Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Cognos Controller

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Cognos Controller. IBM Cognos Controller has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2105 DESCRIPTION: OpenSSL is vulnerable to a heap-based buffer overflow,...

Security Bulletin: A security vulnerability has been identified in IBM Cognos Business Intelligence shipped with IBM Cognos Planning (CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176, CVE-2016-2108)

Summary IBM Cognos Business Intelligence is shipped as a component of IBM Cognos Planning. Information about a security vulnerability affecting IBM Cognos Business Intelligence has been published in a security bulletin. Vulnerability Details Please consult the security bulletin: Security Bulletin...

pfSense < 2.3.1 Multiple Vulnerabilities (SA-16_03 / SA-16-04)

According to its self-reported version number, the remote pfSense install is prior to 2.3.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106500; scriptversion"1.12";...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain several vulnerabilities CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-1794, CVE-2015-3195, CVE-2015-4000, CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2108, CVE-2016-2109, CVE-2016-2176,...

Vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Tue Jul 12 14:14:43 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory20.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory20.asc...

Security Advisory - Multiple Vulnerabilities in OpenSSL in May 2016

On May 3, 2016, the OpenSSL Software Foundation released a security advisory that included six vulnerabilities. Of the six vulnerabilities disclosed, four of them may cause memory corruption or excessive memory usage, one could allow a padding oracle attack to decrypt traffic when the connection...

Security Advisory 0020

Security Advisory 0020 PDF Date: May 6th, 2016 Version: 1.2 Revision| Date| Changes ---|---|--- 1.0 | May 6th, 2016 | Initial release 1.1 | May 12th, 2016 | Updated to include assessment for CVX and CVP. Change in vulnerability status for CVE-2016-2107. 1.2 | May 20th, 2016 | Updated to include...

CVE-2016-2176

OpenSSL CVE-2016-2176 affects the X509_NAME_oneline path. The flaw allows an attacker to cause an information leak (arbitrary stack data) or a denial of service by sending crafted EBCDIC ASN.1 data. Affected are OpenSSL versions older than 1.0.1t and older than 1.0.2h; the issue is mitigated by u...

OpenSSL 1.0.2 < 1.0.2h Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2h. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2h advisory. - The X509NAMEoneline function in crypto/x509/x509obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1t-alt0.M70P.1

1.0.1t-alt0.M70P.1 built May 4, 2016 Gleb Fotengauer-Malinovskiy in task 164219 May 3, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.1t fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1

1.0.2h-alt1 built May 4, 2016 Gleb Fotengauer-Malinovskiy in task 164216 May 3, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

[SECURITY] [DSA 3566-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3566-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini May 03, 2016 https://www.debian.org/security/faq -...

Internet Bug Bounty: EBCDIC overread (CVE-2016-2176)

https://github.com/openssl/openssl/commit/ea96ad5a206b7b5f25dad230333e8ff032df3219...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...