SUSE-SU-2017:2315-1 Security update for libreoffice

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer: - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc: - New...

Fedora 21 : unzip-6.0-20.fc21 (2015-2035)

Fix CVE-2014-8139 - CRC32 verification heap-based buffer overread 1174844 - Fix CVE-2014-8140 - out-of-bounds write issue in testcompreb 1174851 - Fix CVE-2014-8141 - getZip64Data out-of-bounds read issues 1174856 - Fix buffer overflow on long file sizes 1191136 - CVE-2014-9636 unzip:...

DLA-68-1 fex - security update

Bulletin has no description...

USN-2124-2: OpenJDK 6 regression

USN-2124-1 fixed vulnerabilities in OpenJDK 6. Due to an upstream regression, memory was not properly zeroed under certain circumstances which could lead to instability. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A vulnerability was discovered in...

Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities

from http://thomaspollet.blogspot.be/2013/11/Palo-Alto-XSS.html : A couple of bugs exist in Palo Alto Networks PANOS These issues have been fixed in PANOS 5.0.9 . Example html source code to CSRF POST a rogue cert : 1. PA: 2. 3. 4. 5. 6. ----------------------------- 7. Content-Disposition:...

Admidio 2.3.5 multiple defects and repair-vulnerability warning-the black bar safety net

Title Admidio 2.3.5 Multiple security vulnerabilities Author Stefan Schurtz Affected Software: Successfully tested on Admidio 2.3.5 Developer website: http://www.admidio.org/ Status: has been fixed Defect summary Admidio 2.3.5-containing XSS and SQLi flaws ================== Test //SQLi...

Multiple vulnerabilities in MantisBT

Vulnerability ID: HTB23045 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinmantisbt.html Product: MantisBT Vendor: www.mantisbt.org http://www.mantisbt.org/ Vulnerable Version: 1.2.7 and probably prior Tested Version: 1.2.7 Vendor Notification: 31 August 2011 Vulnerability...

Wireshark 1.6.1 and 1.4.8 Released

Wireshark 1.6.1 and 1.4.8 Released Wireshark 1.6.1 and 1.4.8 have been released. Installers for Windows, Mac OS X 10.5.5 and above Intel and PPC, and source code are now available. In 1.6.1 Two vulnerabilities have been fixed. See the advisory for details. Many other bugs have been fixed. For a...

Ubuntu Update for libvirt regression USN-1008-4

Ubuntu Update for Linux kernel vulnerabilities USN-1008-4 OpenVAS Vulnerability Test $Id: gbubuntuUSN10084.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for libvirt regression USN-1008-4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu Update for mysql-dfsg-5.0 regression USN-588-2

Ubuntu Update for Linux kernel vulnerabilities USN-588-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5882.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 regression USN-588-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for dhcp vulnerability USN-531-2

Ubuntu Update for Linux kernel vulnerabilities USN-531-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5312.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dhcp vulnerability USN-531-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Apache 1.3.26

I recently did a very brief and non-exhaustive security audit of Apache 1.3.26, and noticed some small potential bugs in some of the helper programs that come with the distribution. Apache maintainers have been notified, and the most serious of these bugs have been fixed in 1.3.27. I'm sending th...

FreeBSD-SN-02:06

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SN-02:06 Security Notice The FreeBSD Project Topic: security issues in ports Announced: 2002-10-10 I. Introduction Several ports in the FreeBSD Ports Collection are affected by...