Security update for xen (important)

This update for xen to version 4.7.4 bsc1027519 fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc1068187: Failure to recognize errors in the Populate on Demand PoD code allowed for DoS XSA-246 - bsc1068191...

EulerOS 2.0 SP2 : irssi (EulerOS-SA-2017-1284)

According to the versions of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the...

EulerOS 2.0 SP2 : nasm (EulerOS-SA-2017-1298)

According to the version of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function pastetokens in preproc.c, aka a NULL pointer dereference. It wil...

EulerOS 2.0 SP2 : apr (EulerOS-SA-2017-1304)

According to the version of the apr packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a denial of...

EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1315)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted...

EulerOS 2.0 SP2 : golang (EulerOS-SA-2017-1311)

According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Go before 1.8.4 and 1.9.x before 1.9.1 allows 'go get' remote command execution. Using custom domains, it is possible to arrange things so that...

EulerOS 2.0 SP2 : liblouis (EulerOS-SA-2017-1290)

According to the versions of the liblouis packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the processing of translation tables in liblouis. An attacker could crash or potentially execute arbitrary code...

Debian DLA-1179-1 : shibboleth-sp2 security update

Rod Widdowson of Steading System Software LLP discovered a coding error in the 'Dynamic' metadata plugin of the Shibboleth Service Provider, causing the plugin to fail configuring itself with the filters provided and omitting whatever checks they are intended to perform. For Debian 7 'Wheezy',...

[SECURITY] [DLA 1179-1] shibboleth-sp2 security update

Package : shibboleth-sp2 Version : 2.4.3+dfsg-5+deb7u2 CVE ID : CVE-2017-16852 Debian Bug : 881857 Rod Widdowson of Steading System Software LLP discovered a coding error in the "Dynamic" metadata plugin of the Shibboleth Service Provider, causing the plugin to fail configuring itself with the...

DLA-1179-1 shibboleth-sp2 - security update

Bulletin has no description...

Debian DSA-4038-1 : shibboleth-sp2 - security update

Rod Widdowson of Steading System Software LLP discovered a coding error in the 'Dynamic' metadata plugin of the Shibboleth Service Provider, causing the plugin to fail configuring itself with the filters provided and omitting whatever checks they are intended to perform. See...

[SECURITY] [DSA 4038-1] shibboleth-sp2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4038-1] shibboleth-sp2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 16, 2017 https://www.debian.org/security/faq -...

DSA-4038-1 shibboleth-sp2 - security update

Bulletin has no description...

Information disclosure

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure...

CVE-2017-11852: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft GDI Component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to log on to an affected system and run a specially crafted application to compromise the user's system, due improperly disclosing kernel memory addresses, aka "Windows GDI Information Disclosure...

CVE-2017-11832: Exposure of Sensitive Information to an Unauthorized Actor

The Microsoft Windows embedded OpenType EOT font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially...

Debian: Security Advisory (DSA-4038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-11835: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft graphics in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an attacker to potentially read data that was not intended to be disclosed due to the way that the Microsoft Windows Embedded OpenType EOT font engine parses specially crafted embedded fonts, aka "Windows EOT Font...

Description of the security update for Excel 2010: November 14, 2017

Description of the security update for Excel 2010: November 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...