Fedora 22 : drupal7-views_bulk_operations-3.3-1.fc22 (2015-11318)

7.x-3.3 See SA-CONTRIB-2015-131 Changes since 7.x-3.2: - Fix security vulnerability, by AdamPS. - Remove an entitylabel workaround that core no longer needs. - Issue 2427381 by axel.rutz: Rules component lacks entity type - Issue 2418751 by anrikun: Archive action fails silently - Issue 2318273 b...

Fedora 22 : squashfs-tools-4.3-11.fc22 (2015-10750)

Security fix for CVE-2015-4645 / CVE-2015-4646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1258-1)

flash-player was updated to fix two security issues. These security issues were fixed : - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 AS3 implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of...

Debian DLA-276-1 : inspircd security update

Adam , upstream author of inspircd found the Debian patch that fixed CVE-2012-1836 was incomplete. Furthermore, it introduced an issue, since invalid dns packets caused an infinite loop. This upload corrects these problems. As of today, no CVEs has been assigned to these Debian-specific flaws. Fo...

Debian DLA-277-1 : libidn security update

Thijs Alkemade discovered that the Jabber server may pass an invalid UTF-8 string to libidn, the GNU library for Internationalized Domain Names IDNs. In the case of the Jabber server, this results in information disclosure, and it is likely that some other applications using libidn have similar...

SUSE SLED12 / SLES12 Security Update : augeas (SUSE-SU-2015:1249-1)

This update fixes an untrusted argument escaping problem CVE-2014-8119 : - new API - augescapename - which can be used to escape untrusted inputs before using them as part of path expressions - augmatch is changed to return properly escaped output Note that Tenable Network Security has extracted...

Fedora 21 : pcre-8.35-12.fc21 (2015-11019)

This release fixes two heap buffer overflows when compiling certain regular expressions: CVE-2015-3210 and CVE-2015-5073. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Debian DLA-273-1 : tidy security update

Fernando Muoz discovered a security issue on the HTML syntax checker and reformatter tidy. Tidy did not properly process specific character sequences, and a remote attacker could exploit this flaw to cause a DoS, or probably, execute arbitrary code. Two different CVEs were assigned to this issue...

3S CODESYS Runtime Toolkit Null Pointer Dereference Vulnerability

OVERVIEW Nicholas Miles of Tenable Network Security has identified a NULL pointer dereference vulnerability in 3S-Smart Software Solutions GmbH’s CODESYS Runtime Toolkit. 3S has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCT...

Juniper Networks Junos SRX Series SRX Network Security Daemon Denial of Service Vulnerability

Juniper Networks SRX Series services gateways with Junos are Juniper Networks' SRX Series gateway devices running the Junos operating system.The SRX Network Security Daemon nsd is SRX Network Security Daemon nsd is one of the network security daemons. A security vulnerability exists in the SRX ns...

The hack will take place next month the General Assembly announced the Tesla car, and vulnerability-vulnerability and early warning-the black bar safety net

! Hack will take place next month the General Assembly announced the Tesla car, and vulnerability Tesla motors may be the world's most networked consumer car, but also affected by the hacking community's close attention. Global researchers are looking for Tesla engineering on the weaknesses, not...

Debian DLA-272-1 : python-django security update

Several vulnerabilities were discovered in Django, a high-level Python web development framework : CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web development framework, incorrectly handled user-supplied redirect URLs. A remote attacker could use this flaw to...

NSA Releases Open Source Network Security Tool for Linux

The United States National Security Agency NSA has released a network security tool for Government and the private sectors to help secure their networks against cyber attacks. Dubbed Systems Integrity Management Platform SIMP, the tool is now publicly available on the popular source code sharing...

Code injection

The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...

CVE-2015-5363

The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...

Fedora 22 : rubygem-moped-1.5.3-1.fc22 (2015-11070)

Security fix for CVE-2015-4411 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Juniper Junos SRX Series Network Security Daemon DoS (JSA10692)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the network security daemon nsd due to a flaw that occurs when handling DNS response messages for name resolution requests. An attacker can exploit this, via a rogue...

[SECURITY] Fedora 22 Update: openvas-libraries-8.0.3-2.fc22

openvas-libraries is the base library for the OpenVAS network security scanner...

Threat Outbreak Alert RuleID16640: Email Messages Distributing Malicious Software on July 13, 2015

Medium Alert ID: 39916 First Published: 2015 July 14 12:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16640 may contain the following files: Name | Siz...

Juniper Networks Junos OS SRX NSD Denial of Service Vulnerability

Junos OS is prone to a DoS vulnerability in the Network Security Daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...