IT Security Alerts Weekly Digest (19 Jun ~ 25 Jun 2016)

Security Alerts

1. Vulnerabilities in Google Chrome

URL:googlechromereleases.blogspot.hk/2016/06/stable-channel-update_23.html

2. Vulnerabilities in Lenovo Solution Center

URL:support.lenovo.com/us/en/product_security/len_7814
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114394
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114395

3. Vulnerabilities in PHP

URL:bugs.php.net/bug.php?id=72262
URL:bugs.php.net/bug.php?id=72339
URL:bugs.php.net/bug.php?id=72340
URL:bugs.php.net/bug.php?id=72402
URL:bugs.php.net/bug.php?id=72433
URL:bugs.php.net/bug.php?id=72434
URL:bugs.php.net/bug.php?id=72446
URL:bugs.php.net/bug.php?id=72455
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114386
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114387
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114388
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114389
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114390
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114391
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114392
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114393

4. Vulnerabilities in Meinberg NTP Time Servers

URL:ics-cert.us-cert.gov/advisories/ICSA-16-175-03

5. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/22775cdd-395a-11e6-b3c8-14dae9d210b8.html
URL:www.vuxml.org/freebsd/4a0d9b53-395d-11e6-b3c8-14dae9d210b8.html

6. Security Update in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html

7. Security Updates in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-1277.html
URL:linux.oracle.com/errata/ELSA-2016-1292.html
URL:linux.oracle.com/errata/ELSA-2016-1293.html
URL:linux.oracle.com/errata/ELSA-2016-1296.html

8. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1277
URL:access.redhat.com/errata/RHSA-2016:1292
URL:access.redhat.com/errata/RHSA-2016:1293
URL:access.redhat.com/errata/RHSA-2016:1296
URL:access.redhat.com/errata/RHSA-2016:1301
URL:access.redhat.com/errata/RHSA-2016:1328
URL:access.redhat.com/errata/RHSA-2016:1330
URL:access.redhat.com/errata/RHSA-2016:1332

9. Vulnerability in Apache Tomcat

URL:mail-archives.us.apache.org/mod_mbox/www-announce/201606.mbox/%3C45A20804-ABFF-4FED-A297-69AC95AB9A3F@apache.org%3E

10. Vulnerabilities in Cisco Products

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160622-esa
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160622-ucce

11. Vulnerability in Huawei OceanStor 5800 V3 Storage Systems

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160622-01-oceanstor-en

12. Vulnerabilities in WordPress

URL:wordpress.org/news/2016/06/wordpress-4-5-3/
URL:www.hkcert.org/my_url/en/alert/16062301
URL:www.us-cert.gov/ncas/current-activity/2016/06/22/WordPress-Releases-Security-Update

13. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00045.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00046.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00047.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00049.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00050.html

14. Vulnerability in Apple Airport Base Station

URL:support.apple.com/en-us/HT206849
URL:www.hkcert.org/my_url/en/alert/16062201
URL:www.us-cert.gov/ncas/current-activity/2016/06/21/Apple-Releases-Security-Update

15. Vulnerabilities in Cisco Products

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-asr
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-pcd

16. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/1a2aa04f-3718-11e6-b3c8-14dae9d210b8.html
URL:www.vuxml.org/freebsd/6df56c60-3738-11e6-a671-60a44ce6887b.html

17. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00041.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00042.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00043.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

18. Security Updates in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-1267.html
URL:linux.oracle.com/errata/ELSA-2016-3576.html

19. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1267
URL:access.redhat.com/errata/RHSA-2016:1268
URL:access.redhat.com/errata/RHSA-2016:1269
URL:access.redhat.com/errata/RHSA-2016:1270
URL:access.redhat.com/errata/RHSA-2016:1271
URL:access.redhat.com/errata/RHSA-2016:1272

20. Security Update in Ubuntu

URL:www.ubuntu.com/usn/usn-3014-1/

21. Vulnerabilities in Apple Products

URL:support.apple.com/en-us/HT206846
URL:opensource.apple.com//tarballs/mDNSResponder/
URL:www.kb.cert.org/vuls/id/143335
URL:www.hkcert.org/my_url/en/alert/16062102

22. Vulnerabilities in Cisco Products

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-iosxe
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ip-phone
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-ipp
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-isr

23. Vulnerabilities in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/61/sol61275340.html
URL:support.f5.com/kb/en-us/solutions/public/k/78/sol78530002.html

24. Vulnerabilities in Google Chrome

URL:googlechromereleases.blogspot.hk/2016/06/stable-channel-update-for-chrome-os_20.html

25. Security Update in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html

26. Security Update in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1262

27. Security Updates in Slackware

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.339629
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110

28. Security Updates in Ubuntu

URL:www.ubuntu.com/usn/usn-3009-1/
URL:www.ubuntu.com/usn/usn-3010-1/
URL:www.ubuntu.com/usn/usn-3011-1/
URL:www.ubuntu.com/usn/usn-3012-1/
URL:www.ubuntu.com/usn/usn-3013-1/

29. Vulnerability in Apache Struts

URL:cwiki.apache.org/confluence/display/WW/S2-037
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114184

30. Vulnerabilities in Cisco Products

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160617-cbr
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160617-fmc
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios1
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114182

31. Vulnerabilities in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/31/sol31300371.html
URL:support.f5.com/kb/en-us/solutions/public/k/41/sol41739114.html

32. Vulnerabilities in Huawei Honor Routers

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160617-01-fusioninsight-en

33. Vulnerability in Trend Micro Deep Discovery Inspector

URL:esupport.trendmicro.com/solution/en-US/1114281.aspx
URL:exchange.xforce.ibmcloud.com/vulnerabilities/114174

34. Security Updates in Debian

URL:www.debian.org/security/2016/dsa-3604
URL:www.debian.org/security/2016/dsa-3605

35. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/07888b49-35c4-11e6-8e82-002590263bf5.html
URL:www.vuxml.org/freebsd/0c6b008d-35c4-11e6-8e82-002590263bf5.html
URL:www.vuxml.org/freebsd/0e3dfdde-35c4-11e6-8e82-002590263bf5.html
URL:www.vuxml.org/freebsd/1d0f6852-33d8-11e6-a671-60a44ce6887b.html
URL:www.vuxml.org/freebsd/d59ebed4-34be-11e6-be25-3065ec8fd3ec.html

36. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201606-06
URL:security.gentoo.org/glsa/201606-07
URL:security.gentoo.org/glsa/201606-08
URL:security.gentoo.org/glsa/201606-09
URL:security.gentoo.org/glsa/201606-10

37. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00029.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00030.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00036.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00037.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00039.html

38. Security Update in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1238

IT Security Alerts Weekly Digest (29 May ~ 4 Jun 2016)

1. Vulnerability in Lenovo Accelerator Application

URL:support.lenovo.com/us/en/product_security/len_6718
URL:www.us-cert.gov/ncas/current-activity/2016/06/02/Lenovo-Accelerator-Application-Vulnerability

