[SECURITY] [DLA 1156-1] libdatetime-timezone-perl new upstream version

Package : libdatetime-timezone-perl Version : 1:1.58-1+2017c This update includes the changes in tzdata 2017c for the Perl bindings. For the list of changes, see DLA-1156-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2017c. We recommend that you upgrade your...

Security fix for the ALT Linux 7 package kernel-image-un-def version 1:4.1.45-alt0.M70P.1.1

1:4.1.45-alt0.M70P.1.1 built Oct. 19, 2017 kernelbot in task 191162 Oct. 18, 2017 Kernel Bot - v4.1.45 Fixes: CVE-2017-11600...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.28-alt1

Oct. 10, 2017 Anton Farygin 1:2.4.28-alt1 - new version 2.4.28 - disabled NameVirtualHost directive in portsall.conf closes: 32269 - increased timeout for restarting httpd on SysVinit sytems closes: 31062 - increased LOOPSSTART and TimeoutStartSec closes: 33978 - fixes: CVE-2017-9798 Corrupted or...

Debian DSA-3991-1 : qemu - security update

Multiple vulnerabilities were found in qemu, a fast processor emulator : - CVE-2017-9375 Denial of service via memory leak in USB XHCI emulation. - CVE-2017-12809 Denial of service in the CDROM device drive emulation. - CVE-2017-13672 Denial of service in VGA display emulation. - CVE-2017-13711...

CVE-2017-6737

CVE-2017-6737 is a Cisco SNMP remote code execution vulnerability affecting the SNMP subsystem in Cisco IOS and IOS XE. The issue arises from a buffer overflow in the SNMP handling code that could allow an authenticated, remote attacker to execute arbitrary code or cause a system reload by sendin...

CVE-2017-6740

The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these...

CVE-2017-6741

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

SNMP Remote Code Execution Vulnerabilities in Cisco IOS Software (cisco-sa-20170629-snmp)

The Simple Network Management Protocol SNMP subsystem of Cisco IOS Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by...

SMBv1 Server Detection

Binary data 700100.prm...

[SECURITY] [DLA 938-1] git security update

Package : git Version : 1:1.7.10.4-1+wheezy4 CVE ID : CVE-2017-8386 Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help". For Debian 7 "Wheezy", these...

Threat Outbreak Alert RuleID29035: Email Messages Distributing Malicious Software on May 8, 2017

Medium Alert ID: 53756 First Published: 2017 May 9 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29035 may contain the following files: Name | Size ...

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.4.0.12.e905-alt1

March 3, 2017 Dmitry V. Levin 1:2.9.4.0.12.e905-alt1 - v2.9.3-5-g65112cb - v2.9.4-12-ge905f08 fixes: CVE-2016-1833, CVE-2016-1834, CVE-2016-1835, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, CVE-2016-1840, CVE-2016-3627, CVE-2016-3705, CVE-2016-4449, CVE-2016-4483, CVE-2016-4658,...

Information disclosure

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

Debian DLA-703-1 : libdatetime-timezone-perl new upstream version

This update includes the changes in tzdata 2016i for the Perl bindings. For the list of changes, see DLA-702-1. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.58-1+2016i. We recommend that you upgrade your libdatetime-time zone-perl packages. NOTE: Tenable Network Security h...

Unspecified Vulnerability in Oracle Retail Xstore Payment Component

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. Oracle Retail Xstore Payment is one of the retail point-of-service payment management components. A security vulnerability exists in Oracle Retail Xstore Payment version 1.x, which can be exploited...

Debian DLA-645-1 : bind9 security update

CVE-2016-2775 lwresd crash with long query name Backport of upstream commit 38cc2d14e218e536e0102fa70deef99461354232. CVE-2016-2776 assertion failure due to unspecified crafted query Fix based on 43139-9-9.patch from ISC. For Debian 7 'Wheezy', these problems have been fixed in version...

Debian Security Advisory DSA 3680-1 (bind9 - security update)

Two vulnerabilities were reported in BIND, a DNS server. CVE-2016-2775 The lwresd component in BIND which is not enabled by default could crash while processing an overlong request name. This could lead to a denial of service. CVE-2016-2776 A crafted query could crash the BIND name server daemon,...

Debian DLA-572-1 : icedove security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 1:45.2.0-2deb7u1. We...