1. Vulnerabilities in IBM Notes and Domino
(1963812)
[14/08/2015]
Vulnerabilities were identified in the IBM Notes
and Domino. An attacker could gain access to the system and obtain sensitive
information. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:www-01.ibm.com/support/docview.wss?uid=swg21963812
2. Vulnerabilities in Apple Products (HT205030, HT205031,
HT205032, HT205033)
[14/08/2015] Vulnerabilities were identified in the Apple iOS, OS X and
Safari. An attacker could bypass security restrictions, execute arbitrary code,
obtain sensitive information and cause a denial of service condition. These
vulnerabilities affect multiple versions of the mentioned products. Security
patches are available to resolve these
vulnerabilities.
URL:support.apple.com/en-hk/HT205030
URL:support.apple.com/en-hk/HT205031
URL:support.apple.com/en-hk/HT205032
URL:support.apple.com/en-hk/HT205033
3. Vulnerabilities in Rockwell Automation devices
(ICS-ALERT-15-225-01, ICS-ALERT-15-225-02)
[14/08/2015] Vulnerabilities were identified in the Rockwell Automation
devices web interface. An attacker could perform cross-site scripting attacks,
execute arbitrary code and cause a denial of service condition. These
vulnerabilities affect 1769-L18ER, A LOGIX5318ER, 1766-L32BWAA, 1766-L32BXBA
models of the mentioned
products.
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-225-01
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-225-02
4. Vulnerability in KAKO HMI Products
(ICS-ALERT-15-224-01)
[14/08/2015] Vulnerability was identified in the KAKO HMI products. An
attacker could execute arbitrary code and take control of the products. The
affected versions were not
specified.
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-01
5. Vulnerabilities in Schneider Electric Products
(ICS-ALERT-15-224-02)
[14/08/2015] Vulnerabilities were identified in several Schneider
Electric's Modicon M340 PLC Station P34 CPU modules. An attacker could execute
arbitrary code, perform directory traversal attacks and cause a denial of
service condition. The affected versions were not
specified.
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-02
6. Vulnerabilities in Prisma web products
(ICS-ALERT-15-224-03)
[14/08/2015] Vulnerabilities were identified in the Prisma web products.
An attacker could change configuration and execute arbitrary code. The affected
versions were not
specified.
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-03
7. Vulnerabilities in Moxa ioLogik E2210
(ICS-ALERT-15-224-04)
[14/08/2015] Vulnerabilities were identified in the Ethernet Micro RTU
controller of the Moxa ioLogik E2210. An attacker could obtain unauthorised
access. The affected versions were not
specified.
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-04
8. Vulnerabilities in Google
Andriod
[14/08/2015]
Vulnerabilities were identified in the messaging
app of the Google Andriod. An attacker could crash the application and
manipulate SMS/MMS data. These vulnerabilities affect multiple versions of the
mentioned
product.
URL:www.hkcert.org/my_url/en/alert/15081301
9. Security Updates in Debian
(DSA-3335-1)
[14/08/2015] Debian has
released security update packages for fixing the vulnerability identified in the
request-tracker4 package for multiple versions of Debian GNU/Linux. An attacker
could perform cross-site scripting
attacks.
URL:www.debian.org/security/2015/dsa-3335
10.
Security Updates in SUSE
(SUSE-SU-2015:1379-1, SUSE-SU-2015:1380-1)
[14/08/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the MozillaFirefox package of SUSE Linux Enterprise 11 and 12. Due to multiple
errors, an attacker could bypass security restrictions and gain elevated
privileges.
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html
11.
Vulnerability in Mozilla Firefox (MFSA
2015-93)
[13/08/2015]
Vulnerability was identified in the Mozilla
Firefox. An attacker could gain crash the system. This vulnerability affects
versions prior to 38 of the mentioned product. Security patches are available to
resolve this
vulnerability.
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-93/
12.
Vulnerability in Lenovo Service Engine
BIOS (LEN-2015-020, LEN-2015-077)
[13/08/2015] Vulnerability was identified in the Lenovo Service Engine
BIOS. An attacker could take control of an affected system. This vulnerability
affects multiple models of Lenovo notebooks and desktops. Security patches are
available to resolve this
vulnerability.
URL:support.lenovo.com/us/en/product_security/lse_bios_notebook
URL:support.lenovo.com/us/en/product_security/lse_bios_desktop
URL:www.us-cert.gov/ncas/current-activity/2015/08/12/Lenovo-Service-Engine-LSE-BIOS-Vulnerability
13.
Vulnerability in GnuTLS
(GNUTLS-SA-2015-3)
[13/08/2015] Vulnerability was identified in the GnuTLS. An attacker could
crash the application. This vulnerability affects versions prior to 3.3.17 and
3.4.4 of the mentioned product. Security patches are available to resolve this
vulnerability.
URL:www.gnutls.org/security.html#GNUTLS-SA-2015-3
URL:www.hkcert.org/my_url/en/alert/15081217
14.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1603-1)
[13/08/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the Adobe Flash Player package for Red Hat Enterprise Linux 5 and 6. Due to
multiple errors, an attacker could crash the system and execute arbitrary
code.
URL:rhn.redhat.com/errata/RHSA-2015-1603.html
15.
Security Updates in SUSE
(SUSE-SU-2015:1373-1, SUSE-SU-2015:1374-1, SUSE-SU-2015:1375-1,
SUSE-SU-2015:1376-1)
[13/08/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the flash-player, java-1_7_0-ibm and Real Time Linux Kernel packages of SUSE
Linux Enterprise 11 and 12. Due to multiple errors, an attacker could bypass
security restrictions, gain elevated privileges, cause a denial of service
condition, execute arbitrary code and obtain sensitive
information.
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00004.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00005.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html
16.
Security Updates in Debian (DSA-3328-1,
DSA-3330-1, DSA-3331-1, DSA-3332-1, DSA-3333-1,
DSA-3334-1)
[13/08/2015] Debian has
released security update packages for fixing the vulnerability identified in the
wordpress, activemq, subversion, iceweasel and gnutls28 packages for multiple
versions of Debian GNU/Linux. Due to multiple errors, an attacker could perform
cross-site scripting attacks, gain elevated privileges, cause a denial of
service condition, perform code injection attacks, obtain sensitive information,
execute arbitrary code and crash the
application.
URL:www.debian.org/security/2015/dsa-3328
URL:www.debian.org/security/2015/dsa-3330
URL:www.debian.org/security/2015/dsa-3331
URL:www.debian.org/security/2015/dsa-3332
URL:www.debian.org/security/2015/dsa-3333
URL:www.debian.org/security/2015/dsa-3334
17.
Vulnerabilities in Microsoft Products
(MS15-079, MS15-080, MS15-081, MS15-082, MS15-083, MS15-084, MS15-085, MS15-086,
MS15-087, MS15-088, MS15-089, MS15-090, MS15-091,
MS15-092)
[12/08/2015]
Vulnerabilities were identified in the Microsoft
Windows, Microsoft Internet Explorer, Microsoft .NET Framework, Microsoft
Office, Microsoft Lync, Microsoft Silverlight, Microsoft Server Software and
Microsoft Edge. An attacker could perform remote code execution, gain elevated
privileges and obtain sensitive information. These vulnerabilities affect
multiple versions of the mentioned products. Security patches are available to
resolve these
vulnerabilities.
URL:technet.microsoft.com/en-us/library/security/ms15-aug.aspx
URL:technet.microsoft.com/library/security/MS15-079
URL:technet.microsoft.com/library/security/MS15-080
URL:technet.microsoft.com/library/security/MS15-081
URL:technet.microsoft.com/library/security/MS15-082
URL:technet.microsoft.com/library/security/MS15-083
URL:technet.microsoft.com/library/security/MS15-084
URL:technet.microsoft.com/library/security/MS15-085
URL:technet.microsoft.com/library/security/MS15-086
URL:technet.microsoft.com/library/security/MS15-087
URL:technet.microsoft.com/library/security/MS15-088
URL:technet.microsoft.com/library/security/MS15-089
URL:technet.microsoft.com/library/security/MS15-090
URL:technet.microsoft.com/library/security/MS15-091
URL:technet.microsoft.com/library/security/MS15-092
URL:www.hkcert.org/my_url/en/alert/15081201
URL:www.hkcert.org/my_url/en/alert/15081202
URL:www.hkcert.org/my_url/en/alert/15081203
URL:www.hkcert.org/my_url/en/alert/15081204
URL:www.hkcert.org/my_url/en/alert/15081205
URL:www.hkcert.org/my_url/en/alert/15081206
URL:www.hkcert.org/my_url/en/alert/15081207
URL:www.hkcert.org/my_url/en/alert/15081208
URL:www.hkcert.org/my_url/en/alert/15081209
URL:www.hkcert.org/my_url/en/alert/15081210
URL:www.hkcert.org/my_url/en/alert/15081211
URL:www.hkcert.org/my_url/en/alert/15081212
URL:www.hkcert.org/my_url/en/alert/15081213
URL:www.hkcert.org/my_url/en/alert/15081214
URL:www.us-cert.gov/ncas/current-activity/2015/08/11/Microsoft-Releases-August-2015-Security-Bulletin
18.
Vulnerabilities in Adobe Flash Player
(APSB15-19)
[12/08/2015] Vulnerabilities were identified in the Adobe Flash Player. An
attacker could gain execute arbitrary code, cause a buffer overflow and take
control of the affected system. These vulnerabilities affect multiple versions
of the mentioned product. Security patches are available to resolve these
vulnerabilities.
URL:helpx.adobe.com/security/products/flash-player/apsb15-19.html
URL:technet.microsoft.com/en-us/library/security/2755801
URL:www.hkcert.org/my_url/en/alert/15081215
URL:www.us-cert.gov/ncas/current-activity/2015/08/11/Adobe-Releases-Security-Updates-Flash-Player
19.
Vulnerabilities in Mozilla Firefox (MFSA
2015-79, MFSA 2015-80, MFSA 2015-81, MFSA 2015-82, MFSA 2015-83, MFSA 2015-84,
MFSA 2015-85, MFSA 2015-86, MFSA 2015-87, MFSA 2015-88, MFSA 2015-89, MFSA
2015-90, MFSA 2015-91, MFSA 2015-92)
[12/08/2015] Vulnerabilities were identified in the Mozilla Firefox. An
attacker could gain execute arbitrary code, crash the application, bypass
security restrictions and perform cross-site scripting attacks. These
vulnerabilities affect multiple versions of the mentioned product. Security
patches are available to resolve these
vulnerabilities.
