[SECURITY] [DSA 4377-2] rssh regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4377-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2019 https://www.debian.org/security/faq -...

Debian DSA-4386-1 : curl - security update

Multiple vulnerabilities were discovered in cURL, an URL transfer library. - CVE-2018-16890 Wenxiang Qian of Tencent Blade Team discovered that the function handling incoming NTLM type-2 messages does not validate incoming data correctly and is subject to an integer overflow vulnerability, which...

Debian: Security Advisory (DSA-4386-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4382-1 : rssh - security update

Nick Cleaton discovered two vulnerabilities in rssh, a restricted shell that allows users to perform only scp, sftp, cvs, svnserve Subversion, rdist and/or rsync operations. Missing validation in the rsync support could result in the bypass of this restriction, allowing the execution of arbitrary...

Debian DSA-4379-1 : golang-1.7 - security update

A vulnerability was discovered in the implementation of the P-521 and P-384 elliptic curves, which could result in denial of service and in some cases key recovery. In addition this update fixes a vulnerability in 'go get', which could result in the execution of arbitrary shell commands. C Tenabl...

Debian DSA-4381-1 : libreoffice - security update

Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4381. T...

Debian DSA-4383-1 : libvncserver - security update

Pavel Cheremushkin discovered several vulnerabilities in libvncserver, a library to implement VNC server/client functionalities, which might result in the execution of arbitrary code, denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package...

Debian: Security Advisory (DSA-4383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4381-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in bash (CVE-2014-6277 CVE-2014-6278 CVE-2016-0634 CVE-2016-7543)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in bash. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in bash. Vulnerability Details CVEID: CVE-2014-6277 Description: GNU Bash could...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in curl

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in curl. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in curl. Vulnerability Details: CVEID: CVE-2016-7167 Description: libcurl could...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter have addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Fl...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in expat (CVE-2012-6702 CVE-2016-5300).

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in expat. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in expat. Vulnerability Details CVEID: CVE-2012-6702 Description: Expat, when use...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in X.Org libXrender (CVE-2016-7949 CVE-2016-7950)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in X.Org libXrender. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in X.Org libXrender. Vulnerability Details CVEID: CVE-2016-7949...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in bind (CVE-2016-9131 CVE-2016-9147 CVE-2016-9444)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in bind. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in bind. Vulnerability Details CVEID: CVE-2016-9131 Description: ISC BIND is...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in bind (CVE-2017-3135)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in bind. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in bind. Vulnerability Details CVEID: CVE-2017-3135 Description: ISC BIND is vulnerabl...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in sudo.

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in sudo. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in sudo. Vulnerability Details CVEID: CVE-2016-7032 Description: Sudo could allow ...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in libxml2 (CVE-2016-4658)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in libxml2. Vulnerability Details: CVEID: CVE-2016-4658 Description: The libxml2...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in openssh (CVE-2015-8325)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in openssh. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in openssh. Vulnerability Details CVEID: CVE-2015-8325 Description: OpenSSH could...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in libxml2 (CVE-2016-9318 CVE-2016-9597)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in libxml2. Vulnerability Details CVEID: CVE-2016-9318 Description: Libxml2 cou...