Threat Outbreak Alert RuleID20950: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43424 First Published: 2016 February 5 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20950 may contain the following files: Name |...

AIX OpenSSL Advisory : openssl_advisory16.asc (SLOTH)

The remote AIX host has a version of OpenSSL installed that is affected by a collision-based forgery vulnerability, known as SLOTH Security Losses from Obsolete and Truncated Transcript Hashes, in the TLS protocol due to accepting RSA-MD5 signatures in the server signature within the TLS 1.2...

Threat Outbreak Alert RuleID20931: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43418 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20931 may contain the following files: Name |...

Threat Outbreak Alert RuleID20930: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43417 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20930 may contain the following files: Name |...

Threat Outbreak Alert RuleID20918: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43412 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20918 may contain the following files: Name |...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-38.6.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

DLA-410-1 openjdk-6 - security update

Bulletin has no description...

Threat Outbreak Alert RuleID20892: Email Messages Distributing Malicious Software on February 3, 2016

Medium Alert ID: 43396 First Published: 2016 February 3 20:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20892 may contain the following files: Name |...

RHEL 5 : java-1.7.0-ibm (RHSA-2016:0100) (SLOTH)

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2016:0099)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0099 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes...

openSUSE Security Update : seamonkey (openSUSE-2016-126) (SLOTH)

SeaMonkey was updated to 2.40 boo959277 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature - CVE-2015-7201/CVE-2015-7202: Miscellaneous memory safety hazards - CVE-2015-7204: Cra...

Threat Outbreak Alert RuleID20866: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43380 First Published: 2016 February 2 20:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20866 may contain the following files: Name |...

Threat Outbreak Alert RuleID20861: Email Messages Distributing Malicious Software on February 3, 2016

Medium Alert ID: 43377 First Published: 2016 February 2 20:23 GMT Last Updated: 2016 February 4 13:21 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20861...

Threat Outbreak Alert RuleID20857: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43368 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20857 may contain the following files: Name |...

Threat Outbreak Alert RuleID20849: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43362 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20849 may contain the following files: Name |...

Critical: Red Hat Security Advisory: java-1.7.1-ibm security update

Updated java-1.7.1-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Critical: Red Hat Security Advisory: java-1.8.0-ibm security update

Updated java-1.8.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: java-1.6.0-ibm security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...