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-79/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-80/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-81/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-82/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-83/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-84/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-85/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-86/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-87/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-88/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-89/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-90/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-91/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-92/
URL:www.hkcert.org/my_url/en/alert/15081216
URL:www.us-cert.gov/ncas/current-activity/2015/08/11/Mozilla-Releases-Security-Updates-Firefox-Firefox-ESR-and-Firefox
20. Vulnerability in Schneider Electric IMT25 DTM
component (ICSA-15-223-01)
[12/08/2015] Vulnerability was identified in the Schneider Electric IMT25
DTM component. An attacker could cause a denial of service condition and execute
arbitrary code. This vulnerability affects versions 1.500.000 and prior of the
mentioned product. Security patches are available to resolve this
vulnerability.
URL:ics-cert.us-cert.gov/advisories/ICSA-15-223-01
21.
Vulnerabilities in Actiontec GT784WN
Wireless N DSL Modem (VU#335192)
[12/08/2015] Vulnerabilities were identified in the Actiontec GT784WN
Wireless N DSL Modem. An attacker could gain escalated privileges, perform
cross-site request forgery attacks and execute arbitrary code. These
vulnerabilities affect versions NCS01-1.0.12 and prior of the mentioned product.
Security patches are available to resolve these
vulnerabilities.
URL:www.kb.cert.org/vuls/id/335192
22.
Vulnerabilities in Mobile Devices C4 ODB2
dongle (VU#209512)
[12/08/2015] Vulnerabilities were identified in the Mobile Devices C4 ODB2
dongle. An attacker could execute arbitrary code and take complete control of
the devices. The affected version was not specified. Security patches are
available to resolve these
vulnerabilities.
URL:www.kb.cert.org/vuls/id/209512
23.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1583-1, RHSA-2015:1586-1)
[12/08/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the kernel and firefox packages for Red Hat Enterprise Linux 5, 6, and 7. Due
to multiple errors, an attacker could gain escalated privileges, crash the
system and execute arbitrary
code.
URL:rhn.redhat.com/errata/RHSA-2015-1583.html
URL:rhn.redhat.com/errata/RHSA-2015-1586.html
24.
Security Updates in Ubuntu GNU/Linux
(USN-2702-1, USN-2702-2)
[12/08/2015] Ubuntu has
released security update packages for fixing the vulnerabilities identified in
the firefox and ubufox packages for versions 12.04 LTS, 14.04 LTS and 15.04 of
Ubuntu GNU/Linux. Due to multiple errors, an attacker could cause a denial of
service condition, crash the system, execute arbitrary code and obtain sensitive
information.
URL:www.ubuntu.com/usn/usn-2702-1/
URL:www.ubuntu.com/usn/usn-2702-2/
25.
Security Updates in Oracle Linux
(ELSA-2015-1586)
[12/08/2015] Oracle has
released security update packages for fixing the vulnerabilities identified in
the firefox package for Oracle Linux 5, 6 and 7. Due to multiple errors, an
attacker could cause a denial of service condition, crash the system and execute
arbitrary
code.
URL:linux.oracle.com/errata/ELSA-2015-1586.html
26.
Vulnerabilities in Xen (105253,
105254)
[11/08/2015]
Vulnerabilities were identified in the Xen. An
attacker could gain elevated privileges and obtain sensitive information. These
vulnerabilities affect multiple versions of the mentioned product. Security
patches are available to resolve these
vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105253
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105254
27.
Vulnerability in devscripts
(105242)
[11/08/2015]
Vulnerability was identified in the devscripts.
An attacker could execute arbitrary code. This vulnerability affects multiple
versions of the mentioned product. Security patches are available to resolve
this
vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105242
28.
Vulnerabilities in Linux Kernel (105236,
105237)
[11/08/2015]
Vulnerabilities were identified in the Linux
Kernel. An attacker could execute arbitrary code. These vulnerabilities affect
multiple versions of the mentioned product. Security patches are available to
resolve these
vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105236
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105237
29.
Vulnerabilities in IBM Domino Web Server
(1963016)
[10/08/2015]
Vulnerabilities were identified in the IBM
Domino Web Server. An attacker could perform cross-site scripting attacks. These
vulnerabilities affect versions prior to 8.5.3 Fix Pack 6 and 9.0.1 Fix Pack 3
of the mentioned product. Security patches are available to resolve these
vulnerabilities.
URL:www-01.ibm.com/support/docview.wss?uid=swg21963016
30.
Vulnerabilities in Huawei Android
Products (Huawei-SA-20150809-01-Android)
[10/08/2015] Vulnerabilities were identified in the Huawei Honor 7 and P8.
A remote attacker could execute arbitrary code. These vulnerabilities affect
multiple versions of the mentioned
products.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-448928.htm
31.
Vulnerability in Sierra Wireless GX, ES,
and LS gateway devices (VU#628568)
[10/08/2015] Vulnerability was identified in the Sierra Wireless GX, ES,
and LS gateway devices running ALEOS. An attacker could gain full control of an
affected device. This vulnerability affects mentioned devices running ALEOS
versions 4.4.1 and earlier. Security patches are available to resolve this
vulnerability.
URL:www.kb.cert.org/vuls/id/628568
32.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1581-1)
[10/08/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the firefox package for Red Hat Enterprise Linux 5, 6, and 7. An attacker
could obtain sensitive
information.
URL:rhn.redhat.com/errata/RHSA-2015-1581.html
33.
Security Updates in Ubuntu GNU/Linux
(USN-2707-1)
[10/08/2015] Ubuntu has
released security update packages for fixing the vulnerabilities identified in
the firefox package for versions 12.04 LTS, 14.04 LTS and 15.04 of Ubuntu
GNU/Linux. An attacker could obtain sensitive
information.
URL:www.ubuntu.com/usn/usn-2707-1/
34.
Security Updates in Debian
(DSA-3329-1)
[10/08/2015] Debian has
released security update packages for fixing the vulnerability identified in the
linux package for multiple versions of Debian GNU/Linux. Due to multiple errors,
an attacker could gain escalated privileges, cause a denial of service condition
and obtain sensitive
information.
URL:www.debian.org/security/2015/dsa-3329
35.
Security Updates in Oracle Linux
(ELSA-2015-1581)
[10/08/2015] Oracle has
released security update packages for fixing the vulnerabilities identified in
the firefox package for Oracle Linux 5, 6 and 7. Due to multiple errors, an
attacker could obtain sensitive
information.
URL:linux.oracle.com/errata/ELSA-2015-1581.html
36.
Security Updates in Slackware
(SSA:2015-219-02)
[10/08/2015] Slackware
has released security update packages for fixing the vulnerability identified in
the mozilla-nss package for multiple versions of Slackware Linux. An attacker
could obtain sensitive
information.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.387488
Source(s)
of above information:
Showing posts with label GnuTLS. Show all posts
Showing posts with label GnuTLS. Show all posts
Sunday, August 16, 2015
Sunday, April 26, 2015
IT Security Alerts Weekly Digest (19 Apr ~ 25 Apr 2015)
1. Vulnerability
in Apple iOS
[24/04/2015] Vulnerability was identified in the Apple iOS. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects version 8 of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15042401
2. Vulnerabilities in Cisco FireSIGHT Management Center
[24/04/2015] Vulnerabilities were identified in the Cisco FireSIGHT Management Center. An attacker could bypass security restrictions, execute arbitrary code, and perform web framework HTTP Header Redirection and cross-site scripting attacks. These vulnerabilities affect multiple firmware versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38486
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38487
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102511
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102512
3. Vulnerabilities in IBM Products (1882637, 1882876)
[24/04/2015] Vulnerabilities were identified in the IBM Lotus Quickr for WebSphere Portal and IBM Sametime Unified Telephony. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www-304.ibm.com/support/docview.wss?uid=swg21882637
URL:www-304.ibm.com/support/docview.wss?uid=swg21882876
4. Vulnerabilities in NetIQ LDAP Proxy (5204231)
[24/04/2015] Vulnerabilities were identified in the NetIQ LDAP Proxy. An attacker could bypass security restriction and obtain sensitive information. These vulnerabilities affect version 1.5 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=3x8lI-kJvhE~
5. Vulnerabilities in Trend Micro OfficeScan
[24/04/2015] Vulnerabilities were identified in the Trend Micro OfficeScan 10.6. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to Server Build 5779 and Client Module Build 5527 of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:files.trendmicro.com/documentation/readme/osce_106_sp3_patch1_win_all_criticalpatch_5779_readme.txt
6. Vulnerabilities in F5 Products (SOL16471, SOL16477, SOL16505)
[24/04/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM and Enterprise Manager. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16471.html
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16477.html
URL:support.f5.com/kb/en-us/solutions/public/16000/500/sol16505.html
7. Vulnerability in PowerDNS (2015-01)
[24/04/2015] Vulnerability was identified in the PowerDNS. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 3.5 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:doc.powerdns.com/md/security/powerdns-advisory-2015-01/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102537
8. Vulnerability in Drupal (DRUPAL-SA-CONTRIB-2015-099)
[24/04/2015] Vulnerability was identified in the Node Template module for Drupal. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.drupal.org/node/2475955
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102521
9. Vulnerability in Android component
[24/04/2015] Vulnerability was identified in the Android component wpa_supplicant. A remote attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects versions 1.0 - 2.4 of the mentioned component. Security patches are available to resolve this vulnerability.
