[USN-2534-1] Libav vulnerabilities

========================================================================== Ubuntu Security Notice USN-2534-1 March 17, 2015 libav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

libav / ffmpeg multiple security vulnerabilities

Multiple memory corruptions on different media formats parsing...

[SECURITY] [DSA 3191-1] gnutls26 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3191-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 15, 2015 http://www.debian.org/security/faq -...

[USN-2536-1] libXfont vulnerabilities

========================================================================== Ubuntu Security Notice USN-2536-1 March 18, 2015 libxfont vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[SECURITY] [DSA 3190-1] putty security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3190-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2015 http://www.debian.org/security/faq -...

checkpw DoS

Infinite loop on account names with two dashes...

[SECURITY] [DSA 3192-1] checkpw security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3192-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 17, 2015 http://www.debian.org/security/faq -...

Apple Safari / Webkit multiple security vulnerabilities

Multiple memory corruptions, spoofing...

libmagic / file / fileinfo / PHP security vulnerabilities

Vulnerabilities in ELF parsing...

[SECURITY] [DSA 3196-1] file security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3196-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 18, 2015 http://www.debian.org/security/faq -...

Multiple Vulnerabilities with Kguard Digital Video Recorders

MULTIPLE VULNERABILITIES WITH KGUARD DIGITAL VIDEO RECORDERS, February 10, 2015 PRODUCT DESCRIPTION The Kguard SHA104 & SHA108 are 4ch/8ch H.264 DVRs designed for economical application. It's stylish & streamlines hardware design and excellent performance can be fast moving, competitive and an...

MongoDB BSON Handling Remote Denial of Service Vulnerability

MongoDB BSON Handling Remote Denial of Service Vulnerability March 06, 2015 Summary: ======== Fortinet's FortiGuard Labs has discovered a remote denial of service vulnerability in MongoDB. It allows remote attackers to launch a denial of service attack without providing any authentication...

HP Point of Sale multiple security vulnerabilities

Multiple vulnereabilities in drivers...

ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities CVE Identifier: CVE-2015-0235, CVE-2015-0524, CVE-2015-0525 Severity Rating: CVSSv2 Base Score: See below for individual scores for each CVE Affected...

EMC RSA Certificate Manager / Registration Manager multiple security vulnerabilities

DoS, crossite scripting...

tcpdump multiple security vulnerabilities

Multiple vulnerabilities in protocols dissectors...

tcpdump 4.7.2 remote crashes

Hi, please find tcpdump 4.7.2 source code at: http://www.ca.tcpdump.org/beta/tcpdump-4.7.2.tar.gz http://www.ca.tcpdump.org/beta/tcpdump-4.7.2.tar.gz.sig there is also a matching libpcap To validate the source code with the "make check" you need to have libpcap-4.7.2 or the geneve test cases will...

MSA-2015-03: iPass Mobile Client Service Local Privilege Escalation

Mogwai Security Advisory MSA-2015-03 ---------------------------------------------------------------------- Title: iPass Mobile Client service local privilege escalation Product: Hewlett-Packard Universal CMDB UCMDB Affected versions: iPass Mobile Client 2.4.2.15122 Newer version might be also...

MongoDB DoS

Crash on BSON parsing...

iPass privilege escalation

Code execution with local system rights is possible...

[SECURITY] [DSA 3180-1] libarchive security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3180-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 05, 2015 http://www.debian.org/security/faq -...

APPLE-SA-2015-03-09-3 Security Update 2015-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-03-09-3 Security Update 2015-002 Security Update 2015-002 is now available and addresses the following: iCloud Keychain Available for: OS X Yosemite v10.10.2 Impact: An attacker with a privileged network position may be able to execute...

APPLE-SA-2015-03-09-2 AppleTV 7.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-03-09-2 AppleTV 7.1 AppleTV 7.1 is now available and addresses the following: Apple TV Available for: Apple TV 3rd generation and later Impact: An attacker with a privileged network position may intercept SSL/TLS connections Description:...

Apple TV multiple security vulnerabilities

Weak cryptography, memory corruption, restrictions bypass...

[security bulletin] HPSBHF03279 rev.1 - HP Point of Sale PCs Running Windows with OPOS Drivers, Remote Execution of Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04583185 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04583185 Version: 1 HPSBHF03279 rev....

APPLE-SA-2015-03-09-1 iOS 8.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-03-09-1 iOS 8.2 iOS 8.2 is now available and addresses the following: CoreTelephony Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A remote attacker can cause a device to unexpectedly...

ESA-2015-014: RSA® Digital Certificate Solution Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-014: RSA® Digital Certificate Solution Multiple Vulnerabilities EMC Identifier: ESA-2015-014 CVE Identifier: See below for individual CVEs Severity Rating: CVSS v2 Base Score: View details below for individual CVSS Score for each CVE. Affecte...

Cisco Telepresence / Cisco Expressway security vulnerabilities

DoS, authentication bypass...

Cisco Intrusion Prevention System DoS

Кратковременные условия при разборе SSL...

Apple iOS multiple security vulnerabilities

Buffer overflows, DoS, memory corruption, restrictions bypass, weak cryptography...

[USN-2523-1] Apache HTTP Server vulnerabilities

========================================================================== Ubuntu Security Notice USN-2523-1 March 10, 2015 apache2 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[SECURITY] [DSA 3184-1] gnupg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3184-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3182-1] libssh2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3182-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 11, 2015 http://www.debian.org/security/faq -...

libssh2 DoS

Uninitialized memory access in SSH client code...

Linux kernel multiple security vulnerabilities

DoS, information disclosure, privilege escalation...

eCryptfs crypto vulnerabilities

Passphrase hash is stored without salt...

[USN-2524-1] eCryptfs vulnerability

========================================================================== Ubuntu Security Notice USN-2524-1 March 11, 2015 ecryptfs-utils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

[USN-2530-1] Linux kernel vulnerability

========================================================================== Ubuntu Security Notice USN-2530-1 March 12, 2015 linux vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

[SECURITY] [DSA 3177-1] mod-gnutls security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3177-1 [email protected] http://www.debian.org/security/ Sebastien Delafond March 10, 2015 http://www.debian.org/security/faq -...

[security bulletin] HPSBGN03249 rev.1 - HP ArcSight Enterprise Security Manager and Logger, Multiple Remote Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04562193 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04562193 Version: 1 HPSBGN03249 rev....

HP ArcSight Enterprise Security Manager and Logger security vulnerabilities

No description provided...

[SECURITY] [DSA 3181-1] xen security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3181-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10, 2015 http://www.debian.org/security/faq -...

Xen multiple security vulnerabilities

Information leakage, DoS, privilege escalation...

Asus RT-G32 security vulnerabilities

XSS, CSRF...

Cisco IOS XR DoS

DoS on IPv6 packets processing...

xdg-open code execution

Code execution because of insufficient shell characters filtering in protocol handlers...

HP XP P9000 crossite scripting

No description provided...

sudo privilege escalation

Elevated file access is possible...

libext2fs / e2fsprogs buffer overflow

Buffer overflow on block group descriptor information...

[SECURITY] [DSA 3167-1] sudo security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3167-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 22, 2015 http://www.debian.org/security/faq -...