Security fix for the ALT Linux 10 package libxml2 version 1:2.9.4.0.12.e905-alt1

March 3, 2017 Dmitry V. Levin 1:2.9.4.0.12.e905-alt1 - v2.9.3-5-g65112cb - v2.9.4-12-ge905f08 fixes: CVE-2016-1833, CVE-2016-1834, CVE-2016-1835, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, CVE-2016-1840, CVE-2016-3627, CVE-2016-3705, CVE-2016-4449, CVE-2016-4483, CVE-2016-4658,...

Information disclosure

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

Debian DLA-703-1 : libdatetime-timezone-perl new upstream version

This update includes the changes in tzdata 2016i for the Perl bindings. For the list of changes, see DLA-702-1. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.58-1+2016i. We recommend that you upgrade your libdatetime-time zone-perl packages. NOTE: Tenable Network Security h...

Unspecified Vulnerability in Oracle Retail Xstore Payment Component

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. Oracle Retail Xstore Payment is one of the retail point-of-service payment management components. A security vulnerability exists in Oracle Retail Xstore Payment version 1.x, which can be exploited...

Debian DLA-645-1 : bind9 security update

CVE-2016-2775 lwresd crash with long query name Backport of upstream commit 38cc2d14e218e536e0102fa70deef99461354232. CVE-2016-2776 assertion failure due to unspecified crafted query Fix based on 43139-9-9.patch from ISC. For Debian 7 'Wheezy', these problems have been fixed in version...

Debian Security Advisory DSA 3680-1 (bind9 - security update)

Two vulnerabilities were reported in BIND, a DNS server. CVE-2016-2775 The lwresd component in BIND which is not enabled by default could crash while processing an overlong request name. This could lead to a denial of service. CVE-2016-2776 A crafted query could crash the BIND name server daemon,...

Debian DLA-572-1 : icedove security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 1:45.2.0-2deb7u1. We...

Debian DSA-3626-1 : openssh - security update

Eddie Harari reported that the OpenSSH SSH daemon allows user enumeration through timing differences when trying to authenticate users. When sshd tries to authenticate a non-existing user, it will pick up a fixed fake password structure with a hash based on the Blowfish algorithm. If real users...

Apache TomEE Version 1.x Detection

Binary data 9321.prm...

[SECURITY] [DLA 455-1] asterisk security update

Package : asterisk Version : 1:1.8.13.1dfsg1-3+deb7u4 CVE ID : CVE-2014-2286 CVE-2014-4046 CVE-2014-6610 CVE-2014-8412 CVE-2014-8418 CVE-2015-3008 Debian Bug : 741313 762164 771463 782411 CVE-2014-6610 Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6...

Security fix for the ALT Linux 8 package dhcpcd version 1:6.10.1-alt1

Jan. 25, 2016 Mikhail Efremov 1:6.10.1-alt1 - Patches from upstream: + Don't allow blank hostname. + Fix CVE-2014-7913. - Drop obsoleted patch. - Updated to 6.10.1...

IBM WebSphere MQ Light Denial of Service Vulnerability

IBM WebSphere MQ Light is an IBM Bluemix-based messaging service from IBM. A security vulnerability exists in version 1.x of IBM WebSphere MQ Light prior to 1.0.2. A remote attacker could exploit the vulnerability to cause a denial of service...

DLA-362-1 dhcpcd - security update

Bulletin has no description...

Threat Outbreak Alert RuleID19449: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 42125 First Published: 2015 November 17 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19449 may contain the following files: Name |...

Content Injection via TileJSON attribute

Overview Versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 of mapbox.js are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios. If L.mapbox.map or L.mapbox.tileLayer are used to load untrusted TileJSON content from a non-Mapbox URL, it is possible for a malicious use...

Threat Outbreak Alert RuleID17269: Email Messages Distributing Malicious Software on August 16, 2015

Medium Alert ID: 40535 First Published: 2015 August 17 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17269 may contain the following files: Name |...

OpenSSH 7.0 Fixes Four Flaws

A new version of OpenSSH has been released, fixing four security vulnerabilities and a number of non-security related bugs. OpenSSH 7.0 includes patches for a use-after-free vulnerability and three other flaws, two of which only affect Portable OpenSSH. The maintainers of the software also gave...

Threat Outbreak Alert RuleID16654: Email Messages Distributing Malicious Software on July 14, 2015

Medium Alert ID: 39926 First Published: 2015 July 14 16:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16654 may contain the following files: Name | Siz...