URL:www.hkcert.org/my_url/en/alert/15042402
10. Vulnerability in WordPress
[24/04/2015] Vulnerability was identified in the WordPress. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. This vulnerability affects versions prior to 4.1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:wordpress.org/news/2015/04/wordpress-4-1-2/
URL:www.us-cert.gov/ncas/current-activity/2015/04/23/WordPress-Releases-Security-Update
11. Vulnerability in Red Hat JBoss Operations Network (102539)
[24/04/2015] Vulnerability was identified in the Red Hat JBoss Operations Network. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 3.0 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102539
12. Security Updates in Oracle Linux (ELSA-2015-3032, ELSA-2015-3033, ELSA-2015-3034)
[24/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the kernel package for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-3032.html
URL:linux.oracle.com/errata/ELSA-2015-3033.html
URL:linux.oracle.com/errata/ELSA-2015-3034.html
13. Security Updates in Mageia (MGASA-2015-0162, MGASA-2015-0163, MGASA-2015-0164, MGASA-2015-0165, MGASA-2015-0166, MGASA-2015-0167, MGASA-2015-0168)
[24/04/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the setup, chrony, chromium-browser-stable, lftp, libksba, t1utils and ntop packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0162.html
URL:advisories.mageia.org/MGASA-2015-0163.html
URL:advisories.mageia.org/MGASA-2015-0164.html
URL:advisories.mageia.org/MGASA-2015-0165.html
URL:advisories.mageia.org/MGASA-2015-0166.html
URL:advisories.mageia.org/MGASA-2015-0167.html
URL:advisories.mageia.org/MGASA-2015-0168.html
14. Security Updates in Ubuntu GNU/Linux (USN-2576-1, USN-2576-2, USN-2577-1)
[24/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the usb-creator and wpa packages for versions 12.04 LTS, 14.04 LTS, 14.10 and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2576-1/
URL:www.ubuntu.com/usn/usn-2576-2/
URL:www.ubuntu.com/usn/usn-2577-1/
15. Vulnerabilities in HP Products (102501, 102503)
[23/04/2015] Vulnerabilities were identified in the HP Data Protector, HP TippingPoint Security Management System (SMS) and HP TippingPoint Virtual Security Management System (vSMS). An attacker could bypass security restriction, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102501
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102503
16. Vulnerability in Novell ZENworks Configuration Management (5207650)
[23/04/2015] Vulnerability was identified in the Novell ZENworks Configuration Management. An attacker could bypass security restriction and obtain sensitive information. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:download.novell.com/Download?buildid=Ddi7yDlFrqA~
17. Vulnerability in F5 Products (SOL16479)
[23/04/2015] Vulnerability was identified in the F5 BIG-IP LTM, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, ARX and Enterprise Manager. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16479.html
18. Vulnerability in Photo Manager Pro for iOS (102496)
[23/04/2015] Vulnerability was identified in the Photo Manager Pro for iOS. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. This vulnerability affects version 4.4.0 Pro of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102496
19. Vulnerability in GNU glibc (102500)
[23/04/2015] Vulnerability was identified in the GNU glibc. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 2.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102500
20. Security Updates in Oracle Linux (ELSA-2015-0869)
[23/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the kvm package for Oracle Linux 5. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-0869.html
21. Security Updates in Debian (DSA-3232-1)
[23/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the curl package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3232
22. Security Updates in Slackware (SSA:2015-111-01, SSA:2015-111-02, SSA:2015-111-03, SSA:2015-111-04, SSA:2015-111-05, SSA:2015-111-06, SSA:2015-111-07, SSA:2015-111-08, SSA:2015-111-09, SSA:2015-111-10, SSA:2015-111-11, SSA:2015-111-12, SSA:2015-111-13, SSA:2015-111-14)
[23/04/2015] Slackware has released security update packages for fixing the vulnerabilities identified in the mozilla-firefox, qt, mozilla-thunderbird, libssh, mutt, php, seamonkey, ppp, proftpd, gnupg, ntp, bind, httpd and openssl package for multiple versions of Slackware Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.356157
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.357024
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.359872
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.382307
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.416238
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.429606
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.493735
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.497351
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.503863
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.517790
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.522767
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.522788
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.568837
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.756101
23. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0869-1, RHSA-2015:0870-1)
[23/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the kvm and kernel packages for Red Hat Enterprise Linux 5. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:rhn.redhat.com/errata/RHSA-2015-0869.html
URL:rhn.redhat.com/errata/RHSA-2015-0870.html
24. Vulnerability in Microsoft Windows
[22/04/2015] Vulnerability was identified in the Microsoft Windows. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 8 of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15042101
25. Vulnerability in Apple OS X
[22/04/2015] Vulnerability was identified in Apple OS X. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 10.0.3 of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15042201
26. Vulnerabilities in Cisco Unified MeetingPlace
[22/04/2015] Vulnerabilities were identified in the Cisco Unified MeetingPlace. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and perform cross-site scripting attacks. These vulnerabilities affect multiple firmware versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38460
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38461
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102468
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102469
27. Vulnerabilities in Novell Products (5207351)
[22/04/2015] Vulnerabilities were identified in the NetIQ Sentinel and NetIQ Sentinel Log Manager. An attacker could bypass security restriction, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=dpHkpNu89zw~
28. Vulnerability in F5 Products (SOL16473, SOL16476, SOL16480)
[22/04/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, FirePass, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security, BIG-IQ-ADC, LineRate and Traffix-SDC. An attacker could bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/100/sol16473.html
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16476.html
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16480.html
29. Vulnerability in Xen (XSA-132)
[22/04/2015] Vulnerability was identified in the Xen. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:xenbits.xen.org/xsa/advisory-132.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102388
30. Security Updates in Oracle Linux (ELSA-2015-0863, ELSA-2015-0864)
[22/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the glibc and kernel packages for Oracle Linux 6. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-0863.html
URL:linux.oracle.com/errata/ELSA-2015-0864.html
31. Security Updates in Debian (DSA-3230-1, DSA-3231-1)
[22/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the django-markupfield and subversion packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3230
URL:www.debian.org/security/2015/dsa-3231
32. Security Updates in SUSE (SUSE-SU-2015:0743-1)
[22/04/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the mariadb package of SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
33. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0863-1, RHSA-2015:0864-1, RHSA-2015:0867-1, RHSA-2015:0868-1)
[22/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the glibc, kernel, qemu-kvm and qemu-kvm-rhev packages for Red Hat Enterprise Linux 6. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0863.html
URL:rhn.redhat.com/errata/RHSA-2015-0864.html
URL:rhn.redhat.com/errata/RHSA-2015-0867.html
URL:rhn.redhat.com/errata/RHSA-2015-0868.html
34. Security Updates in Ubuntu GNU/Linux (USN-2573-1, USN-2574-1, USN-2575-1)
[22/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the openjdk-6, openjdk-7 and mysql-5.5 packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2573-1/
URL:www.ubuntu.com/usn/usn-2574-1/
URL:www.ubuntu.com/usn/usn-2575-1/
35. Vulnerability in Mozilla Firefox (MFSA 2015-45)
[21/04/2015] Vulnerability was identified in Mozilla Firefox. An attacker could potentially execute arbitrary code. This vulnerability affects versions prior to 37.0.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-45/
36. Vulnerabilities in Cisco Unified MeetingPlace
[21/04/2015] Vulnerabilities were identified in the Cisco Unified MeetingPlace. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross-site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38455
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38459
37. Vulnerability in F5 Products (SOL16472)
[21/04/2015] Vulnerability was identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security and BIG-IQ ADC. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:support.f5.com/kb/en-us/solutions/public/16000/100/sol16472.html
38. Vulnerability in NetNanny (VU#260780)
[21/04/2015] Vulnerability was identified in the NetNanny. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code and perform spoofing attacks. This vulnerability affects version 7.2.4.2 and possibly other versions of the mentioned product.
URL:www.kb.cert.org/vuls/id/260780
39. Security Updates in SUSE (openSUSE-SU-2015:0732-1, SUSE-SU-2015:0736-1)
[21/04/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xen package of openSUSE 13.1, and the Real Time Linux Kernel package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
URL:lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
40. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0856-1, RHSA-2015:0857-1, RHSA-2015:0858-1)
[21/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the postgresql package for Red Hat Satellite 5.7, the java-1.7.0-oracle and java-1.6.0-oracle packages for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0856.html
URL:rhn.redhat.com/errata/RHSA-2015-0857.html
URL:rhn.redhat.com/errata/RHSA-2015-0858.html
41. Security Updates in Ubuntu GNU/Linux (USN-2572-1)
[21/04/2015] Ubuntu has released security update packages for fixing the vulnerability identified in the php5 package for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2572-1/
42. Vulnerabilities in Novell ZENworks Configuration Management (5206350)
[20/04/2015] Vulnerabilities were identified in the Novell ZENworks Configuration Management. An attacker could bypass security restriction, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=BJbybNUmQRQ~
43. Vulnerability in GnuTLS
[20/04/2015] Vulnerability was identified in the GnuTLS. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. This vulnerability affects versions prior to 3.1.0 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.gnutls.org/security.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102423
44. Security Updates in Debian (DSA-3228-1, DSA-3229-1)
[20/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the ppp and mysql-5.5 packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3228
URL:www.debian.org/security/2015/dsa-3229
45. Security Updates in Gentoo Linux (GLSA 201504-06, GLSA 201504-07)
[20/04/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the xorg-server and adobe-flash packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201504-06
URL:security.gentoo.org/glsa/201504-07
46. Security Updates in Mageia (MGASA-2015-0159, MGASA-2015-0160, MGASA-2015-0161)
[20/04/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the perl-DBD-Firebird, perl-Module-Signature and potrace packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0159.html
URL:advisories.mageia.org/MGASA-2015-0160.html
URL:advisories.mageia.org/MGASA-2015-0161.html
47. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0854-1)
[20/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the java-1.8.0-oracle package for Red Hat Enterprise Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0854.html
[24/04/2015] Vulnerability was identified in the Apple iOS. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects version 8 of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15042401
2. Vulnerabilities in Cisco FireSIGHT Management Center
[24/04/2015] Vulnerabilities were identified in the Cisco FireSIGHT Management Center. An attacker could bypass security restrictions, execute arbitrary code, and perform web framework HTTP Header Redirection and cross-site scripting attacks. These vulnerabilities affect multiple firmware versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38486
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38487
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102511
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102512
3. Vulnerabilities in IBM Products (1882637, 1882876)
[24/04/2015] Vulnerabilities were identified in the IBM Lotus Quickr for WebSphere Portal and IBM Sametime Unified Telephony. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www-304.ibm.com/support/docview.wss?uid=swg21882637
URL:www-304.ibm.com/support/docview.wss?uid=swg21882876
4. Vulnerabilities in NetIQ LDAP Proxy (5204231)
[24/04/2015] Vulnerabilities were identified in the NetIQ LDAP Proxy. An attacker could bypass security restriction and obtain sensitive information. These vulnerabilities affect version 1.5 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=3x8lI-kJvhE~
5. Vulnerabilities in Trend Micro OfficeScan
[24/04/2015] Vulnerabilities were identified in the Trend Micro OfficeScan 10.6. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to Server Build 5779 and Client Module Build 5527 of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:files.trendmicro.com/documentation/readme/osce_106_sp3_patch1_win_all_criticalpatch_5779_readme.txt
6. Vulnerabilities in F5 Products (SOL16471, SOL16477, SOL16505)
[24/04/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM and Enterprise Manager. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16471.html
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16477.html
URL:support.f5.com/kb/en-us/solutions/public/16000/500/sol16505.html
7. Vulnerability in PowerDNS (2015-01)
[24/04/2015] Vulnerability was identified in the PowerDNS. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 3.5 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:doc.powerdns.com/md/security/powerdns-advisory-2015-01/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102537
8. Vulnerability in Drupal (DRUPAL-SA-CONTRIB-2015-099)
[24/04/2015] Vulnerability was identified in the Node Template module for Drupal. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.drupal.org/node/2475955
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102521
9. Vulnerability in Android component
[24/04/2015] Vulnerability was identified in the Android component wpa_supplicant. A remote attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects versions 1.0 - 2.4 of the mentioned component. Security patches are available to resolve this vulnerability.
