Critical: Red Hat Security Advisory: java-1.7.1-ibm security update

Updated java-1.7.1-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Critical: Red Hat Security Advisory: java-1.8.0-ibm security update

Updated java-1.8.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: java-1.6.0-ibm security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2884-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2884-1 advisory. Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploi...

USN-2884-1: OpenJDK 7 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

Threat Outbreak Alert RuleID20773: Email Messages Distributing Malicious Software on February 1, 2016

Medium Alert ID: 43357 First Published: 2016 February 1 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20773 may contain the following files: Name |...

Threat Outbreak Alert RuleID20833: Email Messages Distributing Malicious Software on January 30, 2016

Medium Alert ID: 43351 First Published: 2016 February 1 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20833 may contain the following files: Name |...

Threat Outbreak Alert RuleID20817: Email Messages Distributing Malicious Software on January 29, 2016

Medium Alert ID: 43334 First Published: 2016 January 29 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20817 may contain the following files: Name |...

Vulnerability in MD5 Signature and Hash Algorithm affects OpenSSL on AIX

IBM SECURITY ADVISORY First Issued: Fri Jan 29 15:43:20 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory16.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory16.asc...

Threat Outbreak Alert RuleID20819: Email Messages Distributing Malicious Software on January 29, 2016

Medium Alert ID: 43335 First Published: 2016 January 29 15:34 GMT Last Updated: 2016 February 2 13:28 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20819...

SUSE SLED11 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:0269-1) (SLOTH)

java-170-openjdk was updated to version 7u95 to fix 9 security issues. bsc962743 - CVE-2015-4871: Rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed - CVE-2015-7575: Further reduce use of MD5 SLOTH bsc960996 - CVE-2015-8126: Vulnerability in the AWT...

Threat Outbreak Alert RuleID20779: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43257 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20779 may contain the following files: Name |...

Threat Outbreak Alert RuleID20778: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43256 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20778 may contain the following files: Name |...

Threat Outbreak Alert RuleID20747: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43254 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20747 may contain the following files: Name |...

Threat Outbreak Alert RuleID20772: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43253 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20772 may contain the following files: Name |...

Threat Outbreak Alert RuleID20761: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 43250 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20761 may contain the following files: Name |...

Security update for Java7 (important)

Update OpenJDK to 7u95 / IcedTea 2.6.4 including the following fixes: Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8132210: Reinforce JMX collector internals - S8132988: Better printing dialogues - S8133962,...

Threat Outbreak Alert RuleID20734: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 43222 First Published: 2016 January 27 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20734 may contain the following files: Name |...