PT-2016-2810

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.3 Description The issue is related to a password hashing error in the ssh network protocol. When SHA256 or SHA512 are used for user password hashing, a timing difference in responses can be leveraged by remote...

MGASA-2016-0097 Updated graphite2 package fixes security vulnerabilities

Updated graphite2 packages fix security vulnerabilities: Multiple security flaws were found in the graphite2 font library. A web page or document containing malicious content could cause an application using graphite2 to crash or, potentially, execute arbitrary code with the privileges of the use...

MGASA-2016-0087 Updated drupal packages fix security vulnerabilities

Updated drupal packages fix security vulnerabilities: The drupal package has been update to version 7.43, which fixes several security issues and other bugs. See the upstream advisory and release notes for details...

Debian DLA-437-1 : clamav version update

Upstream published version 0.99. This update updates sqeeze-lts to the latest upstream release in line with the approach used for other Debian releases. The changes are not strictly required for operation, but users of the previous version in Squeeze may not be able to make use of all current vir...

openSUSE Security Update : LibreOffice and related libraries (openSUSE-2016-273)

This update for LibreOffice and some library dependencies cmis-client, libetonyek, libmwaw, libodfgen, libpagemaker, libreoffice-share-linker, mdds, libwps fixes the following issues : Changes in libreoffice : - Provide l10n-pt from pt-PT - boo945047 - LO-L3: LO is duplicating master pages,...

[SECURITY] [DLA 437-1] clamav version update

Package : clamav Version : 0.99+dfsg-0+deb6u1 Debian Bug : 813894 Upstream published version 0.99. This update updates sqeeze-lts to the latest upstream release in line with the approach used for other Debian releases. The changes are not strictly required for operation, but users of the previous...

SUSE-SU-2016:0585-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.53 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel allowed local users to bypass intended AFUNIX socket permissions ...

SUSE-SU-2016:0564-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - update to Firefox 38.6.1 ESR bsc967087 MFSA 2016-14/CVE-2016-1523 bmo1246093 Vulnerabilities in Graphite 2...

MGASA-2016-0064 Updated libxmp packages fix security vulnerability

The libxmp package has been updated to version 4.3.11, fixing several bugs, including possible crashes when loading corrupted input data. See the upstream changelog for details...

PT-2018-12657

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha Description An issue was discovered in mspack/chmd.c where it does not reject blank CHM filenames. Recommendations For versions prior to 0.7alpha, update to version 0.7alpha or later to resolve the issue. A...

PT-2016-3431 · Apache +5 · Apache Tomcat +5

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.0.M1 through 9.0.0.M9 Apache Tomcat versions 8.5.0 through 8.5.4 Apache Tomcat versions 8.0.0.RC1 through 8.0.36 Apache Tomcat versions 7.0.0 through 7.0.70 Apache Tomcat versions 6.0.0 through 6.0.45 Description: T...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 385-2] isc-dhcp regression update

Package : isc-dhcp Version : 4.1.1-P1-15+squeeze10 CVE ID : CVE-2015-8605 Debian Bug : 810875 With the previous upload of the isc-dhcp package to Debian Squeeze LTS two issues got introduced into LTS that are resolved by this upload. 1 CVE-2015-8605 had only been resolved for the LDAP variant of...

MGASA-2016-0010 Updated openvpn packages fix security vulnerability

OpenVPN versions before 2.3.9 contain an out of bounds read error in resolveremote in the file socket.c. With both IPv4 and IPv6 connections, OpenVPN will read a struct sockaddrin6, but in the IPv4 case the data structure is smaller than in the IPv6 case. The openvpn package has been updated to...

MGASA-2016-0009 Updated mariadb packages fix security vulnerability

The mariadb package has been updated to version 10.0.23. An issue with client-side SSL certificate verification has been fixed, as have several other bugs. See the upstream release notes for more details...

Security update for samba, ldb, talloc, tdb, tevent (important)

This update for ldb, samba, talloc, tdb, tevent fixes the following issues: ldb was updated to 1.1.24. + Fix ldap \00 search expression attack dos; cve-2015-3223; bso11325 + Fix remote read memory exploit in ldb; cve-2015-5330; bso11599 + Move ldbunpackdata into ldbmodule.h for testing + Fix...

SUSE-SU-2015:2304-1 Security update for ldb, samba, talloc, tdb, tevent

This update for ldb, samba, talloc, tdb, tevent fixes the following security issues: - ldb was updated to version 1.1.24. + Fix ldap \00 search expression attack dos; CVE-2015-3223; bso11325 + Fix remote read memory exploit in ldb; CVE-2015-5330; bso11599 + Move ldbunpackdata into ldbmodule.h for...

PT-2015-2983 · Mariadb +7 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.46 and earlier MariaDB versions prior to 5.5.47 MariaDB versions 10.0.x prior to 10.0.23 MariaDB versions 10.1.x prior to 10.1.10 Description: The issue is related to errors in the Optimizer component of the MySQL...

SUSE-SU-2015:2216-1 Security update for java-1_7_0-ibm

The java-170-ibm package was updated to version 7.0-9.20 to fix several security and non security issues: - bnc955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844...

GANMA! App for iOS fails to verify SSL server certificates

Overview GANMA! App for iOS provided by COMICSMART INC. fails to verify SSL server certificates. Yuji Tounai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attack may allow an attacker t...