URL:www.hkcert.org/my_url/en/alert/15042402
10. Vulnerability in WordPress
[24/04/2015] Vulnerability was identified in the WordPress. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. This vulnerability affects versions prior to 4.1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:wordpress.org/news/2015/04/wordpress-4-1-2/
URL:www.us-cert.gov/ncas/current-activity/2015/04/23/WordPress-Releases-Security-Update
11. Vulnerability in Red Hat JBoss Operations Network (102539)
[24/04/2015] Vulnerability was identified in the Red Hat JBoss Operations Network. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 3.0 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102539
12. Security Updates in Oracle Linux (ELSA-2015-3032, ELSA-2015-3033, ELSA-2015-3034)
[24/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the kernel package for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-3032.html
URL:linux.oracle.com/errata/ELSA-2015-3033.html
URL:linux.oracle.com/errata/ELSA-2015-3034.html
13. Security Updates in Mageia (MGASA-2015-0162, MGASA-2015-0163, MGASA-2015-0164, MGASA-2015-0165, MGASA-2015-0166, MGASA-2015-0167, MGASA-2015-0168)
[24/04/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the setup, chrony, chromium-browser-stable, lftp, libksba, t1utils and ntop packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0162.html
URL:advisories.mageia.org/MGASA-2015-0163.html
URL:advisories.mageia.org/MGASA-2015-0164.html
URL:advisories.mageia.org/MGASA-2015-0165.html
URL:advisories.mageia.org/MGASA-2015-0166.html
URL:advisories.mageia.org/MGASA-2015-0167.html
URL:advisories.mageia.org/MGASA-2015-0168.html
14. Security Updates in Ubuntu GNU/Linux (USN-2576-1, USN-2576-2, USN-2577-1)
[24/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the usb-creator and wpa packages for versions 12.04 LTS, 14.04 LTS, 14.10 and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2576-1/
URL:www.ubuntu.com/usn/usn-2576-2/
URL:www.ubuntu.com/usn/usn-2577-1/
15. Vulnerabilities in HP Products (102501, 102503)
[23/04/2015] Vulnerabilities were identified in the HP Data Protector, HP TippingPoint Security Management System (SMS) and HP TippingPoint Virtual Security Management System (vSMS). An attacker could bypass security restriction, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102501
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102503
16. Vulnerability in Novell ZENworks Configuration Management (5207650)
[23/04/2015] Vulnerability was identified in the Novell ZENworks Configuration Management. An attacker could bypass security restriction and obtain sensitive information. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:download.novell.com/Download?buildid=Ddi7yDlFrqA~
17. Vulnerability in F5 Products (SOL16479)
[23/04/2015] Vulnerability was identified in the F5 BIG-IP LTM, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, ARX and Enterprise Manager. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16479.html
18. Vulnerability in Photo Manager Pro for iOS (102496)
[23/04/2015] Vulnerability was identified in the Photo Manager Pro for iOS. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. This vulnerability affects version 4.4.0 Pro of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102496
19. Vulnerability in GNU glibc (102500)
[23/04/2015] Vulnerability was identified in the GNU glibc. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 2.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102500
20. Security Updates in Oracle Linux (ELSA-2015-0869)
[23/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the kvm package for Oracle Linux 5. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-0869.html
21. Security Updates in Debian (DSA-3232-1)
[23/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the curl package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3232
22. Security Updates in Slackware (SSA:2015-111-01, SSA:2015-111-02, SSA:2015-111-03, SSA:2015-111-04, SSA:2015-111-05, SSA:2015-111-06, SSA:2015-111-07, SSA:2015-111-08, SSA:2015-111-09, SSA:2015-111-10, SSA:2015-111-11, SSA:2015-111-12, SSA:2015-111-13, SSA:2015-111-14)
[23/04/2015] Slackware has released security update packages for fixing the vulnerabilities identified in the mozilla-firefox, qt, mozilla-thunderbird, libssh, mutt, php, seamonkey, ppp, proftpd, gnupg, ntp, bind, httpd and openssl package for multiple versions of Slackware Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.356157
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.357024
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.359872
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.382307
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.416238
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.429606
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.493735
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.497351
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.503863
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.517790
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.522767
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.522788
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.568837
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.756101
23. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0869-1, RHSA-2015:0870-1)
[23/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the kvm and kernel packages for Red Hat Enterprise Linux 5. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:rhn.redhat.com/errata/RHSA-2015-0869.html
URL:rhn.redhat.com/errata/RHSA-2015-0870.html
24. Vulnerability in Microsoft Windows
[22/04/2015] Vulnerability was identified in the Microsoft Windows. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 8 of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15042101
25. Vulnerability in Apple OS X
[22/04/2015] Vulnerability was identified in Apple OS X. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 10.0.3 of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15042201
26. Vulnerabilities in Cisco Unified MeetingPlace
[22/04/2015] Vulnerabilities were identified in the Cisco Unified MeetingPlace. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and perform cross-site scripting attacks. These vulnerabilities affect multiple firmware versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38460
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38461
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102468
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102469
27. Vulnerabilities in Novell Products (5207351)
[22/04/2015] Vulnerabilities were identified in the NetIQ Sentinel and NetIQ Sentinel Log Manager. An attacker could bypass security restriction, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=dpHkpNu89zw~
28. Vulnerability in F5 Products (SOL16473, SOL16476, SOL16480)
[22/04/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, FirePass, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security, BIG-IQ-ADC, LineRate and Traffix-SDC. An attacker could bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/100/sol16473.html
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16476.html
URL:support.f5.com/kb/en-us/solutions/public/16000/400/sol16480.html
29. Vulnerability in Xen (XSA-132)
[22/04/2015] Vulnerability was identified in the Xen. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:xenbits.xen.org/xsa/advisory-132.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102388
30. Security Updates in Oracle Linux (ELSA-2015-0863, ELSA-2015-0864)
[22/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the glibc and kernel packages for Oracle Linux 6. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-0863.html
URL:linux.oracle.com/errata/ELSA-2015-0864.html
31. Security Updates in Debian (DSA-3230-1, DSA-3231-1)
[22/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the django-markupfield and subversion packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3230
URL:www.debian.org/security/2015/dsa-3231
32. Security Updates in SUSE (SUSE-SU-2015:0743-1)
[22/04/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the mariadb package of SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html
33. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0863-1, RHSA-2015:0864-1, RHSA-2015:0867-1, RHSA-2015:0868-1)
[22/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the glibc, kernel, qemu-kvm and qemu-kvm-rhev packages for Red Hat Enterprise Linux 6. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0863.html
URL:rhn.redhat.com/errata/RHSA-2015-0864.html
URL:rhn.redhat.com/errata/RHSA-2015-0867.html
URL:rhn.redhat.com/errata/RHSA-2015-0868.html
34. Security Updates in Ubuntu GNU/Linux (USN-2573-1, USN-2574-1, USN-2575-1)
[22/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the openjdk-6, openjdk-7 and mysql-5.5 packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2573-1/
URL:www.ubuntu.com/usn/usn-2574-1/
URL:www.ubuntu.com/usn/usn-2575-1/
35. Vulnerability in Mozilla Firefox (MFSA 2015-45)
[21/04/2015] Vulnerability was identified in Mozilla Firefox. An attacker could potentially execute arbitrary code. This vulnerability affects versions prior to 37.0.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-45/
36. Vulnerabilities in Cisco Unified MeetingPlace
[21/04/2015] Vulnerabilities were identified in the Cisco Unified MeetingPlace. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross-site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38455
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38459
37. Vulnerability in F5 Products (SOL16472)
[21/04/2015] Vulnerability was identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security and BIG-IQ ADC. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:support.f5.com/kb/en-us/solutions/public/16000/100/sol16472.html
38. Vulnerability in NetNanny (VU#260780)
[21/04/2015] Vulnerability was identified in the NetNanny. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code and perform spoofing attacks. This vulnerability affects version 7.2.4.2 and possibly other versions of the mentioned product.
URL:www.kb.cert.org/vuls/id/260780
39. Security Updates in SUSE (openSUSE-SU-2015:0732-1, SUSE-SU-2015:0736-1)
[21/04/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xen package of openSUSE 13.1, and the Real Time Linux Kernel package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html
URL:lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
40. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0856-1, RHSA-2015:0857-1, RHSA-2015:0858-1)
[21/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the postgresql package for Red Hat Satellite 5.7, the java-1.7.0-oracle and java-1.6.0-oracle packages for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0856.html
URL:rhn.redhat.com/errata/RHSA-2015-0857.html
URL:rhn.redhat.com/errata/RHSA-2015-0858.html
41. Security Updates in Ubuntu GNU/Linux (USN-2572-1)
[21/04/2015] Ubuntu has released security update packages for fixing the vulnerability identified in the php5 package for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2572-1/
42. Vulnerabilities in Novell ZENworks Configuration Management (5206350)
[20/04/2015] Vulnerabilities were identified in the Novell ZENworks Configuration Management. An attacker could bypass security restriction, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=BJbybNUmQRQ~
43. Vulnerability in GnuTLS
[20/04/2015] Vulnerability was identified in the GnuTLS. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. This vulnerability affects versions prior to 3.1.0 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.gnutls.org/security.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/102423
44. Security Updates in Debian (DSA-3228-1, DSA-3229-1)
[20/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the ppp and mysql-5.5 packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3228
URL:www.debian.org/security/2015/dsa-3229
45. Security Updates in Gentoo Linux (GLSA 201504-06, GLSA 201504-07)
[20/04/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the xorg-server and adobe-flash packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201504-06
URL:security.gentoo.org/glsa/201504-07
46. Security Updates in Mageia (MGASA-2015-0159, MGASA-2015-0160, MGASA-2015-0161)
[20/04/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the perl-DBD-Firebird, perl-Module-Signature and potrace packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0159.html
URL:advisories.mageia.org/MGASA-2015-0160.html
URL:advisories.mageia.org/MGASA-2015-0161.html
47. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0854-1)
[20/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the java-1.8.0-oracle package for Red Hat Enterprise Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0854.html
Sunday, June 8, 2014
IT Security Alerts Weekly Digest (1 Jun ~ 7 Jun 2014)
1. Vulnerabilities in OpenSSL
(secadv_20140605)
[06/06/2014] Vulnerabilities were identified in the OpenSSL. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect versions prior to 0.9.8za, 1.0.0m or 1.0.1h of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.openssl.org/news/secadv_20140605.txt
URL:www.hkcert.org/my_url/en/alert/14060601
URL:www.kb.cert.org/vuls/id/978508
URL:www.us-cert.gov/ncas/current-activity/2014/06/05/OpenSSL-Releases-Security-Advisory
URL:xforce.iss.net/xforce/xfdb/93586
URL:xforce.iss.net/xforce/xfdb/93587
URL:xforce.iss.net/xforce/xfdb/93588
URL:xforce.iss.net/xforce/xfdb/93589
URL:secunia.com/advisories/58403/
2. Vulnerabilities in Cisco Products (cisco-sa-20140605-openssl)
[06/06/2014] Vulnerabilities were identified in multiple Cisco products. An attacker could bypass security restrictions, perform a man-in-the-middle attack, cause a denial of service condition, obtain sensitive information and execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl
3. Vulnerabilities in IBM Products (1663324, 1672078, 1672080, 1674754)
[06/06/2014] Vulnerabilities were identified in the IBM Tivoli Composite Application Manager for Transactions, IBM InfoSphere Streams, IBM Tivoli Identity Manager, IBM Security Identity Manager and IBM Security QRadar. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, perform cross-site request forgery attacks, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21663324
URL:www.ibm.com/support/docview.wss?uid=swg21672078
URL:www.ibm.com/support/docview.wss?uid=swg21672080
URL:www.ibm.com/support/docview.wss?uid=swg21674754
URL:secunia.com/advisories/59070/
URL:secunia.com/advisories/59074/
URL:secunia.com/advisories/59080/
URL:secunia.com/advisories/59082/
4. Vulnerability in Linux Kernel (93593)
[06/06/2014] Vulnerability was identified in the Linux Kernel. An attacker could gain elevated privileges. The affected version was not specified. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93593
5. Vulnerabilities in Oracle Linux (ELSA-2014-0595, ELSA-2014-0596)
[06/06/2014] Vulnerabilities were identified in the gnutls and libtasn1 packages for Oracle Linux 6. An attacker could cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:linux.oracle.com/errata/ELSA-2014-0595.html
URL:linux.oracle.com/errata/ELSA-2014-0596.html
URL:secunia.com/advisories/58591/
URL:secunia.com/advisories/58601/
6. Security Updates in Debian (DSA-2949-1, DSA-2950-1, DSA-2951-1)
[06/06/2014] Debian has released security update packages for fixing the vulnerabilities identified in the linux kernel, openssl and mupdf packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:www.debian.org/security/2014/dsa-2949
URL:www.debian.org/security/2014/dsa-2950
URL:www.debian.org/security/2014/dsa-2951
7. Security Updates in Red Hat Products (RHSA-2014-0624-1, RHSA-2014-0625-1, RHSA-2014-0626-1, RHSA-2014-0627-1, RHSA-2014-0628-1, RHSA-2014-0629-1)
[06/06/2014] Red Hat has released security update packages for fixing the vulnerabilities identified in the openssl, openssl097a, openssl098e and rhev-hypervisor6 packages for Red Hat Enterprise Linux 4, 5 and 6, Red Hat Storage 2.1 and Red Hat Enterprise Virtualization 3. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.