2. Vulnerabilities in NTP

URL:support.ntp.org/bin/view/Main/SecurityNotice#June_2016_NTP_4_2_8p8_Security
URL:www.kb.cert.org/vuls/id/321640
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113695
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113696
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113697
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113698
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113699

3. Vulnerabilities in Trend Micro Products

URL:jvn.jp/en/jp/JVN48789425/index.html
URL:jvn.jp/en/jp/JVN48847535/index.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113718
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113719
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113721
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113722

4. Vulnerability in VideoLAN VLC Media Player

URL:securitytracker.com/id/1036009
URL:www.hkcert.org/my_url/en/alert/16060201

5. Vulnerabilities in Xen

URL:xenbits.xen.org/xsa/advisory-175.html
URL:xenbits.xen.org/xsa/advisory-178.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113738
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113739

6. Vulnerability in GE MultiLink Products

URL:www.gegridsolutions.com/app/Resources.aspx?prod=ml800&type=7
URL:www.gegridsolutions.com/app/Resources.aspx?prod=ml810&type=7
URL:www.gegridsolutions.com/app/Resources.aspx?prod=ml1200&type=7
URL:www.gegridsolutions.com/app/Resources.aspx?prod=ml1600&type=7
URL:www.gegridsolutions.com/app/Resources.aspx?prod=ml2400&type=7
URL:www.gegridsolutions.com/app/Resources.aspx?prod=ml3000&type=7
URL:ics-cert.us-cert.gov/advisories/ICSA-16-154-01

7. Security Update in Debian

URL:www.debian.org/security/2016/dsa-3593

8. Security Update in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.htm

9. Security Update in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1201

10. Security Updates in Ubuntu

URL:www.ubuntu.com/usn/usn-2990-1/
URL:www.ubuntu.com/usn/usn-2991-1/

11. Vulnerability in Apache Ranger

URL:exchange.xforce.ibmcloud.com/vulnerabilities/113691

12. Vulnerabilities in Cisco Products

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime2
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113687
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113688
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113689
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113690

13. Vulnerability in Fonality Product

URL:www.kb.cert.org/vuls/id/754056

14. Vulnerability in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/33/sol33285044.html

15. Vulnerabilities in Google Chrome

URL:googlechromereleases.blogspot.hk/2016/06/stable-channel-update.html

16. Vulnerabilities in Hewlett Packard Enterprise LoadRunner and
Performance Center

URL:h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05157423
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113692
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113693
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113694

17. Vulnerability in Huawei Videoconference Products

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160601-01-videoconference-en

18. Security Updates in Debian

URL:www.debian.org/security/2016/dsa-3590
URL:www.debian.org/security/2016/dsa-3591
URL:www.debian.org/security/2016/dsa-3592

19. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html
URL:lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html

20. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1182
URL:access.redhat.com/errata/RHSA-2016:1190

21. Security Update in Ubuntu

URL:www.ubuntu.com/usn/usn-2989-1/

22. Vulnerability in Cisco Product

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160531-wsa-esa
URL:www.hkcert.org/my_url/en/alert/16060101
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113593

23. Vulnerabilities in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/31/sol31211252.html
URL:support.f5.com/kb/en-us/solutions/public/k/34/sol34958244.html
URL:support.f5.com/kb/en-us/solutions/public/k/71/sol71960814.html

24. Vulnerability in PHP

URL:exchange.xforce.ibmcloud.com/vulnerabilities/113583

25. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201605-05
URL:security.gentoo.org/glsa/201605-06

26. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1137
URL:access.redhat.com/errata/RHSA-2016:1138
URL:access.redhat.com/errata/RHSA-2016:1139
URL:access.redhat.com/errata/RHSA-2016:1140
URL:access.redhat.com/errata/RHSA-2016:1141
URL:access.redhat.com/errata/RHSA-2016:1166

27. Security Updates in Slackware

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.360791
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.397749

28. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html

29. Vulnerabilities in phpMyAdmin

URL:www.phpmyadmin.net/security/PMASA-2016-15/
URL:www.hkcert.org/my_url/en/alert/16053001

30. Security Update in Debian

URL:www.debian.org/security/2016/dsa-3589
URL:security-tracker.debian.org/tracker/CVE-2015-7552
URL:security-tracker.debian.org/tracker/CVE-2015-8875

31. Security Updates in Gentoo Linux

URL:security.gentoo.org/glsa/201605-02
URL:security.gentoo.org/glsa/201605-03
URL:security.gentoo.org/glsa/201605-04

32. Security Update in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00065.html

33. Vulnerability in Apache PDFBox

URL:exchange.xforce.ibmcloud.com/vulnerabilities/113548

34. Vulnerability in Apache Qpid

URL:exchange.xforce.ibmcloud.com/vulnerabilities/113549

35. Vulnerability in Cisco Firepower Management Center

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160527-fmc
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113551

36. Vulnerabilities in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/25/sol25527955.html
URL:support.f5.com/kb/en-us/solutions/public/k/73/sol73112451.html
URL:support.f5.com/kb/en-us/solutions/public/k/81/sol81223200.html

37. Vulnerability in Huawei Products

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en

38. Vulnerability in VideoLAN VLC Media Player

URL:exchange.xforce.ibmcloud.com/vulnerabilities/113552

39. Security Updates in Debian

URL:www.debian.org/security/2016/dsa-3587
URL:www.debian.org/security/2016/dsa-3588

40. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/1a6bbb95-24b8-11e6-bd31-3065ec8fd3ec.html
URL:www.vuxml.org/freebsd/4dfafa16-24ba-11e6-bd31-3065ec8fd3ec.html
URL:www.vuxml.org/freebsd/6167b341-250c-11e6-a6fb-003048f2e514.html
URL:www.vuxml.org/freebsd/6b110175-246d-11e6-8dd3-002590263bf5.html
URL:www.vuxml.org/freebsd/7da1da96-24bb-11e6-bd31-3065ec8fd3ec.html
URL:www.vuxml.org/freebsd/b53bbf58-257f-11e6-9f4d-20cf30e32f6d.html

41. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html

42. Security Updates in Slackware

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.397230
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.404722

IT Security Alerts Weekly Digest (8 May ~ 14 May 2016)

1. Vulnerabilities in Adobe Flash Player

URL:helpx.adobe.com/security/products/flash-player/apsb16-15.html
URL:www.hkcert.org/my_url/en/alert/16051115
URL:www.us-cert.gov/ncas/current-activity/2016/05/12/Adobe-Releases-Security-Updates-Flash-Player

2. Vulnerability in 7-zip

URL:www.hkcert.org/my_url/zh/alert/16051301
URL:securitytracker.com/id/1035876

3. Vulnerability in Meteocontrol WEB'log

URL:us.meteocontrol.com/downloads/
URL:ics-cert.us-cert.gov/advisories/ICSA-16-133-01

4. Vulnerability in Symantec Messaging Gateway

URL:www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00

5. Security Updates in Mageia

URL:advisories.mageia.org/MGASA-2016-0172.html
URL:advisories.mageia.org/MGASA-2016-0173.html

