SUSE-SU-2016:0641-1 Security update for openssl

This update for compat-openssl098 fixes various security issues and bugs: Security issues fixed: - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher...

SUSE-SU-2015:0547-1 Security update for compat-openssl097g

OpenSSL was updated to fix several security issues: CVE-2015-4000: The Logjam Attack weakdh.org has been addressed by rejecting connections with DH parameters shorter than 1024 bits. 2048-bit DH parameters are now generated by default. CVE-2015-1789: An out-of-bounds read in X509cmptime was fixed...

CVE-2015-2704

realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...

Debian DSA-2091-1 : squirrelmail - No user-specific token implemented

SquirrelMail, a webmail application, does not employ a user-specific token for webforms. This allows a remote attacker to perform a Cross Site Request Forgery CSRF attack. The attacker may hijack the authentication of unspecified victims and send messages or change user preferences among other...

Debian Security Advisory DSA 622-1 (htmlheadline)

The remote host is missing an update to htmlheadline announced via advisory DSA 622-1. OpenVAS Vulnerability Test $Id: deb6221.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 622-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 002-1 (fsh)

The remote host is missing an update to fsh announced via advisory DSA 002-1. OpenVAS Vulnerability Test $Id: deb0021.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 002-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Low: Red Hat Bug Fix Advisory: conga bug fix update

Updated conga packages that provide critical bug fixes are now available. The Conga package is a web-based administration tool for remote cluster and storage management. This erratum applies the following bug fixes: - The borrowed Zope packages used by Conga have been patched to eliminate a...

ecurity Advisory: Cisco IOS HTTP Server Query Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco IOS HTTP Server Query Vulnerability Revision 1.0 For public release 2000 October 25 at 08:00 US/Pacific UTC+0700 Summary A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is...

Cayman 3220H DSL Router Software Update and New Bonus Attack

Cayman 3220H DSL Router Software Update and New Bonus Attack Cayman has released a new software image version 5.5.0 build r1 to fix the DoS attack I reported a couple weeks ago. Details on the attack can be found here - http://www.securityfocus.com/vdb/bottom.html?vid=1219 You can get the new...