URL:rhn.redhat.com/errata/RHSA-2014-0624.html
URL:rhn.redhat.com/errata/RHSA-2014-0625.html
URL:rhn.redhat.com/errata/RHSA-2014-0626.html
URL:rhn.redhat.com/errata/RHSA-2014-0627.html
URL:rhn.redhat.com/errata/RHSA-2014-0628.html
URL:rhn.redhat.com/errata/RHSA-2014-0629.html
8. Security Updates in SUSE (SUSE-SU-2014:0759-1, SUSE-SU-2014:0761-1)
[06/06/2014] SUSE has released security update packages for fixing the vulnerabilities identified in the openssl package for SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the application.
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00004.html
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html
9. Security Updates in Ubuntu GNU/Linux (usn-2232-1, usn-2233-1, usn-2234-1, usn-2235-1, usn-2236-1, usn-2237-1, usn-2238-1, usn-2239-1, usn-2240-1, usn-2241-1)
[06/06/2014] Ubuntu has released security update packages for fixing the vulnerabilities identified in the openssl, linux, linux-ec2, linux-ti-omap4, linux-lts-quantal, linux-lts-raring and linux-lts-saucy packages for versions 10.04 LTS, 12.04 LTS, 13.10 and 14.04 LTS of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2232-1/
URL:www.ubuntu.com/usn/usn-2233-1/
URL:www.ubuntu.com/usn/usn-2234-1/
URL:www.ubuntu.com/usn/usn-2235-1/
URL:www.ubuntu.com/usn/usn-2236-1/
URL:www.ubuntu.com/usn/usn-2237-1/
URL:www.ubuntu.com/usn/usn-2238-1/
URL:www.ubuntu.com/usn/usn-2239-1/
URL:www.ubuntu.com/usn/usn-2240-1/
URL:www.ubuntu.com/usn/usn-2241-1/
10. Information Updates on Microsoft Security Bulletin (2893294)
[05/06/2014] Microsoft has updated information on the Security Bulletin for Microsoft Windows. MS13-098 was updated the Known Issues entry in the Knowledge Base Article section from "None" to "Yes".
URL:technet.microsoft.com/library/security/ms13-098
11. Vulnerabilities in IBM Products (T1020893, T1020894, T1020895, T1020896, 1654970, 1654973, 1659489, 1671340, 1671958, 1672822, 1672835, 1672887, 1673098, 1673101, 1673410, 1673715, 1673847, 1674113, 1674310, 1674435, 1674493, 1674613)
[05/06/2014] Vulnerabilities were identified in the IBM Platform Symphony, IBM Platform Cluster Manager, IBM Platform HPC, IBM Platform Application Center, IBM Smart Analytics System, IBM Cognos BI Server, IBM Tivoli Application Dependency Discovery Manager, IBM Endpoint Manager for Remote Control, IBM Tivoli Endpoint Manager for Remote Control, IBM Cognos Express, IBM Tivoli Monitoring, IBM Sterling Connect:Direct for UNIX, IBM Social Media Analytics, IBM Rational Application Developer, IBM WebSphere Lombardi Edition, IBM Business Process Manager, IBM Algo One, IBM Content Navigator and IBM Virtual I/O Server. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=isg3T1020893
URL:www.ibm.com/support/docview.wss?uid=isg3T1020894
URL:www.ibm.com/support/docview.wss?uid=isg3T1020895
URL:www.ibm.com/support/docview.wss?uid=isg3T1020896
URL:www.ibm.com/support/docview.wss?uid=swg21654970
URL:www.ibm.com/support/docview.wss?uid=swg21654973
URL:www.ibm.com/support/docview.wss?uid=swg21659489
URL:www.ibm.com/support/docview.wss?uid=swg21671340
URL:www.ibm.com/support/docview.wss?uid=swg21671958
URL:www.ibm.com/support/docview.wss?uid=swg21672822
URL:www.ibm.com/support/docview.wss?uid=swg21672835
URL:www.ibm.com/support/docview.wss?uid=swg21672887
URL:www.ibm.com/support/docview.wss?uid=swg21673098
URL:www.ibm.com/support/docview.wss?uid=swg21673101
URL:www.ibm.com/support/docview.wss?uid=swg21673410
URL:www.ibm.com/support/docview.wss?uid=swg21673715
URL:www.ibm.com/support/docview.wss?uid=swg21673847
URL:www.ibm.com/support/docview.wss?uid=swg21674113
URL:www.ibm.com/support/docview.wss?uid=swg21674310
URL:www.ibm.com/support/docview.wss?uid=swg21674435
URL:www.ibm.com/support/docview.wss?uid=swg21674493
URL:www.ibm.com/support/docview.wss?uid=swg21674613
URL:www14.software.ibm.com/webapp/set2/sas/f/vios/home.html#advise
URL:secunia.com/advisories/58520/
URL:secunia.com/advisories/58563/
URL:secunia.com/advisories/58636/
URL:secunia.com/advisories/58720/
URL:secunia.com/advisories/58746/
URL:secunia.com/advisories/58749/
URL:secunia.com/advisories/58750/
URL:secunia.com/advisories/58824/
URL:secunia.com/advisories/58845/
URL:secunia.com/advisories/58882/
URL:secunia.com/advisories/58900/
URL:secunia.com/advisories/58950/
URL:secunia.com/advisories/58968/
URL:secunia.com/advisories/58995/
URL:secunia.com/advisories/58997/
URL:secunia.com/advisories/59001/
URL:secunia.com/advisories/59003/
12. Vulnerability in F5 ARX Series Products (SOL15300)
[05/06/2014] Vulnerability was identified in the bundled Apache HTTP Server in F5 ARX Series products. An attacker could cause a denial of service condition. This vulnerability affects versions 6.0.0 through 6.4.0 of the mentioned product.
URL:support.f5.com/kb/en-us/solutions/public/15000/300/sol15300.html
URL:secunia.com/advisories/58335/
13. Vulnerability in F-Secure Products (FSC-2014-5)
[05/06/2014] Vulnerability was identified in F-Secure Client Security, F-Secure E-mail and Server Security, F-Secure Internet Security, F-Secure Protection Service for Business Email and Server Security, F-Secure Safe Anywhere PC and F-Secure Server Security. An attacker could obtain sensitive information. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:www.f-secure.com/en/web/labs_global/fsc-2014-5
URL:secunia.com/advisories/58840
14. Vulnerabilities in Huawei Campus Products (Huawei-SA-20140604-01-Campus)
[05/06/2014] Vulnerabilities were identified in the Huawei Campus Series Switches. An attacker could cause a denial of service condition. These vulnerabilities affect firmware versions V200R003C00SPC300 and V200R003C00SPC500 of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-343206.htm
15. Vulnerability in WordPress (93554)
[05/06/2014] Vulnerability was identified in the Query Interface Plugin for Wordpress. An attacker could bypass security restrictions. This vulnerability affects versions prior to 1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93554
16. Vulnerabilities in Rocket Servergraph (93555, 93556, 93557)
[05/06/2014] Vulnerabilities were identified in the Rocket Servergraph. An attacker could gain elevated privileges, execute arbitrary code and cause a denial of service condition. The affected version was not specified.
URL:xforce.iss.net/xforce/xfdb/93555
URL:xforce.iss.net/xforce/xfdb/93556
URL:xforce.iss.net/xforce/xfdb/93557
17. Vulnerabilities in Oracle Linux (ELSA-2014-0594, ELSA-2014-0597)
[05/06/2014] Vulnerabilities were identified in the gnutls and squid packages for Oracle Linux 5 and 6. An attacker could cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:linux.oracle.com/errata/ELSA-2014-0594.html
URL:linux.oracle.com/errata/ELSA-2014-0597.html
URL:secunia.com/advisories/58738/
URL:secunia.com/advisories/59021/
18. Security Updates in Debian (DSA-2945-1, DSA-2946-1, DSA-2947-1, DSA-2948-1)
[05/06/2014] Debian has released security update packages for fixing the vulnerabilities identified in the chkrootkit, python-gnupg, libav and python-bottle packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and compromise the system.
URL:www.debian.org/security/2014/dsa-2945
URL:www.debian.org/security/2014/dsa-2946
URL:www.debian.org/security/2014/dsa-2947
URL:www.debian.org/security/2014/dsa-2948
19. Security Updates in Gentoo Linux (GLSA 201406-04, GLSA 201406-05)
[05/06/2014] Gentoo has released security update packages for fixing the vulnerabilities identified in the systemtap and mutt packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could cause a denial of service condition and execute arbitrary code.
URL:www.gentoo.org/security/en/glsa/glsa-201406-04.xml
URL:www.gentoo.org/security/en/glsa/glsa-201406-05.xml
20. Security Updates in SUSE (SUSE-SU-2014:0758-1)
[05/06/2014] SUSE has released security update packages for fixing the vulnerability identified in the gnutls package for SUSE Linux Enterprise 11. An attacker could bypass security restrictions and cause a denial of service condition.
