CentOS 5 : openssl (CESA-2015:1197) (Logjam)

Updated openssl packages that fix three security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available fo...

openssl security update

CentOS Errata and Security Advisory CESA-2015:1197 Updated openssl packages that fix three security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...

Amazon Linux AMI : python27 (ALAS-2015-552)

It was discovered that multiple Python standard library modules implementing network protocols such as httplib or smtplib failed to restrict sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of memory.CVE-2013-1752 ...

Medium: python27

Issue Overview: It was discovered that multiple Python standard library modules implementing network protocols such as httplib or smtplib failed to restrict sizes of server responses. A malicious server could cause a client using one of the affected modules to consume an excessive amount of...

openssl security update

CentOS Errata and Security Advisory CESA-2015:1115 Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Use sslsplit to sniff tls/ssl connections-vulnerability warning-the black bar safety net

I recently demonstrated how to use mitmproxty perform MiTM attack on HTTPSconnection. When mitmproxy work to support HTTP-based communication, it does not know the other based on the TLS/SSL traffic, such as FTPS, SSL SMTP through SSL IMAP or some other covering TLS/SSL Protocol. SSLsplit is a...

Debian DLA-198-1 : wireshark security update

The following vulnerabilities were discovered in the Squeeze's Wireshark version : CVE-2015-2188 The WCP dissector could crash CVE-2015-0564 Wireshark could crash while decypting TLS/SSL sessions CVE-2015-0562 The DEC DNA Routing Protocol dissector could crash CVE-2014-8714 TN5250 infinite loops...

[SECURITY] Fedora 22 Update: mingw-gnutls-3.3.14-1.fc22

GnuTLS TLS/SSL encryption library. This library is cross-compiled for MinGW...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.0 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.0, and fix multiple security issues, several bugs, and add various enhancements, are now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact...

DLA-198-1 wireshark - security update

Bulletin has no description...

PT-2015-1091

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 5.0u81, 6u91, 7u76, and 8u40 IBM SSL/TLS implementations affected versions not specified Description The issue affects the integrity of data and is related to the Beans component in Oracle Java SE, allowing remote...

Oracle Linux 5 : openssl (ELSA-2015-0800)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0800 advisory. - fix CVE-2014-8275 without introduction of CVE-2015-0286 - various certificate fingerprint issues - fix CVE-2015-0204 - remove support for RSA ephemer...

Moderate: Red Hat Security Advisory: openssl security update

Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

PT-2015-4497

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server versions 6.0 through 6.0.0.73-ISS-ITDS-IF0073 IBM Tivoli Directory Server versions 6.1 through 6.1.0.66-ISS-ITDS-IF0066 IBM Tivoli Directory Server versions 6.2 through 6.2.0.42-ISS-ITDS-IF0042 IBM Tivoli Directory...

openssl security update

CentOS Errata and Security Advisory CESA-2015:0716 Updated openssl packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS ba...

SuSE 11.3 Security Update : wireshark (SAT Patch Number 10279)

wireshark has been updated to version 1.10.12 to fix six security issues : - The WCCP dissector could crash. bnc912365. CVE-2015-0559 / CVE-2015-0560 - The LPP dissector could crash. bnc912368. CVE-2015-0561 - The DEC DNA Routing Protocol dissector could crash. bnc912369. CVE-2015-0562 - The SMTP...

Moderate: Red Hat Security Advisory: rhevm-spice-client security and bug fix update

Updated rhevm-spice-client packages that fix two security issues and several bugs are now available for Red Hat Enterprise Virtualization Manager 3. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

openSUSE Security Update : wireshark (openSUSE-SU-2015:0113-1)

This update fixes the following security issues : + The WCCP dissector could crash wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 boo912365 + The LPP dissector could crash. wnpa-sec-2015-02 CVE-2015-0561 boo912368 + The DEC DNA Routing Protocol dissector could crash. wnpa-sec-2015-03 CVE-2015-0562...

Wireshark Multiple Denial-of-Service Vulnerabilities -01 (Jan 2015) - Windows

Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wireshark Multiple Denial-of-Service Vulnerabilities -01 (Jan 2015) - Mac OS X

Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...