6. Security Updates in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html

7. Security Updates in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-0741.html
URL:linux.oracle.com/errata/ELSA-2016-0760.html
URL:linux.oracle.com/errata/ELSA-2016-0778.html
URL:linux.oracle.com/errata/ELSA-2016-0780.html
URL:linux.oracle.com/errata/ELSA-2016-0996.html
URL:linux.oracle.com/errata/ELSA-2016-1033.html
URL:linux.oracle.com/errata/ELSA-2016-1041.html

8. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1033
URL:access.redhat.com/errata/RHSA-2016:1034
URL:access.redhat.com/errata/RHSA-2016:1041
URL:access.redhat.com/errata/RHSA-2016:1051
URL:access.redhat.com/errata/RHSA-2016:1055
URL:access.redhat.com/errata/RHSA-2016:1060
URL:access.redhat.com/errata/RHSA-2016:1064

9. Security Update in Slackware

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.359500

10. Security Update in Ubuntu

URL:www.ubuntu.com/usn/usn-2974-1/

11. Vulnerability in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/23/sol23073482.html

12. Vulnerability in Google Chrome

URL:googlechromereleases.blogspot.hk/
URL:www.us-cert.gov/ncas/current-activity/2016/05/11/Google-Releases-Security-Update-Chrome

13. Vulnerabilities in Huawei Products

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-aspf-en
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en

14. Vulnerability in Lenovo Solution Center

URL:support.lenovo.com/hk/zh/product_security/len_4326
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113137

15. Security Update in FreeBSD

URL:www.vuxml.org/freebsd/e387834a-17ef-11e6-9947-7054d2909b71.html

16. Security Updates in Mageia

URL:advisories.mageia.org/MGAA-2016-0072.html
URL:advisories.mageia.org/MGAA-2016-0073.html
URL:advisories.mageia.org/MGASA-2016-0170.html
URL:advisories.mageia.org/MGASA-2016-0171.html

17. Security Updates in openSUSE and SUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161275-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161276-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161277-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161278-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161279-1.html

18. Security Update in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-1025.html

19. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:1025
URL:access.redhat.com/errata/RHSA-2016:1038
URL:access.redhat.com/errata/RHSA-2016:1039

20. Security Update in Slackware

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568

21. Vulnerabilities in Adobe Reader/Acrobat, Adobe Flash Player and
ColdFusion

URL:helpx.adobe.com/security/products/acrobat/apsb16-14.html
URL:helpx.adobe.com/security/products/coldfusion/apsb16-16.html
URL:helpx.adobe.com/security/products/flash-player/apsa16-02.html
URL:www.us-cert.gov/ncas/current-activity/2016/05/10/Adobe-Releases-Security-Updates

22. Vulnerability in Cisco Cloud Network Automation Provisioner

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160510-cnap

23. Vulnerabilities in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/35/sol35358312.html
URL:support.f5.com/kb/en-us/solutions/public/k/37/sol37603172.html
URL:support.f5.com/kb/en-us/solutions/public/k/44/sol44611310.html
URL:support.f5.com/kb/en-us/solutions/public/k/47/sol47133310.html
URL:support.f5.com/kb/en-us/solutions/public/k/75/sol75248350.html

24. Vulnerabilities in Microsoft Products

URL:technet.microsoft.com/en-us/library/security/ms16-may
URL:technet.microsoft.com/library/security/MS16-051
URL:technet.microsoft.com/library/security/MS16-052
URL:technet.microsoft.com/library/security/MS16-053
URL:technet.microsoft.com/library/security/MS16-054
URL:technet.microsoft.com/library/security/MS16-055
URL:technet.microsoft.com/library/security/MS16-056
URL:technet.microsoft.com/library/security/MS16-057
URL:technet.microsoft.com/library/security/MS16-058
URL:technet.microsoft.com/library/security/MS16-059
URL:technet.microsoft.com/library/security/MS16-060
URL:technet.microsoft.com/library/security/MS16-061
URL:technet.microsoft.com/library/security/MS16-062
URL:technet.microsoft.com/library/security/MS16-064
URL:technet.microsoft.com/library/security/MS16-065
URL:technet.microsoft.com/library/security/MS16-066
URL:technet.microsoft.com/library/security/MS16-067
URL:www.us-cert.gov/ncas/current-activity/2016/05/10/Microsoft-Releases-May-2016-Security-Bulletin

25. Security Update in Debian

URL:www.debian.org/security/2016/dsa-3574

26. Security Update in openSUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html

27. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:0724
URL:access.redhat.com/errata/RHSA-2016:0725
URL:access.redhat.com/errata/RHSA-2016:0726
URL:access.redhat.com/errata/RHSA-2016:0741
URL:access.redhat.com/errata/RHSA-2016:0760
URL:access.redhat.com/errata/RHSA-2016:0778
URL:access.redhat.com/errata/RHSA-2016:0780
URL:access.redhat.com/errata/RHSA-2016:0855
URL:access.redhat.com/errata/RHSA-2016:0996
URL:access.redhat.com/errata/RHSA-2016:0997
URL:access.redhat.com/errata/RHSA-2016:0999
URL:access.redhat.com/errata/RHSA-2016:1000
URL:access.redhat.com/errata/RHSA-2016:1001
URL:access.redhat.com/errata/RHSA-2016:1002
URL:access.redhat.com/errata/RHSA-2016:1019

28. Security Update in Ubuntu

URL:www.ubuntu.com/usn/usn-2972-1/

29. Vulnerability in Blue Coat products

URL:bto.bluecoat.com/security-advisory/sa123

30. Vulnerability in WordPress

URL:wordpress.org/news/2016/05/wordpress-4-5-2/
URL:www.us-cert.gov/ncas/current-activity/2016/05/09/WordPress-Releases-Security-Updates

31. Vulnerabilities in Xen Qemu VGA module

URL:xenbits.xen.org/xsa/advisory-179.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113038
URL:exchange.xforce.ibmcloud.com/vulnerabilities/113039

32. Security Updates in Debian

URL:www.debian.org/security/2016/dsa-3571
URL:www.debian.org/security/2016/dsa-3572
URL:www.debian.org/security/2016/dsa-3573

33. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/2b4c8e1f-1609-11e6-b55e-b499baebfeaf.html
URL:www.vuxml.org/freebsd/3686917b-164d-11e6-94fa-002590263bf5.html

34. Security Updates in openSUSE and SUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161267-1.html

35. Security Updates in Oracle Linux

URL:linux.oracle.com/errata/ELSA-2016-0722.html
URL:linux.oracle.com/errata/ELSA-2016-0723.html
URL:linux.oracle.com/errata/ELSA-2016-0724.html
URL:linux.oracle.com/errata/ELSA-2016-0726.html
URL:linux.oracle.com/errata/ELSA-2016-3556.html

36. Security Updates in Red Hat

URL:access.redhat.com/errata/RHSA-2016:0722
URL:access.redhat.com/errata/RHSA-2016:0723
URL:access.redhat.com/errata/RHSA-2016:0724
URL:access.redhat.com/errata/RHSA-2016:0725
URL:access.redhat.com/errata/RHSA-2016:0726

