Fedora 20 : wordpress-4.2.2-1.fc20 (2015-6790)

WordPress 4.2 'Powell' - Upstream announcement https://wordpress.org/news/2015/04/powell/ WordPress 4.2.1 Security Release - Upstream announcement https://wordpress.org/news/2015/04/wordpress-4-2-1/ WordPress 4.2.2 Security and Maintenance Release - Upstream announcement...

SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:0281-1)

This strongswan update fixes the following security and non security issues. - Disallow brainpool elliptic curve groups in fips mode bnc856322. - Applied an upstream fix for a denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellma...

SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1606-1)

This update fixes the following security issues in xen : - CVE-2012-5513: XENMEMexchange may overwrite hypervisor memory XSA-29 - CVE-2012-5515: Several memory hypercall operations allow invalid extent order values XSA-31 Also the following bugs have been fixed and upstream patches have been...

CVE-2015-2704

realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...

openSUSE Security Update : libreoffice (openSUSE-2015-357)

LibreOffice was updated to 4.3.7 to fix one security issue and a number of bugs. The following vulnerability was fixed : - CVE-2015-1774: Specially crafted HWP documents could have led to an application crash or possibly the execution of arbitrary code boo919409 The following non-security bugs we...

Updated testdisk packages fix security vulnerabilities

Updated testdisk packages fix security vulnerabilities: The testdisk package has been updated to version 7.0, fixing several security issues and a couple of bugs. See the upstream announcement for more details...

Barracuda Networks Web Filter Security Bypass Vulnerability

Barracuda Networks Web Filter is a web security gateway from Barracuda Networks USA. The gateway supports content filtering, advanced policies, and web threat protection. A security vulnerability exists in Barracuda Networks Web Filter versions prior to 8.1.0.005, which is caused by the program...

Fedora 22 : proftpd-1.3.5-6.fc22 (2015-7164)

Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients Upstream report: http://bugs.proftpd.org/showbug.cgi?id=4169 Note that modcopy is not loaded/enabled b...

Debian DLA-208-1 : tzdata new upstream version

Upstream published version 2015d, removing the DST rule for Egypt starting in 2015. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] [DLA 208-1] tzdata new upstream version

Package : tzdata Version : 2015d-0+deb6u1 Upstream published version 2015d, removing the DST rule for Egypt starting in 2015. Aurelien Jarno GPG: 4096R/1DDD8C9B [email protected] http://www.aurel32.net...

DLA-208-1 tzdata - new upstream version

Bulletin has no description...

qemu security update

CentOS Errata and Security Advisory CESA-2015:0867 An updated qemu-kvm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS...

Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2575-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2575-1 advisory. Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to...

Fedora 21 : ceph-deploy-1.5.23-1.fc21 (2015-5981)

Update to ceph-deploy 1.5.23. This fixes CVE-2015-3010 keyring permissions are world readable in ceph. See upstream changelog for detailed changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Debian DSA-3229-1 : mysql-5.5 - security update

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.43. Please see the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory for further details : -...

Debian DLA-201-1 : tzdata new upstream version

Upstream published version 2015c, fixing the DST rule for Egypt. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Moderate: Red Hat Security Advisory: python-django-horizon and python-django-openstack-auth update

Updated python-django-horizon and python-django-openstack-auth packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security...

Fedora 21 : tor-0.2.5.11-1.fc21 (2015-4725)

Update to upstream release 0.2.5.11. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

openssl-fips security update

1.0.1m-2.0.1 - update to upstream 1.0.1m - update to fips canister 2.0.9 - regenerated below patches openssl-1.0.1-beta2-rpmbuild.patch openssl-1.0.1m-rhcompat.patch openssl-1.0.1m-ecc-suiteb.patch openssl-1.0.1m-fips-mode.patch openssl-1.0.1m-version.patch openssl-1.0.1m-evp-devel.patch...

Fedora 20 : libssh2-1.5.0-1.fc20 (2015-3791)

This update, to the current upstream release version, contains numerous bug fixes and enhancements as described in the RELEASE-NOTES file. These include a security fix for CVE-2015-1782 : A malicious attacker could man in the middle a real server and cause libssh2-using clients to crash denial of...