Security Update : Acrobat Reader (SUSE-SU-2013:0044-1)
Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 , CVE-2013-0601 , CVE-2013-0602 , CVE-2013-0603 , CVE-2013-0604 , CVE-2013-06...
SUSE SLES10 Security Update : glibc (SUSE-SU-2015:0170-1)
glibc has been updated to fix security issues : - Fix crashes on invalid input in IBM gconv modules CVE-2014-6040, CVE-2012-6656, bsc894553, bsc894556, GLIBC BZ 17325, GLIBC BZ 14134 - Fixed a stack overflow during hosts parsing CVE-2013-4357 - Copy filename argument in posixspawnfileactionsaddop...
SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1606-1)
This update fixes the following security issues in xen : - CVE-2012-5513: XENMEMexchange may overwrite hypervisor memory XSA-29 - CVE-2012-5515: Several memory hypercall operations allow invalid extent order values XSA-31 Also the following bugs have been fixed and upstream patches have been...
SUSE SLED10 / SLES10 Security Update : IBM Java 1.5.0 (SUSE-SU-2012:1489-1)
IBM Java 1.5.0 has been updated to SR15 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3216, CVE-2012-3143, CVE-2012-5073, CVE-2012-5075, CVE-2012-5083, CVE-2012-5083, CVE-2012-1531, CVE-2012-5081,...
[SECURITY] [DLA 222-1] commons-httpclient security update
Package : commons-httpclient Version : 3.1-9+deb6u1 CVE ID : CVE-2012-5783 CVE-2012-6153 CVE-2014-3577 CVE-2012-5783 and CVE-2012-6153 Apache Commons HttpClient 3.1 did not verify that the server hostname matches a domain name in the subjects Common Name CN or subjectAltName field of the X.509...
Sielco Sistemi Winlog Buffer Overflow - Ver2 (CVE-2012-3815)
A stack-based buffer overflow vulnerability has been reported in Sielco Sistemi Winlog. The vulnerability is due to insufficient sanitation of TCP requests. A remote attacker can exploit this issue by sending a specially crafted TCP request to the affected server. Successful exploitation would...
Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)
An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the toStaticHTML API within Internet Explorer handles content using specific strings when sanitizing HTML. A remote attacker could exploit this vulnerability by...
VMware OVF Tool Format String - Ver2 (CVE-2012-3569)
A format string vulnerability has been reported in VMware OVF Tool.The vulnerability is caused by insufficient sanitization when processing OVF files.A remote attacker can exploit this vulnerability to execute arbitrary code in the security context of the current user...
Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)
A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...
DLA-222-1 commons-httpclient - security update
Bulletin has no description...
CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix
It was found that the fix for CVE-2012-5783 was incomplete: the code added to check that the server host name matches the domain name in a subject's Common Name CN field in X.509 certificates was flawed. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially...
Update the version of commons-httpclient to address CVE-2012-5783 & CVE-2014-3577 and gain SNI support
Upgrade commons-httpclient to version 3.1-atlassian-2 to gain SNI support and to fix CVE-2012-5783 & CVE-2014-3577...
Debian DSA-3253-1 : pound - security update (POODLE)
Pound, a HTTP reverse proxy and load balancer, had several issues related to vulnerabilities in the Secure Sockets Layer SSL protocol. For Debian 7 wheezy this update adds a missing part to make it actually possible to disable client-initiated renegotiation and disables it by default CVE-2009-355...
[SECURITY] [DSA 3253-1] pound security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3253-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 07, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3253-1 (pound - security update)
Pound, a HTTP reverse proxy and load balancer, had several issues related to vulnerabilities in the Secure Sockets Layer SSL protocol. For Debian 7 wheezy this update adds a missing part to make it actually possible to disable client-initiated renegotiation and disables it by default CVE-2009-355...