SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2018:0743-1)

This update for java-171-ibm fixes the following issue: The version was updated to 7.1.4.20 bsc1082810 - Security fixes : - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582 CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603 CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677...

SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2018:0694-1)

This update for java-171-ibm fixes the following issues: The version was updated to 7.1.4.20 bsc1082810 - Security fixes : - CVE-2018-2633 CVE-2018-2637 CVE-2018-2634 CVE-2018-2582 CVE-2018-2641 CVE-2018-2618 CVE-2018-2657 CVE-2018-2603 CVE-2018-2599 CVE-2018-2602 CVE-2018-2678 CVE-2018-2677...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.18 security update

An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Updated catdoc packages fix security vulnerability

Various issues found during fuzzing which may lead to an application crash or have unspecified further impact when the user is tricked into opening specially crafted files boo919228. A lot of segfaults on incorrect or corrupted data...

[SECURITY] [DSA 3732-2] php-ssh2 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3732-2 [email protected] https://www.debian.org/security/ Sebastien Delafond December 21, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3732-2] php-ssh2 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3732-2 [email protected] https://www.debian.org/security/ Sebastien Delafond December 21, 2016 https://www.debian.org/security/faq -...

OracleVM 3.2 : perl (OVMSA-2016-0076)

The remote OracleVM system is missing necessary patches to address critical security updates : - Do not extend allowable epoch values in Time::Local::timelocal to remove useless warning on 64-bit platforms Resolves: rhbz1149375 - Fix perl segfaults with custom signal handle Resolves: rhbz991854 -...

Updated dosfstools packages fix security vulnerabilities

Updated dosfstools package fixes security vulnerabilities: In dosfstools before 4.0, if the third to last entry was written on a FAT12 filesystem with an odd number of clusters, the second to last entry would be corrupted. This corruption may also lead to invalid memory accesses when the corrupte...

OracleVM 3.3 : openldap (OVMSA-2015-0123)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263171 - fix: nslcd segfaults due to incorrect mutex initialization 1144294 - fix: Updating openldap deletes database if slapd.conf ...

Fedora 21 : xen-4.4.1-9.fc21 (2014-15951)

Excessive checking in compatibility mode hypercall argument translation, Insufficient bounding of 'REP MOVS' to MMIO emulated inside the hypervisor, fix segfaults and failures in xl migrate --debug Guest effectable page reference leak in MMUMACHPHYSUPDATE handling Insufficient restrictions on...

OracleVM 3.3 : rpm (OVMSA-2014-0083)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix race condidition where unchecked data is exposed in the file system CVE-2013-64351163059 - Fix thinko in the non-root python byte-compilation fix - Byte-compile versioned python libdirs in non-roo...

Fedora 20 : xen-4.3.3-6.fc20 (2014-15995)

Excessive checking in compatibility mode hypercall argument translation, Insufficient bounding of 'REP MOVS' to MMIO emulated inside the hypervisor, fix segfaults and failures in xl migrate --debug Note that Tenable Network Security has extracted the preceding description block directly from the...

bash security update

3.2-33.4.0.1 - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. orabug 19905421...

bash security update

4.1.2-29.0.1 - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. orabug 19905294...

bash security update

4.2.45-5.4.0.1 - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. orabug 19905256...

FreeBSD : apache -- several vulnerabilities (91ecb546-b1e6-11e3-980f-20cf30e32f6d)

Apache HTTP SERVER PROJECT reports : Clean up cookie logging with fewer redundant string parsing passes. Log only cookies with a value assignment. Prevents segfaults when logging truncated cookies. moddav: Keep track of length of cdata properly when removing leading spaces. Eliminates a potential...

Fedora 18 : openssl-1.0.1e-37.fc18 (2014-0474)

Security update fixing segfaults in DTLS and TLS implementation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 20 : openssl-1.0.1e-37.fc20 (2014-0476)

Security update fixing segfaults in DTLS and TLS implementation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 19 : openssl-1.0.1e-37.fc19 (2014-0456)

Security update fixing segfaults in DTLS and TLS implementation. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 18 : php-5.4.16-1.fc18 (2013-10255)

06 Jun 2013, PHP 5.4.16 Core : - Fixed bug 64879 Heap based buffer overflow in quotedprintableencode, CVE-2013-2110. Stas - Fixed bug 64853 Use of no longer available ini directives causes crash on TS build. Anatol - Fixed bug 64729 compilation failure on x32. Gustavo - Fixed bug 64720 SegFault o...