IT Security Alerts Weekly Digest (4 Dec ~ 10 Dec 2016)

1. Vulnerabilities in PHP

URL:www.php.net/ChangeLog-7.php#7.0.14

2. Vulnerability in Microsoft Remote Desktop Client for Mac

URL:www.hkcert.org/my_url/en/alert/16120901

3. Vulnerabilities in F5 Products

URL:support.f5.com/csp/#/article/K24322529
URL:support.f5.com/csp/#/article/K35246595

4. Vulnerabilities in Adcon Telemetry A850 Telemetry Gateway Base Station

URL:ics-cert.us-cert.gov/advisories/ICSA-16-343-03

5. Vulnerability in Sauter NovaWeb web HMI application

URL:ics-cert.us-cert.gov/advisories/ICSA-16-343-02

6. Security Update in Debian

URL:www.debian.org/security/2016/dsa-3729

7. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201612-20
URL:security.gentoo.org/glsa/201612-21
URL:security.gentoo.org/glsa/201612-22
URL:security.gentoo.org/glsa/201612-23
URL:security.gentoo.org/glsa/201612-24
URL:security.gentoo.org/glsa/201612-25
URL:security.gentoo.org/glsa/201612-26

8. Security Updates in Mageia

URL:advisories.mageia.org/MGASA-2016-0414.html
URL:advisories.mageia.org/MGASA-2016-0415.html

9. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00026.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00027.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00028.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00029.html

10. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:2927
URL:access.redhat.com/errata/RHSA-2016:2928
URL:access.redhat.com/errata/RHSA-2016:2932
URL:access.redhat.com/errata/RHSA-2016:2933

11. Security Updates in SUSE

URL:www.suse.com/support/update/announcement/2016/suse-su-20163052-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163053-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163054-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163056-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163057-1.html

12. Vulnerabilities in Cisco Products

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asr
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asr1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asyncos
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-caf
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cons
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cucm
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cur
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-esa1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-expressway
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-fireamp
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-firepower
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-fpwr
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-hms
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-icf
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-xe-x509
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-iosxr
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-xr
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-zbf
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ise
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ise1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-pca
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ucm
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-vdc
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-wsa
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-wsa1

13. Vulnerabilities in Huawei Products

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-storage-en

14. Vulnerability in Xen

URL:xenbits.xen.org/xsa/advisory-201.html

15. Security Updates in CentOS

URL:lists.centos.org/pipermail/centos-announce/2016-December/022170.html
URL:lists.centos.org/pipermail/centos-announce/2016-December/022171.html

16. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201612-16
URL:security.gentoo.org/glsa/201612-17
URL:security.gentoo.org/glsa/201612-18
URL:security.gentoo.org/glsa/201612-19

17. Security Updates in Mageia

URL:advisories.mageia.org/MGASA-2016-0411.html
URL:advisories.mageia.org/MGASA-2016-0412.html
URL:advisories.mageia.org/MGASA-2016-0413.html

18. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00016.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00018.html

19. Security Update in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-3648.html

20. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:2915
URL:access.redhat.com/errata/RHSA-2016:2919
URL:access.redhat.com/errata/RHSA-2016:2923

21. Security Updates in SUSE

URL:www.suse.com/support/update/announcement/2016/suse-su-20163039-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163040-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163041-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163043-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163044-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163046-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163047-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163048-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163049-1.html

22. Security Update in Ubuntu

URL:www.ubuntu.com/usn/usn-3154-1/

23. Vulnerability in Xen

URL:xenbits.xen.org/xsa/advisory-199.html

24. Vulnerability in Locus Energy LGate

URL:ics-cert.us-cert.gov/advisories/ICSA-16-231-01-0

25. Security Update in CentOS

URL:lists.centos.org/pipermail/centos-announce/2016-December/022169.html

26. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/0282269d-bbee-11e6-b1cf-14dae9d210b8.html
URL:www.vuxml.org/freebsd/cb0bf1ec-bb92-11e6-a9a5-b499baebfeaf.html
URL:www.vuxml.org/freebsd/e00304d2-bbed-11e6-b1cf-14dae9d210b8.html
URL:www.vuxml.org/freebsd/e722e3c6-bbee-11e6-b1cf-14dae9d210b8.html
URL:www.vuxml.org/freebsd/eab68cff-bc0c-11e6-b2ca-001b3856973b.html

27. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201612-14
URL:security.gentoo.org/glsa/201612-15

28. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00012.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00013.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00014.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00015.html

29. Security Update in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-2872.html

30. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:2871
URL:access.redhat.com/errata/RHSA-2016:2872

31. Vulnerability in Apache HTTP server

URL:httpd.apache.org/security/vulnerabilities_24.html

32. Vulnerability in WebSphere Application Server

URL:www-01.ibm.com/support/docview.wss?uid=swg21992315

33. Security Update in FreeBSD

URL:www.vuxml.org/freebsd/603fe0a1-bb26-11e6-8e5a-3065ec8fd3ec.html

34. Security Update in Gentoo Linux

URL:security.gentoo.org/glsa/201612-13

35. Security Updates in Mageia

URL:advisories.mageia.org/MGASA-2016-0408.html
URL:advisories.mageia.org/MGASA-2016-0409.html
URL:advisories.mageia.org/MGASA-2016-0410.html

36. Security Update in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00010.html

37. Security Update in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-2850.html

38. Security Update in Red Hat

URL:access.redhat.com/errata/RHSA-2016:2850

39. Security Updates in SUSE

URL:www.suse.com/support/update/announcement/2016/suse-su-20163001-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163010-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20163014-1.html

40. Security Updates in Ubuntu

URL:www.ubuntu.com/usn/usn-3149-1/
URL:www.ubuntu.com/usn/usn-3149-2/
URL:www.ubuntu.com/usn/usn-3150-1/
URL:www.ubuntu.com/usn/usn-3150-2/
URL:www.ubuntu.com/usn/usn-3151-1/
URL:www.ubuntu.com/usn/usn-3151-2/
URL:www.ubuntu.com/usn/usn-3151-3/
URL:www.ubuntu.com/usn/usn-3151-4/
URL:www.ubuntu.com/usn/usn-3152-1/
URL:www.ubuntu.com/usn/usn-3152-2/

41. Vulnerability in Fortinet FortiOS

URL:fortiguard.com/advisory/FG-IR-16-050

42. Vulnerabilities in PHP

URL:www.php.net/ChangeLog-7.php#7.1.0

43. Security Updates in CentOS

URL:lists.centos.org/pipermail/centos-announce/2016-December/022166.html
URL:lists.centos.org/pipermail/centos-announce/2016-December/022167.html
URL:lists.centos.org/pipermail/centos-announce/2016-December/022168.html

44. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/19d35b0f-ba73-11e6-b1cf-14dae9d210b8.html
URL:www.vuxml.org/freebsd/45ca25b5-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/49211361-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/4aae54be-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/4bf57137-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/4d7cf654-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/50ac2e96-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/523bb0b7-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/53dbd096-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/5555120d-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/56f0f11e-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/58685e23-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/59f79c99-ba4d-11e6-ae1b-002590263bf5.html
URL:www.vuxml.org/freebsd/a228c7a0-ba66-11e6-b1cf-14dae9d210b8.html
URL:www.vuxml.org/freebsd/bc4898d5-a794-11e6-b2d3-60a44ce6887b.html
URL:www.vuxml.org/freebsd/e1f67063-aab4-11e6-b2d3-60a44ce6887b.html
URL:www.vuxml.org/freebsd/e5dcb942-ba6f-11e6-b1cf-14dae9d210b8.html

45. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201612-01
URL:security.gentoo.org/glsa/201612-02
URL:security.gentoo.org/glsa/201612-03
URL:security.gentoo.org/glsa/201612-04
URL:security.gentoo.org/glsa/201612-05
URL:security.gentoo.org/glsa/201612-06
URL:security.gentoo.org/glsa/201612-07
URL:security.gentoo.org/glsa/201612-08
URL:security.gentoo.org/glsa/201612-09
URL:security.gentoo.org/glsa/201612-10
URL:security.gentoo.org/glsa/201612-11
URL:security.gentoo.org/glsa/201612-12

46. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00003.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00005.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00006.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00008.html
URL:lists.opensuse.org/opensuse-security-announce/2016-12/msg00009.html

47. Security Updates in SUSE

URL:www.suse.com/support/update/announcement/2016/suse-su-20162964-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162969-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162971-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162974-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162975-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162976-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162988-1.html

48. Security Update in Ubuntu

URL:www.ubuntu.com/usn/usn-3148-1/