SUSE-SU-2015:1264-1 Security update for postgresql93

PostgreSQL was updated to the security and bugfix release 9.3.8 including 9.3.7. Security issues fixed: CVE-2015-3165, bsc931972: Avoid possible crash when client disconnects just before the authentication timeout expires. CVE-2015-3166, bsc931973: Consistently check for failure of the printf...

SUSE-SU-2015:1253-2 Security update for php5

This security update of PHP fixes the following issues: Security issues fixed: CVE-2015-4024 bnc931421: Fixed multipart/form-data remote DOS Vulnerability. CVE-2015-4026 bnc931776: pcntlexec did not check path validity. CVE-2015-4022 bnc931772: Fixed and overflow in ftpgenlist that resulted in a...

DLA-246-2 linux-2.6 - security update

Bulletin has no description...

SUSE-SU-2015:1091-1 Security update for postgresql91

This update provides PostgreSQL 9.1.18, which brings fixes for security issues and other enhancements. The following vulnerabilities have been fixed: CVE-2015-3165: Avoid possible crash when client disconnects. bsc931972 CVE-2015-3166: Consistently check for failure of the printf. bsc931973...

SUSE-SU-2015:1045-1 Security update for Xen

Xen was updated to fix seven security vulnerabilities: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu. XSA-128, bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests. XSA-129, bnc931626 CVE-2015-4105: Guest triggerable qemu MSI-X pass-throu...

SUSE-SU-2015:1157-1 Security update for Xen

Xen was updated to fix six security issues: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu. XSA-128, bsc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests. XSA-129, bsc931626 CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error...

SUSE-SU-2015:1156-1 Security update for Xen

Xen was updated to fix six security issues: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu. XSA-128, bsc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests. XSA-129, bsc931626 CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error...

SUSE-SU-2015:1359-1 Security update for libqt4

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed: - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

MGASA-2015-0156 Updated mono packages fix security vulnerabilities

A TLS impersonation attack was discovered in Mono's TLS stack by researchers at Inria CVE-2015-2318. During checks on the TLS stack, they have discovered two further issues which have been fixed, a vulnerability to a protocol downgrade attack CVE-2015-2319 and SSLv2 support still being available...

SUSE-SU-2015:0688-1 Security update for webkitgtk

This update fixes the following security issues: - Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes:...

Fedora 21 : ettercap-0.8.2-1.fc21 (2015-3984)

0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...

Fedora 22 : ettercap-0.8.2-1.fc22 (2015-4009)

0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...

SUSE-SU-2015:0463-1 Security update for freetype2

The font rendering library freetype2 has been updated to fix various security issues. Security Issues: CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9660 CVE-2014-9661 CVE-2014-9662 CVE-2014-9667 CVE-2014-9666 CVE-2014-9665 CVE-2014-9664 CVE-2014-9663 CVE-2014-9659 CVE-2014-9668 CVE-2014-966...

CVE-2015-0886 vulnerabilities

Vulnerabilities for packages: cassandra-reaper...

CVE-2015-1548

minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read...

SUSE-SU-2015:0953-2 Security update for perl-YAML-LibYAML

perl-YAML-LibYAML was updated to fix three security issues. These security issues were fixed: - CVE-2013-6393: The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service application crash and...

SUSE-SU-2015:1098-1 Security update for wireshark

wireshark has been updated to version 1.10.11 to fix five security issues. These security issues have been fixed: SigComp UDVM buffer overflow CVE-2014-8710. AMQP dissector crash CVE-2014-8711. NCP dissector crashes CVE-2014-8712, CVE-2014-8713. TN5250 infinite loops CVE-2014-8714. This...

CVE-2014-1635

creationtimestamp| type| source ---|---|--- 2014-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35184 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/belkinloginbof.rb 2025-02-06 03:13:41+00:00| seen|...

SUSE-SU-2015:1018-1 Security update for php53

This update fixes the following vulnerabilities in php: Heap corruption issue in exifthumbnail. CVE-2014-3670 Integer overflow in unserialize. CVE-2014-3669 Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime. CVE-2014-3668 Security Issues: CVE-2014-3669 CVE-2014-3670 CVE-2014-3668...

SUSE-SU-2015:1265-1 Security update for php53

This update fixes the following vulnerabilities in php: Heap corruption issue in exifthumbnail. CVE-2014-3670 Integer overflow in unserialize. CVE-2014-3669 Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime. CVE-2014-3668 Security Issues: CVE-2014-3669 CVE-2014-3670 CVE-2014-3668...