848 matches found
Description of the security update for SQL Server 2014 SP2 CU10: January 16, 2018
None None...
Description of the security update for SQL Server 2012 SP4 GDR: January 12, 2018
None None...
SUSE-SU-2017:2243-1 Security update for freeradius-server
This update for freeradius fixes the following issues: Security issues fixed: - CVE-2017-10988: Decode 'signed' attributes correctly. bnc1049086 - CVE-2017-10987: Check for option overflowing the packet. bnc1049086 - CVE-2017-10985: Fix infinite loop and memory exhaustion with 'concat' attributes...
SUSE-SU-2017:1777-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. bnc1041445 - CVE-2015-4680: Add a configuration option to allow checking of all intermediate certificates for revocations. bnc935573 The...
SUSE-SU-2017:1705-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: Security issue fixed: - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. bsc1041445 Non security issue fixed: - Fix case insensitive matching in compiled regular expressions bsc1027243...
March 14, 2017—KB4013429 (OS Build 14393.953)
None None...
spice-server security update
0.12.4-13.2 - Fix buffer overflow in mainchannelallocmsgrcvbuf when reading large messages. Resolves: CVE-2016-9577 - Fix remote DoS via crafted message. Resolves: CVE-2016-9578...
Cumulative Update for Windows 10 Version 1607 and Windows Server 2016: October 27, 2016
None None...
SUSE-SU-2016:1820-1 Security update for apache2-mod_fcgid
This update for apache2-modfcgid fixes the following issues: It used to be possible to set an arbitrary $HTTPPROXY environment variable for request handlers -- like CGI scripts -- by including a specially crafted HTTP header in the request CVE-2016-1000104. As a result, these server components...
RHEL 6 : spice-server (RHSA-2016:1204)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1204 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can acce...
Facebook Requires SHA-2 Support as of Oct. 1, 2015
Facebook has put developers on notice that as of Oct. 1, apps that do not support SHA-2 will no longer connect to its network. With Tuesday’s announcement, the tech giant has fallen in line alongside Google, Mozilla and Microsoft in deprecating the SHA-1 and older hash algorithms. “These changes...
JVN#67520407: EasyCTF vulnerable to arbitrary file creation
EasyCTF is a server side CGI used to score CTF Capture The Flag. EasyCTF contains a vulnerability that may allow a remote attacker to create arbitrary files CWE-22. Impact An arbitrary file created by an attacker may result in arbitrary code being executed on the server. Solution Update the...
Microsoft Shuts Down Patch Tuesday Advanced Notifications
Microsoft today pulled the plug on its Advanced Notification Service ANS, offering it going forward only to paying Premier customers. ANS preceded the release of Microsoft’s monthly Patch Tuesday security bulletins; on the Thursday prior, Microsoft would provide users via its security website a...
SUSE-SU-2015:0427-1 Recommended update for xorg-x11-server
This collective update for xorg-x11-server provides the following fixes: Fix a segmentation fault that can occur when X11 packets are forwarded between a client and a server with different endianess. bnc874903 Free software cursor backing pixmap when transition between screens. This fixes a crash...
Mixed Reviews on Microsoft myBulletins Patch Service
Microsoft today released its new myBulletins service, an interface where IT administrators can customize security patch update information. While providing users with a slick GUI that allows for extensive filtering of patch information by the products in use inside an enterprise or small company,...
samba4 security update
CentOS Errata and Security Advisory CESA-2013:1543 Updated samba4 packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...
Fedora Update for community-mysql FEDORA-2013-19654
Check for the Version of community-mysql OpenVAS Vulnerability Test Fedora Update for community-mysql FEDORA-2013-19654 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
spice-server security update
0.12.0-12.el64.3 - Fixes an abort on unsafe client ring access Resolves: rhbz986298...