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html
21. Security Updates in Ubuntu GNU/Linux (usn-2230-1)
[05/06/2014] Ubuntu has released security update packages for fixing the vulnerabilities identified in the chkrootkit package for versions 10.04 LTS, 12.04 LTS, 13.10 and 14.04 LTS of Ubuntu GNU/Linux. An attacker could gain elevated privileges and execute arbitrary code.
URL:www.ubuntu.com/usn/usn-2230-1/
22. Vulnerabilities in McAfee Network Data Loss Prevention (SB10074)
[04/06/2014] Vulnerabilities were identified in the McAfee Network Data Loss Prevention. An attacker could bypass certain security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect versions prior to 9.3.2 (RTW) of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:kc.mcafee.com/corporate/index?page=content&id=SB10074
URL:www.hkcert.org/my_url/en/alert/14060402
23. Vulnerabilities in Google Compute Engine VMs (93536)
[04/06/2014] Vulnerabilities were identified in the Google Compute Engine VMs. An attacker could cause a denial of service condition. The affected version was not specified.
URL:xforce.iss.net/xforce/xfdb/93536
24. Vulnerability in GNU libtasn1 (93535, 93538, 93539)
[04/06/2014] Vulnerability was identified in the GNU libtasn1. An attacker could cause a denial of service condition and crash the application. This vulnerability affects versions prior to 3.6 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93535
URL:xforce.iss.net/xforce/xfdb/93538
URL:xforce.iss.net/xforce/xfdb/93539
25. Vulnerability in WordPress (93549)
[04/06/2014] Vulnerability was identified in the DZS-VideoGallery Plugin for WordPress. An attacker could obtain sensitive information and perform cross-site scripting attacks. The affected version was not specified.
URL:xforce.iss.net/xforce/xfdb/93549
26. Security Updates in Red Hat Products (RHSA-2014:0593-1, RHSA-2014:0594-1, RHSA-2014:0595-1, RHSA-2014:0596-1, RHSA-2014:0597-1)
[04/06/2014] Red Hat has released security update packages for fixing the vulnerabilities identified in the kernel, gnutls, libtasn1 and squid packages for Red Hat Enterprise Linux 5 and 6. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.
URL:rhn.redhat.com/errata/RHSA-2014-0593.html
URL:rhn.redhat.com/errata/RHSA-2014-0594.html
URL:rhn.redhat.com/errata/RHSA-2014-0595.html
URL:rhn.redhat.com/errata/RHSA-2014-0596.html
URL:rhn.redhat.com/errata/RHSA-2014-0597.html
27. Vulnerabilities in Microsoft Windows
[03/06/2014] Vulnerabilities were identified in the Microsoft Windows. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. These vulnerabilities affect versions 8 Enterprise, 8.1 Professional and possibly other versions of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/14060301
URL:secunia.com/advisories/58891/
28. Vulnerabilities in IBM Products (1671201, 1671261, 1671748, 1673224, 1674016, 1674017, 1674075, 1674191, 1674379)
[03/06/2014] Vulnerabilities were identified in the IBM Sametime Meeting Server, IBM Web Experience Factory, IBM WebSphere Dashboard Framework, IBM Lotus Widget Factory, IBM InfoSphere Information Server, IBM InfoSphere Data Click, IBM WebSphere Partner Gateway Advanced/Enterprise Edition, IBM WebSphere Partner Gateway Express, IBM InfoSphere Guardium Database Activity Monitoring, IBM WebSphere Sensor Events and IBM Tivoli Integrated Portal. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21671201
URL:www.ibm.com/support/docview.wss?uid=swg21671261
URL:www.ibm.com/support/docview.wss?uid=swg21671748
URL:www.ibm.com/support/docview.wss?uid=swg21673224
URL:www.ibm.com/support/docview.wss?uid=swg21674016
URL:www.ibm.com/support/docview.wss?uid=swg21674017
URL:www.ibm.com/support/docview.wss?uid=swg21674075
URL:www.ibm.com/support/docview.wss?uid=swg21674191
URL:www.ibm.com/support/docview.wss?uid=swg21674379
URL:secunia.com/advisories/58647/
URL:secunia.com/advisories/58662/
URL:secunia.com/advisories/58670/
URL:secunia.com/advisories/58864/
URL:secunia.com/advisories/58865/
URL:secunia.com/advisories/58866/
URL:secunia.com/advisories/58905/
URL:secunia.com/advisories/58929/
29. Vulnerability in Dell Products (VU#124908)
[03/06/2014] Vulnerability was identified in the Dell ML6000 and Quantum Scalar i500 tape backup system. An attacker could bypass certain security restrictions, execute arbitrary code and perform code injection attacks. This vulnerability affects multiple firmware versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:www.kb.cert.org/vuls/id/124908
URL:xforce.iss.net/xforce/xfdb/93496
30. Vulnerability in Huawei Devices (VU#325636)
[03/06/2014] Vulnerability was identified in the Huawei E303 wireless broadband devices. An attacker could perform cross-site request forgery attacks. This vulnerability affects firmware version 22.157.18.00.858 of the mentioned products.
URL:www.kb.cert.org/vuls/id/325636
URL:xforce.iss.net/xforce/xfdb/93495
31. Vulnerabilities in VMware Products (VMSA-2014-0005)
[03/06/2014] Vulnerabilities were identified in the VMware Workstation, VMware Player, VMware Fusion, VMware ESXi and VMware vCenter Server Appliance. An attacker could bypass certain security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities of VMware Workstation, Player, Fusion and ESXi.
URL:www.vmware.com/security/advisories/VMSA-2014-0005.html
URL:xforce.iss.net/xforce/xfdb/93498
URL:xforce.iss.net/xforce/xfdb/93497
32. Vulnerability in webEdition CMS (93471)
[03/06/2014] Vulnerability was identified in the webEdition CMS. An attacker could bypass certain security restrictions and execute arbitrary code. This vulnerability affects version 6.1.0.2 of the mentioned products. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93471
33. Vulnerabilities in PHP
[03/06/2014] Vulnerabilities were identified in the PHP. An attacker could bypass certain security restrictions and cause a denial of service condition. These vulnerabilities affect versions prior to 5.4.29 and 5.5.13 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.php.net/ChangeLog-5.php#5.4.29
URL:www.php.net/ChangeLog-5.php#5.5.13
URL:secunia.com/advisories/58804/
34. Vulnerability in GnuTLS (GNUTLS-SA-2014-3)
[03/06/2014] Vulnerability was identified in the GnuTLS. An attacker could bypass certain security restrictions, execute arbitrary code, cause a denial of service condition and compromise the application. This vulnerability affects versions prior to 3.1.25, prior to 3.2.15, and prior to 3.3.4 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.gnutls.org/security.html#GNUTLS-SA-2014-3
URL:www.hkcert.org/my_url/en/alert/14060302
URL:secunia.com/advisories/58340/
35. Vulnerability in Samba
[03/06/2014] Vulnerability was identified in the Samba. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects versions prior to 4.1.8 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.samba.org/samba/security/CVE-2014-0178
URL:xforce.iss.net/xforce/xfdb/93455
36. Vulnerability in WordPress
[03/06/2014] Vulnerability was identified in the Query Interface plugin for WordPress. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions prior to 1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=907243%40query-interface&old=899114%40query-interface
URL:secunia.com/advisories/58380/
37. Vulnerabilities in OpenVZ
[03/06/2014] Vulnerabilities were identified in the OpenVZ. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and compromise a vulnerable system. These vulnerabilities affect versions prior to 042stab090.2 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:wiki.openvz.org/Download/kernel/rhel6/042stab090.2
URL:secunia.com/advisories/58926/
38. Security Updates in Debian (DSA-2939-1, DSA-2941-1, DSA-2942-1, DSA-2943-1, DSA-2944-1)
[03/06/2014] Debian has released security update packages for fixing the vulnerabilities identified in the chromium-browser, lxml, typo3-src, php5 and gnutls26 for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform cross-site scripting attacks, cause a denial of service condition and crash the application.
URL:www.debian.org/security/2014/dsa-2939
URL:www.debian.org/security/2014/dsa-2941
URL:www.debian.org/security/2014/dsa-2942
URL:www.debian.org/security/2014/dsa-2943
URL:www.debian.org/security/2014/dsa-2944
URL:secunia.com/advisories/58920/
39. Security Updates in Gentoo Linux (GLSA 201406-01, GLSA 201406-02, GLSA 201406-03)
[03/06/2014] Gentoo has released security update packages for fixing the vulnerabilities identified in the dbus, libarchive and fail2ban packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.
URL:www.gentoo.org/security/en/glsa/glsa-201406-01.xml
URL:www.gentoo.org/security/en/glsa/glsa-201406-02.xml
URL:www.gentoo.org/security/en/glsa/glsa-201406-03.xml
40. Security Updates in Red Hat Products (RHSA-2014:0591-1)
[03/06/2014] Red Hat has released security update packages for fixing the vulnerability identified in the JBoss Enterprise Application Platform for Red Hat Enterprise Linux 4, 5, and 6. An attacker could bypass security restrictions and execute arbitrary code.
URL:rhn.redhat.com/errata/RHSA-2014-0591.html
41. Security Updates in Slackware (SSA:2014-152-01)
[03/06/2014] Slackware has released security update packages for fixing the vulnerabilities identified in the mariadb package for version 14.1 of Slackware Linux. An attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.379108
42. Security Updates in SUSE (SUSE-SU-2014:0728-3)
[03/06/2014] SUSE has released security update packages for fixing the vulnerabilities identified in the IBM Java 6 packages for SUSE Linux Enterprise Server 11. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00001.html
43. Security Updates in Ubuntu GNU/Linux (usn-2229-1)
[03/06/2014] Ubuntu has released security update packages for fixing the vulnerabilities identified in the gnutls26 package for versions 10.04LTS, 12.04 LTS, 13.10 and 14.04 LTS of Ubuntu GNU/Linux. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the application.
URL:www.ubuntu.com/usn/usn-2229-1/
[06/06/2014] Vulnerabilities were identified in the OpenSSL. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect versions prior to 0.9.8za, 1.0.0m or 1.0.1h of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.openssl.org/news/secadv_20140605.txt
URL:www.hkcert.org/my_url/en/alert/14060601
URL:www.kb.cert.org/vuls/id/978508
URL:www.us-cert.gov/ncas/current-activity/2014/06/05/OpenSSL-Releases-Security-Advisory
URL:xforce.iss.net/xforce/xfdb/93586
URL:xforce.iss.net/xforce/xfdb/93587
URL:xforce.iss.net/xforce/xfdb/93588
URL:xforce.iss.net/xforce/xfdb/93589
URL:secunia.com/advisories/58403/
2. Vulnerabilities in Cisco Products (cisco-sa-20140605-openssl)
[06/06/2014] Vulnerabilities were identified in multiple Cisco products. An attacker could bypass security restrictions, perform a man-in-the-middle attack, cause a denial of service condition, obtain sensitive information and execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl
3. Vulnerabilities in IBM Products (1663324, 1672078, 1672080, 1674754)
[06/06/2014] Vulnerabilities were identified in the IBM Tivoli Composite Application Manager for Transactions, IBM InfoSphere Streams, IBM Tivoli Identity Manager, IBM Security Identity Manager and IBM Security QRadar. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, perform cross-site request forgery attacks, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21663324
URL:www.ibm.com/support/docview.wss?uid=swg21672078
URL:www.ibm.com/support/docview.wss?uid=swg21672080
URL:www.ibm.com/support/docview.wss?uid=swg21674754
URL:secunia.com/advisories/59070/
URL:secunia.com/advisories/59074/
URL:secunia.com/advisories/59080/
URL:secunia.com/advisories/59082/
4. Vulnerability in Linux Kernel (93593)
[06/06/2014] Vulnerability was identified in the Linux Kernel. An attacker could gain elevated privileges. The affected version was not specified. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93593
5. Vulnerabilities in Oracle Linux (ELSA-2014-0595, ELSA-2014-0596)
[06/06/2014] Vulnerabilities were identified in the gnutls and libtasn1 packages for Oracle Linux 6. An attacker could cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:linux.oracle.com/errata/ELSA-2014-0595.html
URL:linux.oracle.com/errata/ELSA-2014-0596.html
URL:secunia.com/advisories/58591/
URL:secunia.com/advisories/58601/
6. Security Updates in Debian (DSA-2949-1, DSA-2950-1, DSA-2951-1)
[06/06/2014] Debian has released security update packages for fixing the vulnerabilities identified in the linux kernel, openssl and mupdf packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:www.debian.org/security/2014/dsa-2949
URL:www.debian.org/security/2014/dsa-2950
URL:www.debian.org/security/2014/dsa-2951
7. Security Updates in Red Hat Products (RHSA-2014-0624-1, RHSA-2014-0625-1, RHSA-2014-0626-1, RHSA-2014-0627-1, RHSA-2014-0628-1, RHSA-2014-0629-1)
[06/06/2014] Red Hat has released security update packages for fixing the vulnerabilities identified in the openssl, openssl097a, openssl098e and rhev-hypervisor6 packages for Red Hat Enterprise Linux 4, 5 and 6, Red Hat Storage 2.1 and Red Hat Enterprise Virtualization 3. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.
URL:rhn.redhat.com/errata/RHSA-2014-0624.html
URL:rhn.redhat.com/errata/RHSA-2014-0625.html
URL:rhn.redhat.com/errata/RHSA-2014-0626.html
URL:rhn.redhat.com/errata/RHSA-2014-0627.html
URL:rhn.redhat.com/errata/RHSA-2014-0628.html
URL:rhn.redhat.com/errata/RHSA-2014-0629.html
8. Security Updates in SUSE (SUSE-SU-2014:0759-1, SUSE-SU-2014:0761-1)
[06/06/2014] SUSE has released security update packages for fixing the vulnerabilities identified in the openssl package for SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the application.
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00004.html
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00005.html
9. Security Updates in Ubuntu GNU/Linux (usn-2232-1, usn-2233-1, usn-2234-1, usn-2235-1, usn-2236-1, usn-2237-1, usn-2238-1, usn-2239-1, usn-2240-1, usn-2241-1)
[06/06/2014] Ubuntu has released security update packages for fixing the vulnerabilities identified in the openssl, linux, linux-ec2, linux-ti-omap4, linux-lts-quantal, linux-lts-raring and linux-lts-saucy packages for versions 10.04 LTS, 12.04 LTS, 13.10 and 14.04 LTS of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2232-1/
URL:www.ubuntu.com/usn/usn-2233-1/
URL:www.ubuntu.com/usn/usn-2234-1/
URL:www.ubuntu.com/usn/usn-2235-1/
URL:www.ubuntu.com/usn/usn-2236-1/
URL:www.ubuntu.com/usn/usn-2237-1/
URL:www.ubuntu.com/usn/usn-2238-1/
URL:www.ubuntu.com/usn/usn-2239-1/
URL:www.ubuntu.com/usn/usn-2240-1/
URL:www.ubuntu.com/usn/usn-2241-1/
10. Information Updates on Microsoft Security Bulletin (2893294)
[05/06/2014] Microsoft has updated information on the Security Bulletin for Microsoft Windows. MS13-098 was updated the Known Issues entry in the Knowledge Base Article section from "None" to "Yes".
URL:technet.microsoft.com/library/security/ms13-098
11. Vulnerabilities in IBM Products (T1020893, T1020894, T1020895, T1020896, 1654970, 1654973, 1659489, 1671340, 1671958, 1672822, 1672835, 1672887, 1673098, 1673101, 1673410, 1673715, 1673847, 1674113, 1674310, 1674435, 1674493, 1674613)
[05/06/2014] Vulnerabilities were identified in the IBM Platform Symphony, IBM Platform Cluster Manager, IBM Platform HPC, IBM Platform Application Center, IBM Smart Analytics System, IBM Cognos BI Server, IBM Tivoli Application Dependency Discovery Manager, IBM Endpoint Manager for Remote Control, IBM Tivoli Endpoint Manager for Remote Control, IBM Cognos Express, IBM Tivoli Monitoring, IBM Sterling Connect:Direct for UNIX, IBM Social Media Analytics, IBM Rational Application Developer, IBM WebSphere Lombardi Edition, IBM Business Process Manager, IBM Algo One, IBM Content Navigator and IBM Virtual I/O Server. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=isg3T1020893
URL:www.ibm.com/support/docview.wss?uid=isg3T1020894
URL:www.ibm.com/support/docview.wss?uid=isg3T1020895
URL:www.ibm.com/support/docview.wss?uid=isg3T1020896
URL:www.ibm.com/support/docview.wss?uid=swg21654970
URL:www.ibm.com/support/docview.wss?uid=swg21654973
URL:www.ibm.com/support/docview.wss?uid=swg21659489
URL:www.ibm.com/support/docview.wss?uid=swg21671340
URL:www.ibm.com/support/docview.wss?uid=swg21671958
URL:www.ibm.com/support/docview.wss?uid=swg21672822
URL:www.ibm.com/support/docview.wss?uid=swg21672835
URL:www.ibm.com/support/docview.wss?uid=swg21672887
URL:www.ibm.com/support/docview.wss?uid=swg21673098
URL:www.ibm.com/support/docview.wss?uid=swg21673101
URL:www.ibm.com/support/docview.wss?uid=swg21673410
URL:www.ibm.com/support/docview.wss?uid=swg21673715
URL:www.ibm.com/support/docview.wss?uid=swg21673847
URL:www.ibm.com/support/docview.wss?uid=swg21674113
URL:www.ibm.com/support/docview.wss?uid=swg21674310
URL:www.ibm.com/support/docview.wss?uid=swg21674435
URL:www.ibm.com/support/docview.wss?uid=swg21674493
URL:www.ibm.com/support/docview.wss?uid=swg21674613
URL:www14.software.ibm.com/webapp/set2/sas/f/vios/home.html#advise
URL:secunia.com/advisories/58520/
URL:secunia.com/advisories/58563/
URL:secunia.com/advisories/58636/
URL:secunia.com/advisories/58720/
URL:secunia.com/advisories/58746/
URL:secunia.com/advisories/58749/
URL:secunia.com/advisories/58750/
URL:secunia.com/advisories/58824/
URL:secunia.com/advisories/58845/
URL:secunia.com/advisories/58882/
URL:secunia.com/advisories/58900/
URL:secunia.com/advisories/58950/
URL:secunia.com/advisories/58968/
URL:secunia.com/advisories/58995/
URL:secunia.com/advisories/58997/
URL:secunia.com/advisories/59001/
URL:secunia.com/advisories/59003/
12. Vulnerability in F5 ARX Series Products (SOL15300)
[05/06/2014] Vulnerability was identified in the bundled Apache HTTP Server in F5 ARX Series products. An attacker could cause a denial of service condition. This vulnerability affects versions 6.0.0 through 6.4.0 of the mentioned product.
URL:support.f5.com/kb/en-us/solutions/public/15000/300/sol15300.html
URL:secunia.com/advisories/58335/
13. Vulnerability in F-Secure Products (FSC-2014-5)
[05/06/2014] Vulnerability was identified in F-Secure Client Security, F-Secure E-mail and Server Security, F-Secure Internet Security, F-Secure Protection Service for Business Email and Server Security, F-Secure Safe Anywhere PC and F-Secure Server Security. An attacker could obtain sensitive information. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:www.f-secure.com/en/web/labs_global/fsc-2014-5
URL:secunia.com/advisories/58840
14. Vulnerabilities in Huawei Campus Products (Huawei-SA-20140604-01-Campus)
[05/06/2014] Vulnerabilities were identified in the Huawei Campus Series Switches. An attacker could cause a denial of service condition. These vulnerabilities affect firmware versions V200R003C00SPC300 and V200R003C00SPC500 of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-343206.htm
15. Vulnerability in WordPress (93554)
[05/06/2014] Vulnerability was identified in the Query Interface Plugin for Wordpress. An attacker could bypass security restrictions. This vulnerability affects versions prior to 1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93554
16. Vulnerabilities in Rocket Servergraph (93555, 93556, 93557)
[05/06/2014] Vulnerabilities were identified in the Rocket Servergraph. An attacker could gain elevated privileges, execute arbitrary code and cause a denial of service condition. The affected version was not specified.
URL:xforce.iss.net/xforce/xfdb/93555
URL:xforce.iss.net/xforce/xfdb/93556
URL:xforce.iss.net/xforce/xfdb/93557
17. Vulnerabilities in Oracle Linux (ELSA-2014-0594, ELSA-2014-0597)
[05/06/2014] Vulnerabilities were identified in the gnutls and squid packages for Oracle Linux 5 and 6. An attacker could cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:linux.oracle.com/errata/ELSA-2014-0594.html
URL:linux.oracle.com/errata/ELSA-2014-0597.html
URL:secunia.com/advisories/58738/
URL:secunia.com/advisories/59021/
18. Security Updates in Debian (DSA-2945-1, DSA-2946-1, DSA-2947-1, DSA-2948-1)
[05/06/2014] Debian has released security update packages for fixing the vulnerabilities identified in the chkrootkit, python-gnupg, libav and python-bottle packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and compromise the system.
