SUSE SLED12 / SLES12 Security Update : libnettle (SUSE-SU-2017:1481-1)

This update for libnettle fixes the following issues : - CVE-2016-6489 : - Reject invalid RSA keys with even modulo. - Check for invalid keys, with even p, in dsasign. - Use function mpzpowmsec instead of mpzpowm bsc991464. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE-SU-2017:1481-1 Security update for libnettle

This update for libnettle fixes the following issues: - CVE-2016-6489: Reject invalid RSA keys with even modulo. Check for invalid keys, with even p, in dsasign. Use function mpzpowmsec instead of mpzpowm bsc991464...

Debian DSA-3872-1 : nss - security update

Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...

Debian Security Advisory DSA 3870-1 (wordpress - security update)

Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to force password resets, and perform various cross-site scripting and cross-site request forgery attacks. OpenVAS Vulnerability Test $Id: deb3870.nasl 6607 2017-07-07 12:04:25Z cfischer $...

Debian DSA-3870-1 : wordpress - security update

Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to force password resets, and perform various cross-site scripting and cross-site request forgery attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian Security Advisory DSA 3872-1 (nss - security update)

Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in denial of service or information disclosure. OpenVAS Vulnerability Test $Id: deb3872.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3872-1 using nvtgen 1.0 Script...

Debian DSA-3867-1 : sudo - security update

The Qualys Security team discovered that sudo, a program designed to provide limited super user privileges to specific users, does not properly parse '/proc/pid/stat' to read the device number of the tty from field 7 ttynr. A sudoers user can take advantage of this flaw on an SELinux-enabled syst...

Debian DSA-3868-1 : openldap - security update

Karsten Heymann discovered that the OpenLDAP directory server can be crashed by performing a paged search with a page size of 0, resulting in denial of service. This vulnerability is limited to the MDB storage backend. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian: Security Advisory (DSA-3870-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3872-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3866-1 : strongswan - security update

Two denial of service vulnerabilities were identified in strongSwan, an IKE/IPsec suite, using Google's OSS-Fuzz fuzzing project. - CVE-2017-9022 RSA public keys passed to the gmp plugin aren't validated sufficiently before attempting signature verification, so that invalid input might lead to a...

Debian: Security Advisory (DSA-3869-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 3867-1 (sudo - security update)

The Qualys Security team discovered that sudo, a program designed to provide limited super user privileges to specific users, does not properly parse OpenVAS Vulnerability Test $Id: deb3867.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3867-1 using nvtgen 1.0 Script...

Debian Security Advisory DSA 3866-1 (strongswan - security update)

Two denial of service vulnerabilities were identified in strongSwan, an IKE/IPsec suite, using Google OpenVAS Vulnerability Test $Id: deb3866.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3866-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright...

Debian DSA-3864-1 : fop - security update

It was discovered that an XML external entities vulnerability in the Apache FOP XML formatter may result in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3864. Th...

Debian DSA-3865-1 : mosquitto - security update

It was discovered that pattern-based ACLs in the Mosquitto MQTT broker could be bypassed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3865. The text itself is copyright C Software in t...

Debian: Security Advisory (DSA-3866-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3863-1 : imagemagick - security update

This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed RLE, ART, JNG, DDS, BMP, ICO, EPT, SUN, MTV, PICT, XWD,...

[SECURITY] [DSA 3863-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3863-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2017 https://www.debian.org/security/faq -...

Debian DSA-3861-1 : libtasn1-6 - security update

Jakub Jirasek of Secunia Research discovered that libtasn1, a library used to handle Abstract Syntax Notation One structures, did not properly validate its input. This would allow an attacker to cause a crash by denial-of-service, or potentially execute arbitrary code, by tricking a user into...