Oracle: Security Advisory (ELSA-2016-3529)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : foomatic (RHSA-2016:0491)

An updated foomatic package that fixes three security issues is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...

MGASA-2016-0115 Updated thunderbird packages fix security vulnerabilities

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird CVE-2016-1952, CVE-2016-1954, CVE-2016-1957, CVE-2016-1960,...

[SECURITY] [DSA 3517-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3517-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2016 https://www.debian.org/security/faq -...

DSA-3517-1 exim4 - security update

Bulletin has no description...

Threat Outbreak Alert RuleID21637: Email Messages Distributing Malicious Software on March 11, 2016

Medium Alert ID: 44085 First Published: 2016 March 11 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21637 may contain the following files: Name | Si...

CentOS Update for postgresql CESA-2016:0347 centos6

Check the version of postgresql SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882406";...

Updated tomcat packages fix security vulnerabilities

Updated tomcat packages fix security vulnerabilities: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 7.x before 7.0.65 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used b...

Threat Outbreak Alert RuleID21299: Email Messages Distributing Malicious Software on February 25, 2016

Medium Alert ID: 43747 First Published: 2016 February 25 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21299 may contain the following files: Name |...

MGASA-2016-0073 Updated pinpoint packages fix CVE-2013-7447

Updated pinpoint packages fix security vulnerability: Due to a logic error, an attempt to allocate a large block of memory fails in caironewsurfacefrompixbuf, leading to a crash of pinpoint CVE-2013-7447...

Updated ffmpeg packages fix security vulnerabilities

Updated ffmpeg packages fix security vulnerabilities: FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file, leading to an external HTTP request in which the URL string contains the first li...

Updated radicale packages fix CVE-2015-8748

Updated radicale package fixes security vulnerabilities: If an attacker is able to authenticate with a user name like .', he can bypass read/write limitations imposed by regex-based rules, including the built-in rules ownerwrite' read for everybody, write for the calendar owner and owneronly' rea...

Updated mbedtls/hiawatha/belle-sip/linphone/pdns packages fix security vulnerability

Note: this package was called polarssl, but is now called mbed tls. The PolarSSL software is now called mbed TLS. Heap-based buffer overflow in mbed TLS formerly PolarSSL 1.3.x before 1.3.14 allows remote SSL servers to cause a denial of service client crash and possibly execute arbitrary code vi...

RHEL 6 : bind (RHSA-2016:0078)

"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0078 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...

Threat Outbreak Alert RuleID20754: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 43240 First Published: 2016 January 27 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20754 may contain the following files: Name |...

RHEL 7 : Storage Server (RHSA-2016:0016)

Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Updated rtmpdump packages fix security vulnerabilities

The rtmpdump package has been updated to the latest upstream code as of January 1, 2016, fixing several security issues...

Threat Outbreak Alert RuleID20205: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42792 First Published: 2015 December 21 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20205 may contain the following files: Name |...

Threat Outbreak Alert RuleID19983: Email Messages Distributing Malicious Software on December 8, 2015

Medium Alert ID: 42574 First Published: 2015 December 8 21:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19983 may contain the following files: Name |...

Threat Outbreak Alert RuleID19913: Email Messages Distributing Malicious Software on December 4, 2015

Medium Alert ID: 42524 First Published: 2015 December 4 21:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19913 may contain the following files: Name |...