URL:www.debian.org/security/2014/dsa-2945
URL:www.debian.org/security/2014/dsa-2946
URL:www.debian.org/security/2014/dsa-2947
URL:www.debian.org/security/2014/dsa-2948
19. Security Updates in Gentoo Linux (GLSA 201406-04, GLSA 201406-05)
[05/06/2014] Gentoo has released security update packages for fixing the vulnerabilities identified in the systemtap and mutt packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could cause a denial of service condition and execute arbitrary code.
URL:www.gentoo.org/security/en/glsa/glsa-201406-04.xml
URL:www.gentoo.org/security/en/glsa/glsa-201406-05.xml
20. Security Updates in SUSE (SUSE-SU-2014:0758-1)
[05/06/2014] SUSE has released security update packages for fixing the vulnerability identified in the gnutls package for SUSE Linux Enterprise 11. An attacker could bypass security restrictions and cause a denial of service condition.
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html
21. Security Updates in Ubuntu GNU/Linux (usn-2230-1)
[05/06/2014] Ubuntu has released security update packages for fixing the vulnerabilities identified in the chkrootkit package for versions 10.04 LTS, 12.04 LTS, 13.10 and 14.04 LTS of Ubuntu GNU/Linux. An attacker could gain elevated privileges and execute arbitrary code.
URL:www.ubuntu.com/usn/usn-2230-1/
22. Vulnerabilities in McAfee Network Data Loss Prevention (SB10074)
[04/06/2014] Vulnerabilities were identified in the McAfee Network Data Loss Prevention. An attacker could bypass certain security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect versions prior to 9.3.2 (RTW) of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:kc.mcafee.com/corporate/index?page=content&id=SB10074
URL:www.hkcert.org/my_url/en/alert/14060402
23. Vulnerabilities in Google Compute Engine VMs (93536)
[04/06/2014] Vulnerabilities were identified in the Google Compute Engine VMs. An attacker could cause a denial of service condition. The affected version was not specified.
URL:xforce.iss.net/xforce/xfdb/93536
24. Vulnerability in GNU libtasn1 (93535, 93538, 93539)
[04/06/2014] Vulnerability was identified in the GNU libtasn1. An attacker could cause a denial of service condition and crash the application. This vulnerability affects versions prior to 3.6 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93535
URL:xforce.iss.net/xforce/xfdb/93538
URL:xforce.iss.net/xforce/xfdb/93539
25. Vulnerability in WordPress (93549)
[04/06/2014] Vulnerability was identified in the DZS-VideoGallery Plugin for WordPress. An attacker could obtain sensitive information and perform cross-site scripting attacks. The affected version was not specified.
URL:xforce.iss.net/xforce/xfdb/93549
26. Security Updates in Red Hat Products (RHSA-2014:0593-1, RHSA-2014:0594-1, RHSA-2014:0595-1, RHSA-2014:0596-1, RHSA-2014:0597-1)
[04/06/2014] Red Hat has released security update packages for fixing the vulnerabilities identified in the kernel, gnutls, libtasn1 and squid packages for Red Hat Enterprise Linux 5 and 6. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.
URL:rhn.redhat.com/errata/RHSA-2014-0593.html
URL:rhn.redhat.com/errata/RHSA-2014-0594.html
URL:rhn.redhat.com/errata/RHSA-2014-0595.html
URL:rhn.redhat.com/errata/RHSA-2014-0596.html
URL:rhn.redhat.com/errata/RHSA-2014-0597.html
27. Vulnerabilities in Microsoft Windows
[03/06/2014] Vulnerabilities were identified in the Microsoft Windows. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. These vulnerabilities affect versions 8 Enterprise, 8.1 Professional and possibly other versions of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/14060301
URL:secunia.com/advisories/58891/
28. Vulnerabilities in IBM Products (1671201, 1671261, 1671748, 1673224, 1674016, 1674017, 1674075, 1674191, 1674379)
[03/06/2014] Vulnerabilities were identified in the IBM Sametime Meeting Server, IBM Web Experience Factory, IBM WebSphere Dashboard Framework, IBM Lotus Widget Factory, IBM InfoSphere Information Server, IBM InfoSphere Data Click, IBM WebSphere Partner Gateway Advanced/Enterprise Edition, IBM WebSphere Partner Gateway Express, IBM InfoSphere Guardium Database Activity Monitoring, IBM WebSphere Sensor Events and IBM Tivoli Integrated Portal. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise a vulnerable system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21671201
URL:www.ibm.com/support/docview.wss?uid=swg21671261
URL:www.ibm.com/support/docview.wss?uid=swg21671748
URL:www.ibm.com/support/docview.wss?uid=swg21673224
URL:www.ibm.com/support/docview.wss?uid=swg21674016
URL:www.ibm.com/support/docview.wss?uid=swg21674017
URL:www.ibm.com/support/docview.wss?uid=swg21674075
URL:www.ibm.com/support/docview.wss?uid=swg21674191
URL:www.ibm.com/support/docview.wss?uid=swg21674379
URL:secunia.com/advisories/58647/
URL:secunia.com/advisories/58662/
URL:secunia.com/advisories/58670/
URL:secunia.com/advisories/58864/
URL:secunia.com/advisories/58865/
URL:secunia.com/advisories/58866/
URL:secunia.com/advisories/58905/
URL:secunia.com/advisories/58929/
29. Vulnerability in Dell Products (VU#124908)
[03/06/2014] Vulnerability was identified in the Dell ML6000 and Quantum Scalar i500 tape backup system. An attacker could bypass certain security restrictions, execute arbitrary code and perform code injection attacks. This vulnerability affects multiple firmware versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:www.kb.cert.org/vuls/id/124908
URL:xforce.iss.net/xforce/xfdb/93496
30. Vulnerability in Huawei Devices (VU#325636)
[03/06/2014] Vulnerability was identified in the Huawei E303 wireless broadband devices. An attacker could perform cross-site request forgery attacks. This vulnerability affects firmware version 22.157.18.00.858 of the mentioned products.
URL:www.kb.cert.org/vuls/id/325636
URL:xforce.iss.net/xforce/xfdb/93495
31. Vulnerabilities in VMware Products (VMSA-2014-0005)
[03/06/2014] Vulnerabilities were identified in the VMware Workstation, VMware Player, VMware Fusion, VMware ESXi and VMware vCenter Server Appliance. An attacker could bypass certain security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities of VMware Workstation, Player, Fusion and ESXi.
URL:www.vmware.com/security/advisories/VMSA-2014-0005.html
URL:xforce.iss.net/xforce/xfdb/93498
URL:xforce.iss.net/xforce/xfdb/93497
32. Vulnerability in webEdition CMS (93471)
[03/06/2014] Vulnerability was identified in the webEdition CMS. An attacker could bypass certain security restrictions and execute arbitrary code. This vulnerability affects version 6.1.0.2 of the mentioned products. Security patches are available to resolve this vulnerability.
URL:xforce.iss.net/xforce/xfdb/93471
33. Vulnerabilities in PHP
[03/06/2014] Vulnerabilities were identified in the PHP. An attacker could bypass certain security restrictions and cause a denial of service condition. These vulnerabilities affect versions prior to 5.4.29 and 5.5.13 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.php.net/ChangeLog-5.php#5.4.29
URL:www.php.net/ChangeLog-5.php#5.5.13
URL:secunia.com/advisories/58804/
34. Vulnerability in GnuTLS (GNUTLS-SA-2014-3)
[03/06/2014] Vulnerability was identified in the GnuTLS. An attacker could bypass certain security restrictions, execute arbitrary code, cause a denial of service condition and compromise the application. This vulnerability affects versions prior to 3.1.25, prior to 3.2.15, and prior to 3.3.4 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.gnutls.org/security.html#GNUTLS-SA-2014-3
URL:www.hkcert.org/my_url/en/alert/14060302
URL:secunia.com/advisories/58340/
35. Vulnerability in Samba
[03/06/2014] Vulnerability was identified in the Samba. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects versions prior to 4.1.8 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.samba.org/samba/security/CVE-2014-0178
URL:xforce.iss.net/xforce/xfdb/93455
36. Vulnerability in WordPress
[03/06/2014] Vulnerability was identified in the Query Interface plugin for WordPress. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions prior to 1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=907243%40query-interface&old=899114%40query-interface
URL:secunia.com/advisories/58380/
37. Vulnerabilities in OpenVZ
[03/06/2014] Vulnerabilities were identified in the OpenVZ. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and compromise a vulnerable system. These vulnerabilities affect versions prior to 042stab090.2 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:wiki.openvz.org/Download/kernel/rhel6/042stab090.2
URL:secunia.com/advisories/58926/
38. Security Updates in Debian (DSA-2939-1, DSA-2941-1, DSA-2942-1, DSA-2943-1, DSA-2944-1)
[03/06/2014] Debian has released security update packages for fixing the vulnerabilities identified in the chromium-browser, lxml, typo3-src, php5 and gnutls26 for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform cross-site scripting attacks, cause a denial of service condition and crash the application.
URL:www.debian.org/security/2014/dsa-2939
URL:www.debian.org/security/2014/dsa-2941
URL:www.debian.org/security/2014/dsa-2942
URL:www.debian.org/security/2014/dsa-2943
URL:www.debian.org/security/2014/dsa-2944
URL:secunia.com/advisories/58920/
39. Security Updates in Gentoo Linux (GLSA 201406-01, GLSA 201406-02, GLSA 201406-03)
[03/06/2014] Gentoo has released security update packages for fixing the vulnerabilities identified in the dbus, libarchive and fail2ban packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.
URL:www.gentoo.org/security/en/glsa/glsa-201406-01.xml
URL:www.gentoo.org/security/en/glsa/glsa-201406-02.xml
URL:www.gentoo.org/security/en/glsa/glsa-201406-03.xml
40. Security Updates in Red Hat Products (RHSA-2014:0591-1)
[03/06/2014] Red Hat has released security update packages for fixing the vulnerability identified in the JBoss Enterprise Application Platform for Red Hat Enterprise Linux 4, 5, and 6. An attacker could bypass security restrictions and execute arbitrary code.
URL:rhn.redhat.com/errata/RHSA-2014-0591.html
41. Security Updates in Slackware (SSA:2014-152-01)
[03/06/2014] Slackware has released security update packages for fixing the vulnerabilities identified in the mariadb package for version 14.1 of Slackware Linux. An attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.379108
42. Security Updates in SUSE (SUSE-SU-2014:0728-3)
[03/06/2014] SUSE has released security update packages for fixing the vulnerabilities identified in the IBM Java 6 packages for SUSE Linux Enterprise Server 11. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:lists.opensuse.org/opensuse-security-announce/2014-06/msg00001.html
43. Security Updates in Ubuntu GNU/Linux (usn-2229-1)
[03/06/2014] Ubuntu has released security update packages for fixing the vulnerabilities identified in the gnutls26 package for versions 10.04LTS, 12.04 LTS, 13.10 and 14.04 LTS of Ubuntu GNU/Linux. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the application.
URL:www.ubuntu.com/usn/usn-2229-1/
Subscribe to:
Posts (Atom)