1070 matches found
openSUSE: Security Advisory for kernel (openSUSE-SU-2016:0537-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: rabbitmq-server security and bugfix update
Updated rabbitmq-server packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
Security update for postgresql94 (important)
This update for postgresql94 fixes the following issues: - Security and bugfix release 9.4.6: IMPORTANT Users of version 9.4 will need to reindex any jsonbpathops indexes they have created, in order to fix a persistent issue with missing index entries. Fix infinite loops and buffer-overrun proble...
openSUSE Security Update : postgresql93 (openSUSE-2016-253)
This update for postgresql93 fixes the following issues : - Security and bugfix release 9.3.11 : - Fix infinite loops and buffer-overrun problems in regular expressions CVE-2016-0773, boo966436. - Fix regular-expression compiler to handle loops of constraint arcs CVE-2007-4772. - Prevent certain...
SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2016:0539-1)
This update for postgresql93 fixes the following issues : - Security and bugfix release 9.3.11 : - Fix infinite loops and buffer-overrun problems in regular expressions CVE-2016-0773, bsc966436. - Fix regular-expression compiler to handle loops of constraint arcs CVE-2007-4772. - Prevent certain...
Security update for postgresql93 (important)
This update for postgresql93 fixes the following issues: - Security and bugfix release 9.3.11: Fix infinite loops and buffer-overrun problems in regular expressions CVE-2016-0773, boo966436. Fix regular-expression compiler to handle loops of constraint arcs CVE-2007-4772. Prevent certain PL/Java...
Upgrade Tomcat to the latest 8.0.x release
h3. Summary We are currently on 8.0.17 and have already been bitten by a bug in it: https://bz.apache.org/bugzilla/showbug.cgi?id=57476 We should upgrade to the latest to get the latest bugfixes. Also, there have been a number of recent CVEs involving Tomcat, most of which involve SecurityManager...
Upgrade to version 3.2.2 of apache commons-collections
quote This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for...
Upgrade to version 3.2.2 of apache commons-collections
quote This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for...
Upgrade to version 3.2.2 of apache commons-collections
quote This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for...
Upgrade to version 3.2.2 of apache commons-collections
quote This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for...
Upgrade to version 3.2.2 of apache commons-collections
quote This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for...
Upgrade to version 3.2.2 of apache commons-collections
quote This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for...
openSUSE Security Update : ffmpeg (openSUSE-2015-821)
The ffmpeg package was updated to version 2.8.2 to fix the following security and non security issues : - CVE-2015-8216: Fixed the ljpegdecodeyuvscan function in libavcodec/mjpegdec.c which could cause a denial of service out-of-bounds array access bnc955346. - CVE-2015-8217: Fixed the...
Unbreakable Enterprise kernel security and bugfix update
kernel-uek 3.8.13-118 - Update ql2400/ql2500 firmware version to 8.02.00 Dan Duval Orabug: 22159505 - update qla2400/ql2500 firmware version to 8.02.00 Dan Duval Orabug: 22159505 3.8.13-117 - virtio-net: drop NETIFFFRAGLIST Jason Wang Orabug: 22145600 CVE-2015-5156 - team: check return value of...
SUSE SLED12 / SLES12 Security Update : postgresql93 (SUSE-SU-2015:1821-1)
The PostreSQL database postgresql93 was updated to the bugfix release 9.3.10 : Security issues fixed : - CVE-2015-5289, bsc949670: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. - CVE-2015-5288, bsc949669: The crypt...
SUSE-SU-2015:1821-1 Security update for postgresql93
The PostreSQL database postgresql93 was updated to the bugfix release 9.3.10: Security issues fixed: - CVE-2015-5289, bsc949670: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service. - CVE-2015-5288, bsc949669: The crypt...
SUSE-SU-2015:1818-1 Security update for php53
This update of PHP5 brings several security fixes. Security fixes: CVE-2015-6831: A use after free vulnerability in unserialize has been fixed which could be used to crash php or potentially execute code. bnc942291 bnc942294 bnc942295 CVE-2015-6836: A SOAP serializefunctioncall type confusion...
Total Commander 8.52 - Overwrite Buffer Overflow (SEH)
Total Commander 8.52 - Overwrite Buffer Overflow SEH ''' Exploit Title: Total Commander 32bit SEH Overwrite. Date: 8/27/2015 Exploit Author: UnN0n Software Vendor: http://www.ghisler.com/ Software Link: http://www.ghisler.com/download.htm Version: 8.52 Tested on: Windows 8 x6464 BIT Info: EAX...
Total Commander 8.52 - Overwrite Buffer Overflow (SEH)
''' Exploit Title: Total Commander 32bit SEH Overwrite. Date: 8/27/2015 Exploit Author: UnN0n Software Vendor: http://www.ghisler.com/ Software Link: http://www.ghisler.com/download.htm Version: 8.52 Tested on: Windows 8 x6464 BIT Info: EAX 00106541 ECX FFFFFEFA EDX 0031E941 EBX 04921F64 ESP...