DLA-246-2 linux-2.6 - security update

Bulletin has no description...

Fedora 22 : armacycles-ad-0.2.8.3.3-1.fc22 (2015-9528)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

Fedora 21 : armacycles-ad-0.2.8.3.3-1.fc21 (2015-9504)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

Fedora 21 : python-tornado-3.2.2-1.fc21 (2015-8606)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-1759

CVE-2015-1759 is a memory-corruption remote code execution vulnerability in Microsoft Office, specifically in the Office Compatibility Pack SP3, caused by improper handling of in-memory objects during parsing of crafted Office files. The flaw can allow an attacker to execute arbitrary code on a v...

CVE-2015-1759

Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Fedora 22 : python-tornado-3.2.2-1.fc22 (2015-9143)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

SUSE-RU-2015:1021-1 Recommended update for freetype2

This update for freetype2 adjusts the patch that fixed CVE-2014-9671 for better backwards compatibility. As the PCF format doesn't have an official specification, we have to exactly follow X11's pcfWriteFont and pcfReadFont functions' behavior...

Open-Source Disk Encryption for Windows: LibreCrypt

LibreCrypt is an Open-Source “on-the-fly” transparent disk encryption for Windows both 32 and 64 bit. LUKS compatible – formerly DoxBox. This software can create “virtual disks” on your computer – anything written to these disks is automatically encrypted before being stored on your computer’s ha...

Low: Red Hat Bug Fix Advisory: jboss-ec2-eap enhancement update for EAP 6.4.1

Updated jboss-ec2-eap packages that add an enhancement are now available for Red Hat JBoss Enterprise Application Platform 6.4.1 on Red Hat Enterprise Linux 6. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java EE applications. It is based on JBoss Application Server 7 and...

Portable Penetration Testing Distribution for Windows: PentestBox

PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 70% of penetration testing distributions users uses windows and provides an efficient platform for Penetration Testing on windows. It provides all security tools as a...

Fedora 20 : ca-certificates-2015.2.4-1.0.fc20 (2015-7714)

This is an update to the set of CA certificates released with NSS version 3.18.1 However, the package modifies the CA list to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for details. If you prefer to use the unchanged list provided by Mozilla,...

WakeMeOnLan v1.71 - Turn on computers on your network with Wake-on-LAN packet

This utility allows you to easily turn on one or more computers remotely by sending Wake-on-LAN WOL packet to the remote computers. When your computers are turned on, WakeMeOnLan allows you to scan your network, and collect the MAC addresses of all your computers, and save the computers list into...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2013:1151-1)

The SUSE Linux Enterprise 11 Service Pack 2 kernel was respun with the 3.0.80 update to fix a severe compatibility problem with kernel module packages KMPs like e.g. drbd. An incompatible ABI change could lead to those modules not correctly working or crashing on loading and is fixed by this...

Debian DSA-3261-1 : libmodule-signature-perl - security update

Multiple vulnerabilities were discovered in libmodule-signature-perl, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-3406 John Lightsey discovered that Module::Signature could parse the unsigned...

Debian Security Advisory DSA 3261-1 (libmodule-signature-perl - security update)

Multiple vulnerabilities were discovered in libmodule-signature-perl, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-3406 John Lightsey discovered that Module::Signature could parse the unsigned portio...

Fedora 21 : ca-certificates-2015.2.4-1.0.fc21 (2015-7892)

This is an update to the set of CA certificates released with NSS version 3.18.1 However, the package modifies the CA list to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for details. If you prefer to use the unchanged list provided by Mozilla,...

Ubuntu 12.04 LTS : openssl update (USN-2606-1)

For compatibility reasons, Ubuntu 12.04 LTS shipped OpenSSL with TLSv1.2 disabled when being used as a client. This update re-enables TLSv1.2 by default now that the majority of problematic sites have been updated to fix compatibility issues. For problematic environments, TLSv1.2 can be disabled...