SUSE-SU-2015:0412-1 Security update for MozillaFirefox

MozillaFirefox was updated to version 31.5.0 ESR to fix five security issues. These security issues were fixed: - CVE-2015-0836: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.5 allowed remote attackers to cause a denial of service memory corruption and...

SUSE-SU-2015:0365-1 Security update for php5

php5 was updated to fix four security issues. These security issues were fixed: - CVE-2015-0231: Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allowed remote attackers to execute...

SUSE-SU-2015:1086-2 Security update for IBM Java

java-160-ibm has been updated to version 1.6.0sr16.2 to fix 18 security issues. These security issues has been fixed: Unspecified vulnerability in Oracle Java SE 6u81 CVE-2014-3065. The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, whic...

openSUSE: Security Advisory for Firefox (openSUSE-SU-2014:1100-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : java-1.8.0-openjdk-1.8.0.5-1.b13.fc19 (2014-5290)

This security update fixes a large number of vulnerabilities in OpenJDK 8. It corresponds to the security update release for various Java versions on 2014-04-15. Everyone using OpenJDK8 is strongly encouraged to update to this immediately. More information about this update is available at:...

DSA-2667-1 mysql-5.5 - several

Bulletin has no description...

Important: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Oracle / Sun / People Soft / MySQL applications multiple security vulnerabilities

Over 85 of different vulnerabilites are fixed in CPU...

[ MDVSA-2012:135 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:135 http://www.mandriva.com/security/ Package : wireshark Date : August 16, 2012 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark: The DCP ET...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3760 / 3762 / 3763)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.27 and fixes various bugs and security issues. The following security issues were fixed : - A local attacker could use a Oops kernel crash caused by other flaws to write a 0 byte to a attacker controlled address in the kerne...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:041)

Multiple security vulnerabilities has been identified and fixed in pidgin : Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly CVE-2010-0277. In a user in a multi-user chat room has a nickname containi...

Sun Glassfish Woodstock Project 4.2 XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 663-1] New prozilla packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 663-1 [email protected] http://www.debian.org/security/ Martin Schulze February 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 652-1] New unarj packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 652-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...

Mandrake Linux Security Advisory : apache-mod_perl (MDKSA-2004:046-1)

Four security vulnerabilities were fixed with the 1.3.31 release of Apache. All of these issues have been backported and applied to the provided packages. Thanks to Ralf Engelschall of OpenPKG for providing the patches. Apache 1.3 prior to 1.3.30 did not filter terminal escape sequences from its...

Mandrake Linux Security Advisory : kernel (MDKSA-2003:066-2)

Multiple vulnerabilities were discovered and fixed in the Linux kernel. - CVE-2003-0001: Multiple ethernet network card drivers do not pad frames with null bytes which allows remote attackers to obtain information from previous packets or kernel memory by using special malformed packets. -...

[SECURITY] [DSA 482-1] New Linux 2.4.17 packages fix local root exploit (source+powerpc/apus+s390)

-------------------------------------------------------------------------- Debian Security Advisory DSA 482-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...