OPENSUSE-SU-2017:0916-1 Recommended update for geotiff

This geotiff version update to 1.4.2 fixes the following issues: - Update to 1.4.2 boo1029595 update to EPSG v8.9 database cleanups and security fixes - Small packaging cleanup - Switched download link to OSGeo server - Fix Group tag...

RHEL 7 : Red Hat Gluster Storage 3.2.0 (RHSA-2017:0486)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0486 advisory. Red Hat Gluster Storage is a software only scale-out storage solution that provides flexible and affordable unstructured data storage. It unifies dat...

Faraday v2.4 - Collaborative Penetration Test and Vulnerability Management Platform

Faraday is the Integrated Multiuser Risk Environment you were looking for! It maps and leverages all the knowledge you generate in real time, letting you track and understand your audits. Our dashboard for CISOs and managers uncovers the impact and risk being assessed by the audit in real-time...

March 2017 Preview of Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

March 2017 Preview of Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 The March 2017 Preview of Monthly Quality Rollup includes some new improvements and fixes for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 platforms. We recommend that you apply this quali...

M-Trends 2017: A View From the Front Lines

Every year Mandiant responds to a large number of cyber attacks, and 2016 was no exception. For our M-Trends 2017 report, we took a look at the incidents we investigated last year and provided a global and regional the Americas, APAC and EMEA analysis focused on attack trends, and defensive and...

March 14, 2017—KB4013198 (OS Build 10586.839)

None None...

MS17-014: Description of the security update for SharePoint Foundation 2013: March 14, 2017

MS17-014: Description of the security update for SharePoint Foundation 2013: March 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...

March 14, 2017—KB4013429 (OS Build 14393.953)

None None...

March 14, 2017—KB4012606 (OS Build 10240.17319)

None None...

Servicing stack update for Windows 10 Version 1607 and Windows Server 2016: March 14, 2017

None None...

Uncovering cross-process injection with Windows Defender ATP

Windows Defender Advanced Threat Protection Windows Defender ATP is a post-breach solution that alerts security operations SecOps personnel about hostile activity. As the nature of attacks evolve, Windows Defender ATP must advance so that it continues to help SecOps personnel uncover and address...

Fedora 24 : suricata (2017-f9f3a78148)

This is a new upstream feature and security release. Improvements include: bypass; pre-filter -- fast packet keywords; TLS improvements; ICS protocol additions: DNP3 CIP/ENIP; SHA1/SHA256 for file matching, logging & extraction; NIC offloading disabled by default; unix socket enabled by default;...

Update Rollup 16 for Azure Site Recovery

Describes the fixes that are included in Update Rollup 16 for Azure Site Recovery.IntroductionThis article describes the fixes that are included in Update Rollup 16 for Azure Site Recovery for the following:Microsoft Azure Site Recovery Provider version 5.1.2150.0Microsoft Azure Site Recovery...

SUSE-SU-2017:0555-1 Security update for util-linux

This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...

SUSE-SU-2017:0529-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation bsc1017308 - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped bsc1017310 - CVE-2016-10049: Corrupt RLE...

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 bsc1020905: Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution -...

SUSE-SU-2017:0490-1 Security update for java-1_7_0-openjdk

This update for java-170-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 bsc1020905: Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution -...

SUSE-SU-2017:0431-1 Security update for nodejs6

This update for nodejs6 fixes the following issues: New upstream LTS release 6.9.5. The embedded openssl sources were updated to 1.0.2k CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, bsc1022085, bsc1022086, bsc1009528 Other fixes: - Add basic check that Node.js loads successfully to spec file - New...

openSUSE Security Update : mupdf (openSUSE-2017-197)

This update for mupdf to version 1.10a fixes the following issues : These security issues were fixed : - CVE-2016-10132: NULL pointer dereference in regexp because of a missing check after allocating memory allowing for DoS bsc1019877. - CVE-2016-10133: Heap buffer overflow write in jsstackoverfl...

SUSE-SU-2017:0346-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Oracle Critical Patch Update of January 2017 bsc1020905 Upgrade to version jdk8u121 icedtea 3.3.0: - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution...