SUSE-SU-2016:0269-1 Security update for java-1_7_0-openjdk

java-170-openjdk was updated to version 7u95 to fix 9 security issues. bsc962743 - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT...

MGASA-2016-0024 Updated php packages fix security vulnerability

The php package has been updated to version 5.6.17, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...

MGASA-2016-0005 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 4.1.15 longterm kernel and fixes the following security issues: The rdsconncreate function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have...

SUSE-SU-2016:0008-1 Security update for libksba

The libksba package was updated to fix the following security issues: - Fixed an integer overflow, an out of bounds read and a stack overflow issues bsc926826...

SUSE-SU-2015:2168-1 Security update for java-1_7_1-ibm

The java-171-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844...

SUSE-SU-2015:2182-1 Security update for java-1_7_1-ibm

The java-171-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844...

SUSE-SU-2015:1958-1 Security update for flash-player

The flash-player package was updated to fix the following security issues: - Security update to 11.2.202.548 bsc954512: APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-7661,...

CentOS Update for nspr CESA-2015:1980 centos5

Check the version of nspr SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882321";...

SUSE-SU-2015:1875-2 Security update for java-1_7_0-openjdk

java-170-openjdk was updated to version 7u91 to fix 17 security issues. These security issues were fixed: - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability...

SUSE-SU-2015:1757-1 Security update for docker

docker was updated to version 1.8.3 to fix two security issues. These security issues were fixed: - CVE-2014-8178: Manipulated layer IDs could have lead to local graph poisoning bsc949660. - CVE-2014-8179: Manifest validation and parsing logic errors allowed pull-by-digest validation bypass...

MGASA-2015-0395 Updated php/php-timezonedb packages fix security vulnerabilities

The php package has been updated to version 5.6.14, which fixes two security issues in phar and several other bugs. See the upstream ChangeLog for more details...

Oracle: Security Advisory (ELSA-2015-1586)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2015-0381 Updated moodle packages fix security vulnerabilities

Updated moodle package fixes security vulnerabilities: In Moodle before 2.8.8, completed and graded lesson activity was not protected against making new attempts to answer some questions, so students could re-attempt answering questions in the lesson CVE-2015-5264. In Moodle before 2.8.8, users...

MGASA-2015-0338 Updated lighttpd packages fix CVE-2015-3200 & other bugs

Updated lighttpd packages fix security vulnerability: modauth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character CVE-2015-3200. The...

MGASA-2015-0323 Updated wireshark packages fix security vulnerabilities

The wireshark package has been updated to version 1.12.7, which fixes several security issues where a malformed packet trace could cause it to crash or go into an infinite loop, and fixes several other bugs as well. See the release notes for details...

MGASA-2015-0319 Updated php packages fix security vulnerabilities

The php package has been updated to version 5.5.28, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...

MGASA-2015-0309 Updated wordpress package fixes security vulnerability

The wordpress package has been updated to version 3.9.8, fixing three cross-site scripting issues CVE-2015-5732, CVE-2015-5733, CVE-2015-5734, a potential timing side-channel attack in Customizer CVe-2015-5730, an issue in Heartbeat where an attacker could lock a post from being edited...

SUSE-RU-2015:1477-1 Recommended update for compat-openssl097g

The compat-openssl097g package was updated to fix a regression in the security patch for CVE-2015-0287 that broke loading DSA keys from file. bsc937492...

SUSE-RU-2015:1469-1 Recommended update for openssl

This update of openssl fixes a regression caused by the security fix for CVE-2015-0287, after which DSA keys could occasionaly not loaded from disk. bsc937492...

MGASA-2015-0258 Updated php package fixes security vulnerability

Incorrect handling of paths with NULs CVE-2015-4598. OS command injection vulnerability in escapeshellarg CVE-2015-4642. Integer overflow in ftpgenlist resulting in heap overflow CVE-2015-4643. Segfault in phppgsqlmetadata CVE-2015-4644. PHP has been updated to version 5.5.26, which fixes multipl...