37. Security Updates in Ubuntu

URL:www.ubuntu.com/usn/usn-2966-1/
URL:www.ubuntu.com/usn/usn-2967-1/
URL:www.ubuntu.com/usn/usn-2967-2/
URL:www.ubuntu.com/usn/usn-2968-1/
URL:www.ubuntu.com/usn/usn-2968-2/
URL:www.ubuntu.com/usn/usn-2969-1/
URL:www.ubuntu.com/usn/usn-2970-1/
URL:www.ubuntu.com/usn/usn-2971-1/
URL:www.ubuntu.com/usn/usn-2971-2/
URL:www.ubuntu.com/usn/usn-2971-3/

38. Vulnerabilities in F5 Products

URL:support.f5.com/kb/en-us/solutions/public/k/23/sol23230229.html
URL:support.f5.com/kb/en-us/solutions/public/k/47/sol47145213.html

39. Vulnerability in Huawei Smart Phones

URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160507-01-emailapp-en

40. Vulnerability in Symantec Endpoint Encryption

URL:www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160506_00

41. Security Updates in FreeBSD

URL:www.vuxml.org/freebsd/0d724b05-687f-4527-9c03-af34d3b094ec.html
URL:www.vuxml.org/freebsd/25e5205b-1447-11e6-9ead-6805ca0b3d42.html

42. Security Updates in Mageia

URL:advisories.mageia.org/MGASA-2016-0168.html
URL:advisories.mageia.org/MGASA-2016-0169.html

43. Security Updates in openSUSE and SUSE

URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
URL:lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161247-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161248-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161249-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161250-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161258-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161259-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161260-1.html

44. Security Updates in Ubuntu

URL:www.ubuntu.com/usn/usn-2965-1/
URL:www.ubuntu.com/usn/usn-2965-2/
URL:www.ubuntu.com/usn/usn-2965-3/
URL:www.ubuntu.com/usn/usn-2965-4/

IT Security Alerts Weekly Digest (9 Aug ~ 15 Aug 2015)

1. Vulnerabilities in IBM Notes and Domino (1963812)
[14/08/2015] Vulnerabilities were identified in the IBM Notes and Domino. An attacker could gain access to the system and obtain sensitive information. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:www-01.ibm.com/support/docview.wss?uid=swg21963812
2. Vulnerabilities in Apple Products (HT205030, HT205031, HT205032, HT205033)
[14/08/2015] Vulnerabilities were identified in the Apple iOS, OS X and Safari. An attacker could bypass security restrictions, execute arbitrary code, obtain sensitive information and cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:support.apple.com/en-hk/HT205030
URL:support.apple.com/en-hk/HT205031
URL:support.apple.com/en-hk/HT205032
URL:support.apple.com/en-hk/HT205033
3. Vulnerabilities in Rockwell Automation devices (ICS-ALERT-15-225-01, ICS-ALERT-15-225-02)
[14/08/2015] Vulnerabilities were identified in the Rockwell Automation devices web interface. An attacker could perform cross-site scripting attacks, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect 1769-L18ER, A LOGIX5318ER, 1766-L32BWAA, 1766-L32BXBA models of the mentioned products.

URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-225-01
URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-225-02
4. Vulnerability in KAKO HMI Products (ICS-ALERT-15-224-01)
[14/08/2015] Vulnerability was identified in the KAKO HMI products. An attacker could execute arbitrary code and take control of the products. The affected versions were not specified.

URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-01
5. Vulnerabilities in Schneider Electric Products (ICS-ALERT-15-224-02)
[14/08/2015] Vulnerabilities were identified in several Schneider Electric's Modicon M340 PLC Station P34 CPU modules. An attacker could execute arbitrary code, perform directory traversal attacks and cause a denial of service condition. The affected versions were not specified.

URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-02
6. Vulnerabilities in Prisma web products (ICS-ALERT-15-224-03)
[14/08/2015] Vulnerabilities were identified in the Prisma web products. An attacker could change configuration and execute arbitrary code. The affected versions were not specified.

URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-03
7. Vulnerabilities in Moxa ioLogik E2210 (ICS-ALERT-15-224-04)
[14/08/2015] Vulnerabilities were identified in the Ethernet Micro RTU controller of the Moxa ioLogik E2210. An attacker could obtain unauthorised access. The affected versions were not specified.

URL:ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-04
8. Vulnerabilities in Google Andriod
[14/08/2015] Vulnerabilities were identified in the messaging app of the Google Andriod. An attacker could crash the application and manipulate SMS/MMS data. These vulnerabilities affect multiple versions of the mentioned product.

URL:www.hkcert.org/my_url/en/alert/15081301
9. Security Updates in Debian (DSA-3335-1)
[14/08/2015] Debian has released security update packages for fixing the vulnerability identified in the request-tracker4 package for multiple versions of Debian GNU/Linux. An attacker could perform cross-site scripting attacks.

URL:www.debian.org/security/2015/dsa-3335
10. Security Updates in SUSE (SUSE-SU-2015:1379-1, SUSE-SU-2015:1380-1)
[14/08/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the MozillaFirefox package of SUSE Linux Enterprise 11 and 12. Due to multiple errors, an attacker could bypass security restrictions and gain elevated privileges.

URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html
11. Vulnerability in Mozilla Firefox (MFSA 2015-93)
[13/08/2015] Vulnerability was identified in the Mozilla Firefox. An attacker could gain crash the system. This vulnerability affects versions prior to 38 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:www.mozilla.org/en-US/security/advisories/mfsa2015-93/
12. Vulnerability in Lenovo Service Engine BIOS (LEN-2015-020, LEN-2015-077)
[13/08/2015] Vulnerability was identified in the Lenovo Service Engine BIOS. An attacker could take control of an affected system. This vulnerability affects multiple models of Lenovo notebooks and desktops. Security patches are available to resolve this vulnerability.

URL:support.lenovo.com/us/en/product_security/lse_bios_notebook
URL:support.lenovo.com/us/en/product_security/lse_bios_desktop
URL:www.us-cert.gov/ncas/current-activity/2015/08/12/Lenovo-Service-Engine-LSE-BIOS-Vulnerability
13. Vulnerability in GnuTLS (GNUTLS-SA-2015-3)
[13/08/2015] Vulnerability was identified in the GnuTLS. An attacker could crash the application. This vulnerability affects versions prior to 3.3.17 and 3.4.4 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:www.gnutls.org/security.html#GNUTLS-SA-2015-3
URL:www.hkcert.org/my_url/en/alert/15081217
14. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1603-1)
[13/08/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the Adobe Flash Player package for Red Hat Enterprise Linux 5 and 6. Due to multiple errors, an attacker could crash the system and execute arbitrary code.

URL:rhn.redhat.com/errata/RHSA-2015-1603.html
15. Security Updates in SUSE (SUSE-SU-2015:1373-1, SUSE-SU-2015:1374-1, SUSE-SU-2015:1375-1, SUSE-SU-2015:1376-1)
[13/08/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player, java-1_7_0-ibm and Real Time Linux Kernel packages of SUSE Linux Enterprise 11 and 12. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, cause a denial of service condition, execute arbitrary code and obtain sensitive information.

URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00004.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00005.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00006.html
URL:lists.opensuse.org/opensuse-security-announce/2015-08/msg00007.html
16. Security Updates in Debian (DSA-3328-1, DSA-3330-1, DSA-3331-1, DSA-3332-1, DSA-3333-1, DSA-3334-1)
[13/08/2015] Debian has released security update packages for fixing the vulnerability identified in the wordpress, activemq, subversion, iceweasel and gnutls28 packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could perform cross-site scripting attacks, gain elevated privileges, cause a denial of service condition, perform code injection attacks, obtain sensitive information, execute arbitrary code and crash the application.

URL:www.debian.org/security/2015/dsa-3328
URL:www.debian.org/security/2015/dsa-3330
URL:www.debian.org/security/2015/dsa-3331
URL:www.debian.org/security/2015/dsa-3332
URL:www.debian.org/security/2015/dsa-3333
URL:www.debian.org/security/2015/dsa-3334
17. Vulnerabilities in Microsoft Products (MS15-079, MS15-080, MS15-081, MS15-082, MS15-083, MS15-084, MS15-085, MS15-086, MS15-087, MS15-088, MS15-089, MS15-090, MS15-091, MS15-092)
[12/08/2015] Vulnerabilities were identified in the Microsoft Windows, Microsoft Internet Explorer, Microsoft .NET Framework, Microsoft Office, Microsoft Lync, Microsoft Silverlight, Microsoft Server Software and Microsoft Edge. An attacker could perform remote code execution, gain elevated privileges and obtain sensitive information. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:technet.microsoft.com/en-us/library/security/ms15-aug.aspx
URL:technet.microsoft.com/library/security/MS15-079
URL:technet.microsoft.com/library/security/MS15-080
URL:technet.microsoft.com/library/security/MS15-081
URL:technet.microsoft.com/library/security/MS15-082
URL:technet.microsoft.com/library/security/MS15-083
URL:technet.microsoft.com/library/security/MS15-084
URL:technet.microsoft.com/library/security/MS15-085
URL:technet.microsoft.com/library/security/MS15-086
URL:technet.microsoft.com/library/security/MS15-087
URL:technet.microsoft.com/library/security/MS15-088
URL:technet.microsoft.com/library/security/MS15-089
URL:technet.microsoft.com/library/security/MS15-090
URL:technet.microsoft.com/library/security/MS15-091
URL:technet.microsoft.com/library/security/MS15-092
URL:www.hkcert.org/my_url/en/alert/15081201
URL:www.hkcert.org/my_url/en/alert/15081202
URL:www.hkcert.org/my_url/en/alert/15081203
URL:www.hkcert.org/my_url/en/alert/15081204
URL:www.hkcert.org/my_url/en/alert/15081205
URL:www.hkcert.org/my_url/en/alert/15081206
URL:www.hkcert.org/my_url/en/alert/15081207
URL:www.hkcert.org/my_url/en/alert/15081208
URL:www.hkcert.org/my_url/en/alert/15081209
URL:www.hkcert.org/my_url/en/alert/15081210
URL:www.hkcert.org/my_url/en/alert/15081211
URL:www.hkcert.org/my_url/en/alert/15081212
URL:www.hkcert.org/my_url/en/alert/15081213
URL:www.hkcert.org/my_url/en/alert/15081214
URL:www.us-cert.gov/ncas/current-activity/2015/08/11/Microsoft-Releases-August-2015-Security-Bulletin
18. Vulnerabilities in Adobe Flash Player (APSB15-19)
[12/08/2015] Vulnerabilities were identified in the Adobe Flash Player. An attacker could gain execute arbitrary code, cause a buffer overflow and take control of the affected system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:helpx.adobe.com/security/products/flash-player/apsb15-19.html
URL:technet.microsoft.com/en-us/library/security/2755801
URL:www.hkcert.org/my_url/en/alert/15081215
URL:www.us-cert.gov/ncas/current-activity/2015/08/11/Adobe-Releases-Security-Updates-Flash-Player
19. Vulnerabilities in Mozilla Firefox (MFSA 2015-79, MFSA 2015-80, MFSA 2015-81, MFSA 2015-82, MFSA 2015-83, MFSA 2015-84, MFSA 2015-85, MFSA 2015-86, MFSA 2015-87, MFSA 2015-88, MFSA 2015-89, MFSA 2015-90, MFSA 2015-91, MFSA 2015-92)
[12/08/2015] Vulnerabilities were identified in the Mozilla Firefox. An attacker could gain execute arbitrary code, crash the application, bypass security restrictions and perform cross-site scripting attacks. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:www.mozilla.org/en-US/security/advisories/mfsa2015-79/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-80/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-81/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-82/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-83/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-84/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-85/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-86/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-87/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-88/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-89/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-90/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-91/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-92/
URL:www.hkcert.org/my_url/en/alert/15081216
URL:www.us-cert.gov/ncas/current-activity/2015/08/11/Mozilla-Releases-Security-Updates-Firefox-Firefox-ESR-and-Firefox
20. Vulnerability in Schneider Electric IMT25 DTM component (ICSA-15-223-01)
[12/08/2015] Vulnerability was identified in the Schneider Electric IMT25 DTM component. An attacker could cause a denial of service condition and execute arbitrary code. This vulnerability affects versions 1.500.000 and prior of the mentioned product. Security patches are available to resolve this vulnerability.

URL:ics-cert.us-cert.gov/advisories/ICSA-15-223-01
21. Vulnerabilities in Actiontec GT784WN Wireless N DSL Modem (VU#335192)
[12/08/2015] Vulnerabilities were identified in the Actiontec GT784WN Wireless N DSL Modem. An attacker could gain escalated privileges, perform cross-site request forgery attacks and execute arbitrary code. These vulnerabilities affect versions NCS01-1.0.12 and prior of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:www.kb.cert.org/vuls/id/335192
22. Vulnerabilities in Mobile Devices C4 ODB2 dongle (VU#209512)
[12/08/2015] Vulnerabilities were identified in the Mobile Devices C4 ODB2 dongle. An attacker could execute arbitrary code and take complete control of the devices. The affected version was not specified. Security patches are available to resolve these vulnerabilities.

URL:www.kb.cert.org/vuls/id/209512
23. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1583-1, RHSA-2015:1586-1)
[12/08/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the kernel and firefox packages for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could gain escalated privileges, crash the system and execute arbitrary code.

URL:rhn.redhat.com/errata/RHSA-2015-1583.html
URL:rhn.redhat.com/errata/RHSA-2015-1586.html
24. Security Updates in Ubuntu GNU/Linux (USN-2702-1, USN-2702-2)
[12/08/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the firefox and ubufox packages for versions 12.04 LTS, 14.04 LTS and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could cause a denial of service condition, crash the system, execute arbitrary code and obtain sensitive information.

