SUSE-SU-2015:1091-1 Security update for postgresql91

This update provides PostgreSQL 9.1.18, which brings fixes for security issues and other enhancements. The following vulnerabilities have been fixed: CVE-2015-3165: Avoid possible crash when client disconnects. bsc931972 CVE-2015-3166: Consistently check for failure of the printf. bsc931973...

Legal Robot: No valid SPF record

After multiple DNS changes, security researcher discovered that SPF records were not carried over properly between migrations...

PT-2016-7111 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.0 Description: The issue is related to the mismanagement of locks during certain migrations in the performance subsystem of the Linux kernel. This allows local users to gain privileges via a crafted applicatio...

CVE-2015-0180

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors...

Design/Logic Flaw

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors...

CVE-2015-0180

The IBM InfoSphere Information Server Connector Migration Tool (affecting 8.1–11.3) allows a user with a limited role to create/modify/delete certain jobs they should not access. The root cause is a rights/permission validation flaw within the Connector Migration Tool that bypasses intended restr...

PT-2015-1380

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.1 through 11.3 Description The issue is related to insufficient access control in the Connector Migration Tool component, allowing remote authenticated users to bypass intended restrictions. This ca...

CVE-2015-0180: Improper Access Control

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors...

Important: Red Hat Security Advisory: java-1.5.0-ibm security update

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.250.2 - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077389 CVE-2015-3331 2.6.39-400.250.1 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807440 CVE-2015-2150 - xen-blkfront: fix accounting of reqs when...

Red Hat Enterprise Virtualization Manager Very Long Snapshot Chain Denial of Service Vulnerability

Red Hat Enterprise Virtualization Manager is an enterprise virtualization management application solution from Red Hat. Red Hat Enterprise Virtualization Manager failed to set the correct snapshot creation permissions during a hot storage migration between two domains, allowing an authenticated...

CVE-2015-0237

Red Hat Enterprise Virtualization RHEV Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service prevent host start by creating a long snapshot chain...

CVE-2015-0237: Undefined Security Weakness

Red Hat Enterprise Virtualization RHEV Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service prevent host start by creating a long snapshot chain...

PT-2015-4534 · Red Hat · Red Hat Enterprise Virtualization

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Virtualization RHEV Manager versions prior to 3.5.1 Description: The issue allows remote authenticated users to cause a denial of service by creating a long snapshot chain during live storage migration between domains, as t...

vdsm: Users attempting a live storage migration create snapshot without snapshot creation permissions

It was discovered that the permissions to allow or deny snapshot creation were ignored during live storage migration of a VM's disk between storage domains. An attacker able to live migrate a disk between storage domains could use this flaw to cause a denial of service...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.1 update

Red Hat Enterprise Virtualization Manager 3.5.1 is now available. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links ...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the subscription-manager-migration-1.1.23.1 package in the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the subscription-manager-migration-1.0.24.1 package in the Red Hat Enterprise Linux operating system can lead to a breach of protected information. This vulnerability can be exploited remotely...

RHEL 6 : qemu-kvm-rhev (RHSA-2015:0868)

Updated qemu-kvm-rhev packages that fix one security issue and one bug are now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

CentOS 6 : qemu-kvm (CESA-2015:0867)

An updated qemu-kvm package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...