5725 matches found
Updated virtuoso-opensource package fixes security vulnerabilities
The virtuoso-opensource package has been updated to version 6.1.8 and two additional upstream patches from versions 7.1.0 and 7.2.0 with additional fixes for unspecified security issues have been added...
postgresql security update
CentOS Errata and Security Advisory CESA-2015:1194 Updated postgresql packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...
DLA-250-1 libclamunrar - security update
Bulletin has no description...
Libmimedir VCF Memory Corruption Proof Of Concept
!/usr/bin/python libmimedir-free.py Libmimedir VCF Memory Corruption PoC CVE-2015-3205 Jeremy Brown jbrown3264/gmail June 2015 -Synopsis- Adding two NULL bytes to the end of a VCF file allows a user to manipulate free calls which occur during it's lexer's memory clean-up procedure. This could lea...
openSUSE Security Update : mysql-connector-java (openSUSE-2015-389)
mysql-connector-java was updated to 5.1.35 to fix one security issue and a number of bugs. The following vulnerability was fixed : - CVE-2015-2575: Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability ca...
Updated kernel-tmb packages fix security vulnerabilities and bugs
Updated kernel-tmb fixes security, critical data corruption and pdata loss issues This kernel-tmb update is based on upstream -longterm 3.14.43 and fixes a security issue, and critical data corruption and data loss issues: drivers/vhost/scsi.c: potential memory corruption CVE-2015-4036 ext4...
Updated kernel-linus packages fix security vulnerabilities and bugs
Updated kernel-linus fixes security, critical data corruption and pdata loss issues This kernel-linus update is based on upstream -longterm 3.14.43 and fixes a security issue, and critical data corruption and data loss issues: drivers/vhost/scsi.c: potential memory corruption CVE-2015-4036 ext4...
Medium: ruby22
Issue Overview: As discussed in an upstream announcement https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/, Ruby's OpenSSL extension suffers a vulnerability through overly permissive matching of hostnames, which can lead to similar bugs such as...
Updated kernel packages fix security vulnerabilities and bugs
Updated kernel fixes security, critical data corruption and pdata loss issues This kernel update is based on upstream -longterm 3.14.43 and fixes a security issue, and critical data corruption and data loss issues: drivers/vhost/scsi.c: potential memory corruption CVE-2015-4036 ext4 filesystem ha...
Fedora 20 : wordpress-4.2.2-1.fc20 (2015-6790)
WordPress 4.2 'Powell' - Upstream announcement https://wordpress.org/news/2015/04/powell/ WordPress 4.2.1 Security Release - Upstream announcement https://wordpress.org/news/2015/04/wordpress-4-2-1/ WordPress 4.2.2 Security and Maintenance Release - Upstream announcement...
SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:0281-1)
This strongswan update fixes the following security and non security issues. - Disallow brainpool elliptic curve groups in fips mode bnc856322. - Applied an upstream fix for a denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellma...
SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1606-1)
This update fixes the following security issues in xen : - CVE-2012-5513: XENMEMexchange may overwrite hypervisor memory XSA-29 - CVE-2012-5515: Several memory hypercall operations allow invalid extent order values XSA-31 Also the following bugs have been fixed and upstream patches have been...
CVE-2015-2704
realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response...
openSUSE Security Update : libreoffice (openSUSE-2015-357)
LibreOffice was updated to 4.3.7 to fix one security issue and a number of bugs. The following vulnerability was fixed : - CVE-2015-1774: Specially crafted HWP documents could have led to an application crash or possibly the execution of arbitrary code boo919409 The following non-security bugs we...
Updated testdisk packages fix security vulnerabilities
Updated testdisk packages fix security vulnerabilities: The testdisk package has been updated to version 7.0, fixing several security issues and a couple of bugs. See the upstream announcement for more details...
Barracuda Networks Web Filter Security Bypass Vulnerability
Barracuda Networks Web Filter is a web security gateway from Barracuda Networks USA. The gateway supports content filtering, advanced policies, and web threat protection. A security vulnerability exists in Barracuda Networks Web Filter versions prior to 8.1.0.005, which is caused by the program...
Fedora 22 : proftpd-1.3.5-6.fc22 (2015-7164)
Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients Upstream report: http://bugs.proftpd.org/showbug.cgi?id=4169 Note that modcopy is not loaded/enabled b...
Debian DLA-208-1 : tzdata new upstream version
Upstream published version 2015d, removing the DST rule for Egypt starting in 2015. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] [DLA 208-1] tzdata new upstream version
Package : tzdata Version : 2015d-0+deb6u1 Upstream published version 2015d, removing the DST rule for Egypt starting in 2015. Aurelien Jarno GPG: 4096R/1DDD8C9B [email protected] http://www.aurel32.net...