URL:www.ubuntu.com/usn/usn-2702-1/
URL:www.ubuntu.com/usn/usn-2702-2/
25. Security Updates in Oracle Linux (ELSA-2015-1586)
[12/08/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the firefox package for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could cause a denial of service condition, crash the system and execute arbitrary code.

URL:linux.oracle.com/errata/ELSA-2015-1586.html
26. Vulnerabilities in Xen (105253, 105254)
[11/08/2015] Vulnerabilities were identified in the Xen. An attacker could gain elevated privileges and obtain sensitive information. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/105253
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105254
27. Vulnerability in devscripts (105242)
[11/08/2015] Vulnerability was identified in the devscripts. An attacker could execute arbitrary code. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/105242
28. Vulnerabilities in Linux Kernel (105236, 105237)
[11/08/2015] Vulnerabilities were identified in the Linux Kernel. An attacker could execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:exchange.xforce.ibmcloud.com/vulnerabilities/105236
URL:exchange.xforce.ibmcloud.com/vulnerabilities/105237
29. Vulnerabilities in IBM Domino Web Server (1963016)
[10/08/2015] Vulnerabilities were identified in the IBM Domino Web Server. An attacker could perform cross-site scripting attacks. These vulnerabilities affect versions prior to 8.5.3 Fix Pack 6 and 9.0.1 Fix Pack 3 of the mentioned product. Security patches are available to resolve these vulnerabilities.

URL:www-01.ibm.com/support/docview.wss?uid=swg21963016
30. Vulnerabilities in Huawei Android Products (Huawei-SA-20150809-01-Android)
[10/08/2015] Vulnerabilities were identified in the Huawei Honor 7 and P8. A remote attacker could execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned products.

URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-448928.htm
31. Vulnerability in Sierra Wireless GX, ES, and LS gateway devices (VU#628568)
[10/08/2015] Vulnerability was identified in the Sierra Wireless GX, ES, and LS gateway devices running ALEOS. An attacker could gain full control of an affected device. This vulnerability affects mentioned devices running ALEOS versions 4.4.1 and earlier. Security patches are available to resolve this vulnerability.

URL:www.kb.cert.org/vuls/id/628568
32. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1581-1)
[10/08/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the firefox package for Red Hat Enterprise Linux 5, 6, and 7. An attacker could obtain sensitive information.

URL:rhn.redhat.com/errata/RHSA-2015-1581.html
33. Security Updates in Ubuntu GNU/Linux (USN-2707-1)
[10/08/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the firefox package for versions 12.04 LTS, 14.04 LTS and 15.04 of Ubuntu GNU/Linux. An attacker could obtain sensitive information.

URL:www.ubuntu.com/usn/usn-2707-1/
34. Security Updates in Debian (DSA-3329-1)
[10/08/2015] Debian has released security update packages for fixing the vulnerability identified in the linux package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could gain escalated privileges, cause a denial of service condition and obtain sensitive information.

URL:www.debian.org/security/2015/dsa-3329
35. Security Updates in Oracle Linux (ELSA-2015-1581)
[10/08/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the firefox package for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could obtain sensitive information.

URL:linux.oracle.com/errata/ELSA-2015-1581.html
36. Security Updates in Slackware (SSA:2015-219-02)
[10/08/2015] Slackware has released security update packages for fixing the vulnerability identified in the mozilla-nss package for multiple versions of Slackware Linux. An attacker could obtain sensitive information.

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.387488
Source(s) of above information:

IT Security Alerts Weekly Digest (22 Feb ~ 28 Feb 2015)

1. Vulnerabilities in Cisco Products
[27/02/2015] Vulnerabilities were identified in the Cisco IOS Software, Cisco IOS XE Software, Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Application Networking Manager (ANM) and Cisco Application Control Engine (ACE). An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross-site scripting and cross-site request forgery attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2188
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0594
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0632
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101213
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101214
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101215
2. Vulnerability in Huawei Products (Huawei-SA-20150226-01-Glibc)
[27/02/2015] Vulnerability was identified in multiple Huawei products. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects multiple firmware versions of the mentioned products. Security patches are available to resolve this vulnerability.

URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-415364.htm
3. Security Updates in Oracle Linux (ELSA-2015-3010)
[27/02/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the openssl package for Oracle Linux 5. Due to multiple errors, an attacker could bypass security restrictions and obtain sensitive information.

URL:linux.oracle.com/errata/ELSA-2015-3010.html
4. Security Updates in Debian (DSA-3175-1, DSA-3176-1)
[27/02/2015] Debian has released security update packages for fixing the vulnerabilities identified in the kfreebsd-9 and request-tracker4 packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform session hijacking attacks, cause a denial of service condition and crash the system.

URL:www.debian.org/security/2015/dsa-3175
URL:www.debian.org/security/2015/dsa-3176
5. Security Updates in Mageia (MGASA-2015-0085, MGASA-2015-0086, MGASA-2015-0087, MGASA-2015-0088, MGASA-2015-0089, MGASA-2015-0090)
[27/02/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the sympa, cabextract, apache-poi, e2fsprogs, nspr, nss, firefox, firefox-l10n, thunderbird and thunderbird-l10n packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:advisories.mageia.org/MGASA-2015-0085.html
URL:advisories.mageia.org/MGASA-2015-0086.html
URL:advisories.mageia.org/MGASA-2015-0087.html
URL:advisories.mageia.org/MGASA-2015-0088.html
URL:advisories.mageia.org/MGASA-2015-0089.html
6. Security Updates in Slackware (SSA:2015-056-01, SSA:2015-056-02)
[27/02/2015] Slackware has released security update packages for fixing the vulnerabilities identified in the mozilla-firefox and mozilla-thunderbird packages for multiple versions of Slackware Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the application.

URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.356077
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360452
7. Security Updates in SUSE (openSUSE-SU-2015:0382-1)
[27/02/2015] SUSE has released security update packages for fixing the vulnerability identified in the snack package of openSUSE 13.1 and 13.2. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00034.html
8. Security Updates in Ubuntu GNU/Linux (USN-2511-1, USN-2512-1, USN-2513-1, USN-2514-1, USN-2515-1, USN-2516-1, USN-2517-1, USN-2518-1, USN-2519-1, USN-2520-1)
[27/02/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ec2, linux-ti-omap4, linux-lts-trusty, linux-lts-utopic, eglibc, glibc and cups packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:www.ubuntu.com/usn/usn-2511-1/
URL:www.ubuntu.com/usn/usn-2512-1/
URL:www.ubuntu.com/usn/usn-2513-1/
URL:www.ubuntu.com/usn/usn-2514-1/
URL:www.ubuntu.com/usn/usn-2515-1/
URL:www.ubuntu.com/usn/usn-2516-1/
URL:www.ubuntu.com/usn/usn-2517-1/
URL:www.ubuntu.com/usn/usn-2518-1/
URL:www.ubuntu.com/usn/usn-2519-1/
URL:www.ubuntu.com/usn/usn-2520-1/
9. Security Updates in Oracle Linux (ELSA-2015-0265, ELSA-2015-0266)
[26/02/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the firefox and thunderbird packages for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:linux.oracle.com/errata/ELSA-2015-0265.html
URL:linux.oracle.com/errata/ELSA-2015-0266.html
10. Security Updates in Debian (DSA-3172-1, DSA-3173-1, DSA-3174-1)
[26/02/2015] Debian has released security update packages for fixing the vulnerabilities identified in the cups, libgtk2-perl and iceweasel packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.debian.org/security/2015/dsa-3172
URL:www.debian.org/security/2015/dsa-3173
URL:www.debian.org/security/2015/dsa-3174
11. Security Updates in FreeBSD (FreeBSD-SA-15:04.igmp, FreeBSD-SA-15:05.bind)
[26/02/2015] FreeBSD has released security update packages for fixing the vulnerabilities identified in the igmp and bind packages for multiple versions of FreeBSD. Due to multiple errors, an attacker could bypass security restrictions, cause a denial of service condition and crash the system.

URL:www.freebsd.org/security/advisories/FreeBSD-SA-15:04.igmp.asc
URL:www.freebsd.org/security/advisories/FreeBSD-SA-15:05.bind.asc
12. Security Updates in Gentoo Linux (GLSA 201502-14, GLSA 201502-15)
[26/02/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the grep and samba packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.gentoo.org/security/en/glsa/glsa-201502-14.xml
URL:www.gentoo.org/security/en/glsa/glsa-201502-15.xml
13. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0266-1)
[26/02/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Red Hat Enterprise Linux 5 and 6. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:rhn.redhat.com/errata/RHSA-2015-0266.html
14. Security Updates in SUSE (SUSE-SU-2015:0371-1, openSUSE-SU-2015:0375-1, SUSE-SU-2015:0343-2, SUSE-SU-2015:0376-1)
[26/02/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the samba, java-1_6_0-ibm and java-1_5_0-ibm packages of SUSE Linux Enterprise 10 and 11, openSUSE 13.1 and 13.2, and SUSE Manager 1.7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00032.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
15. Security Updates in Ubuntu GNU/Linux (USN-2505-1)
[26/02/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the firefox package for version 12.04 LTS, 14.04 LTS, 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.ubuntu.com/usn/usn-2505-1/
16. Vulnerabilities in Mozilla Products (MFSA 2015-11, MFSA 2015-12, MFSA 2015-13, MFSA 2015-14, MFSA 2015-15, MFSA 2015-16, MFSA 2015-17, MFSA 2015-18, MFSA 2015-19, MFSA 2015-20, MFSA 2015-21, MFSA 2015-22, MFSA 2015-23, MFSA 2015-24, MFSA 2015-25, MFSA 2015-26, MFSA 2015-27)
[25/02/2015] Vulnerabilities were identified in Mozilla Firefox, Firefox ESR and Thunderbird. An attacker could bypass security restriction, execute arbitrary code, obtain sensitive information, gain elevated privilege, execute arbitrary code, cause a denial of service condition and crash the application. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:www.mozilla.org/en-US/security/advisories/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-11/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-12/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-13/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-14/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-15/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-16/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-17/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-18/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-19/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-20/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-21/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-22/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-23/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-24/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-25/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-26/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-27/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/
URL:www.us-cert.gov/ncas/current-activity/2015/02/24/Mozilla-Releases-Security-Updates-Firefox-Firefox-ESR-and
17. Vulnerability in Cisco Unified Computing System
[25/02/2015] Vulnerability was identified in the Cisco Unified Computing System. An attacker could bypass security restrictions, execute arbitrary code and cause a denial of service condition. This vulnerability affects multiple firmware versions of the mentioned product. Security patches are available to resolve this vulnerability.

URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633
18. Security Updates in Debian (DSA-3170-1)
[25/02/2015] Debian has released security update packages for fixing the vulnerabilities identified in the linux package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.debian.org/security/2015/dsa-3170
19. Security Updates in Mageia (MGASA-2015-0083, MGASA-2015-0084)
[25/02/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the freetype2 and samba packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:advisories.mageia.org/MGASA-2015-0083.html
URL:advisories.mageia.org/MGASA-2015-0084.html
20. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0263-1, RHSA-2015:0264-1, RHSA-2015:0265-1)
[25/02/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the java-1.6.0-ibm package for Red Hat Satellite 5.6 and 5.7, and firefox package for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:rhn.redhat.com/errata/RHSA-2015-0263.html
URL:rhn.redhat.com/errata/RHSA-2015-0264.html
URL:rhn.redhat.com/errata/RHSA-2015-0265.html
21. Security Updates in SUSE (SUSE-SU-2015:0365-1)
[25/02/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the php5 package of SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html
22. Security Updates in Ubuntu GNU/Linux (USN-2510-1)
[25/02/2015] Ubuntu has released security update packages for fixing the vulnerability identified in the freetype package for version 10.04 LTS, 12.04 LTS, 14.04 LTS, 14.10 of Ubuntu GNU/Linux. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.ubuntu.com/usn/usn-2510-1/
23. Vulnerability in Samba
[24/02/2015] Vulnerability was identified in the Samba. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 3.6.25, 4.0.25, 4.1.17 or 4.2.0rc5 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:www.samba.org/samba/security/CVE-2015-0240
URL:www.hkcert.org/my_url/en/alert/15022402
24. Vulnerability in TYPO3 CMS (TYPO3-CORE-SA-2015-001)
[24/02/2015] Vulnerability was identified in the TYPO3 CMS. An attacker could bypass security restrictions. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.

URL:typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-001/
25. Security Updates in Oracle Linux (ELSA-2015-0249, ELSA-2015-0250, ELSA-2015-0251, ELSA-2015-0252)
[24/02/2015] Oracle has released security update packages for fixing the vulnerability identified in the samba3x, samba4 and samba packages for Oracle Linux 5, 6 and 7. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code.

URL:linux.oracle.com/errata/ELSA-2015-0249.html
URL:linux.oracle.com/errata/ELSA-2015-0250.html
URL:linux.oracle.com/errata/ELSA-2015-0251.html
URL:linux.oracle.com/errata/ELSA-2015-0252.html
26. Security Updates in Debian (DSA-3164-1, DSA-3165-1, DSA-3166-1, DSA-3168-1, DSA-3169-1, DSA-3171-1)
[24/02/2015] Debian has released security update packages for fixing the vulnerabilities identified in the typo3-src, xdg-utils, e2fsprogs, ruby-redcloth, eglibc and samba packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, perform cross-site scripting and code injection attacks, cause a denial of service condition and crash the system.

URL:www.debian.org/security/2015/dsa-3164
URL:www.debian.org/security/2015/dsa-3165
URL:www.debian.org/security/2015/dsa-3166
URL:www.debian.org/security/2015/dsa-3168
URL:www.debian.org/security/2015/dsa-3169
URL:www.debian.org/security/2015/dsa-3171
27. Security Updates in Mageia (MGASA-2015-0074, MGASA-2015-0075, MGASA-2015-0076, MGASA-2015-0077, MGASA-2015-0078, MGASA-2015-0079, MGASA-2015-0080, MGASA-2015-0081, MGASA-2015-0082)
[24/02/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the ruby-sprockets, kernel-linus, kernel-tmb, kernel-rt, kernel-vserver, sudo, cpio, tomcat and bind packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.

URL:advisories.mageia.org/MGASA-2015-0074.html
URL:advisories.mageia.org/MGASA-2015-0075.html
URL:advisories.mageia.org/MGASA-2015-0076.html
URL:advisories.mageia.org/MGASA-2015-0077.html
URL:advisories.mageia.org/MGASA-2015-0078.html
URL:advisories.mageia.org/MGASA-2015-0079.html
URL:advisories.mageia.org/MGASA-2015-0080.html
URL:advisories.mageia.org/MGASA-2015-0081.html
URL:advisories.mageia.org/MGASA-2015-0082.html
28. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0249-1, RHSA-2015:0250-1, RHSA-2015:0251-1, RHSA-2015:0252-1, RHSA-2015:0253-1, RHSA-2015:0254-1, RHSA-2015:0255-1, RHSA-2015:0256-1)
[24/02/2015] Red Hat has released security update packages for fixing the vulnerability identified in the samba3x, samba4 and samba packages for Red Hat Enterprise Linux 5, 6, 7, and Red Hat Storage Server 3.0. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code.

URL:rhn.redhat.com/errata/RHSA-2015-0249.html
URL:rhn.redhat.com/errata/RHSA-2015-0250.html
URL:rhn.redhat.com/errata/RHSA-2015-0251.html
URL:rhn.redhat.com/errata/RHSA-2015-0252.html
URL:rhn.redhat.com/errata/RHSA-2015-0253.html
URL:rhn.redhat.com/errata/RHSA-2015-0254.html
URL:rhn.redhat.com/errata/RHSA-2015-0255.html
URL:rhn.redhat.com/errata/RHSA-2015-0256.html
29. Security Updates in SUSE (SUSE-SU-2015:0353-1)
[24/02/2015] SUSE has released security update packages for fixing the vulnerability identified in the samba packages of SUSE Linux Enterprise 12. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code.

URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html
30. Security Updates in Ubuntu GNU/Linux (USN-2507-1, USN-2508-1)
[24/02/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the e2fsprogs and samba packages for version 10.04 LTS, 12.04 LTS, 14.04 LTS, 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.ubuntu.com/usn/usn-2507-1/
URL:www.ubuntu.com/usn/usn-2508-1/
31. Vulnerability in BIND (AA-01235)
[23/02/2015] Vulnerability was identified in the BIND. An attacker could cause a denial of service condition and crash the system. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.

URL:kb.isc.org/article/AA-01235
URL:www.us-cert.gov/ncas/current-activity/2015/02/18/ISC-Releases-Security-Updates-BIND
URL:xforce.iss.net/xforce/xfdb/100968
32. Vulnerabilities in Cisco Products (cisco-sa-20150220-ipv6)
[23/02/2015] Vulnerabilities were identified in the Cisco IOS XR Software, Cisco Desktop Collaboration Experience DX650 Software, Cisco Wireless LAN Controller (WLC), Cisco Web Security Appliance (WSA), Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), Cisco Hosted Collaboration Solution and Intrusion Prevention System (IPS). An attacker could bypass security restrictions, execute arbitrary code, perform code injection and cross-site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150220-ipv6
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0584
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0622
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0623
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0624
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0626
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0628
URL:tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0631
URL:xforce.iss.net/xforce/xfdb/100969
URL:xforce.iss.net/xforce/xfdb/100970
URL:xforce.iss.net/xforce/xfdb/100971
URL:xforce.iss.net/xforce/xfdb/100991
33. Vulnerability in Lenovo Notebook products
[23/02/2015] Vulnerability was identified in the Lenovo Notebook products. An attacker could spoof HTTPS traffic. This vulnerability affects all Lenovo Notebook products shipped between September 2014 and February 2015 that have Superfish VisualDiscovery installed. Removal instructions are available to resolve this vulnerability.

URL:support.lenovo.com/us/en/product_security/superfish
URL:support.lenovo.com/us/en/product_security/superfish_uninstall
URL:www.us-cert.gov/ncas/alerts/TA15-051A
34. Vulnerabilities in Novell Products (5197651, 5197654, 5197655, 5197970, 5198730, 5201370)
[23/02/2015] Vulnerabilities were identified in the Novell Identity Manager and Novell Vibe. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.

URL:download.novell.com/Download?buildid=CN5WxfiN2Ek~
URL:download.novell.com/Download?buildid=EaNhJs2Offs~
URL:download.novell.com/Download?buildid=FeB0mK1i9NU~
URL:download.novell.com/Download?buildid=SlL2oPhB-LU~
URL:download.novell.com/Download?buildid=vNsTfMo9g-4~
URL:download.novell.com/Download?buildid=X7DYbkPceZk~
35. Vulnerability in Komodia Redirector (VU#529496)
[23/02/2015] Vulnerability was identified in the Komodia Redirector. An attacker could bypass security restrictions, execute arbitrary code and perform spoofing attacks. This vulnerability affects multiple versions of the mentioned product.

URL:www.kb.cert.org/vuls/id/529496
URL:www.us-cert.gov/ncas/current-activity/2015/02/20/Lenovo-Computers-Vulnerable-HTTPS-Spoofing
36. Vulnerability in noVNC (100956)
[23/02/2015] Vulnerability was identified in the noVNC. An attacker could bypass security restrictions, execute arbitrary code and compromise the system. This vulnerability affects versions prior to 0.5.1 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:xforce.iss.net/xforce/xfdb/100956
37. Vulnerability in Squid (100998)
[23/02/2015] Vulnerability was identified in the Squid. An attacker could bypass security restrictions, execute arbitrary code and compromise the system. This vulnerability affects versions prior to 3.1.10 of the mentioned product. Security patches are available to resolve this vulnerability.

URL:xforce.iss.net/xforce/xfdb/100998
38. Security Updates in Debian (DSA-3162-1, DSA-3163-1, DSA-3167-1)
[23/02/2015] Debian has released security update packages for fixing the vulnerabilities identified in the bind9, libreoffice and sudo packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.debian.org/security/2015/dsa-3162
URL:www.debian.org/security/2015/dsa-3163
URL:www.debian.org/security/2015/dsa-3167
39. Security Updates in SUSE (SUSE-SU-2015:0322-1, SUSE-SU-2015:0336-1, SUSE-SU-2015:0343-1, SUSE-SU-2015:0344-1, SUSE-SU-2015:0345-1)
[23/02/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xntp, java-1_7_0-openjdk, java-1_7_0-ibm and java-1_6_0-ibm packages of SUSE Linux Enterprise 10 and 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.

URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00023.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
URL:lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
40. Security Updates in Ubuntu GNU/Linux (USN-2503-1, USN-2504-1)
[23/02/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the bind9 and nss packages for version 10.04 LTS, 12.04 LTS, 14.04 LTS, 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.

URL:www.ubuntu.com/usn/usn-2503-1/
URL:www.ubuntu.com/usn/usn-2504-1/