1. Vulnerabilities in Apache Products
[17/07/2015] Vulnerabilities were identified in the Apache HTTP Server and
Apache Groovy. An attacker could bypass security restrictions, execute arbitrary
code, cause a denial of service condition and crash the system. These
vulnerabilities affect multiple versions of the mentioned products. Security
patches are available to resolve these
vulnerabilities.
URL:httpd.apache.org/download.cgi#apache24
URL:groovy-lang.org/security.html
URL:www.hkcert.org/my_url/en/alert/15071701
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104819
2. Vulnerability in Cisco Prime Collaboration Assurance
(40003)
[17/07/2015]
Vulnerability was identified in the Cisco Prime
Collaboration Assurance. An attacker could bypass security restrictions, cause a
denial of service condition and crash the system. This vulnerability affects
firmware version 10.0.0 of the mentioned product. Security patches are available
to resolve this
vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=40003
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104831
3. Vulnerabilities in EMC Documentum Products (104820,
104821)
[17/07/2015]
Vulnerabilities were identified in the EMC
Documentum CenterStage, EMC Documentum WebTop and WebTop based client. An
attacker could bypass security restrictions, obtain sensitive information,
execute arbitrary code, perform cross-site scripting and phishing attacks. These
vulnerabilities affect multiple versions of the mentioned products. Security
patches are available to resolve these
vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104820
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104821
4. Vulnerability in Path Breadcrumbs module for Drupal
(DRUPAL-SA-CONTRIB-2015-133)
[17/07/2015] Vulnerability was identified in the Path Breadcrumbs module
for Drupal. An attacker could bypass security restrictions, obtain sensitive
information, execute arbitrary code and perform cross-site scripting attacks.
This vulnerability affects versions prior to 7.x-3.3 of the mentioned product.
Security patches are available to resolve this
vulnerability.
URL:www.drupal.org/node/2533926
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104815
5. Security Updates in Oracle Linux and Solaris
(ELSA-2015-1230, ELSA-2015-3049, ELSA-2015-3050)
[17/07/2015] Oracle has released security update packages for fixing the
vulnerabilities identified in the java-1.7.0-openjdk and kernel packages for
Oracle Linux 5 and 6. Due to multiple errors, an attacker could bypass security
restriction, obtain sensitive information, gain elevated privileges, execute
arbitrary code, cause a denial of service condition and compromise the
system.
URL:linux.oracle.com/errata/ELSA-2015-1230.html
URL:linux.oracle.com/errata/ELSA-2015-3049.html
URL:linux.oracle.com/errata/ELSA-2015-3050.html
6. Security Updates in Mageia
(MGASA-2015-0275)
[17/07/2015] Mageia has
released security update packages for fixing the vulnerabilities identified in
the flash-player-plugin package for multiple versions of Mageia. Due to multiple
errors, an attacker could bypass security restriction, gain elevated privileges,
execute arbitrary code and compromise the
system.
URL:advisories.mageia.org/MGASA-2015-0275.html
7. Security Updates in Red Hat Enterprise Linux
(RHSA-2015:1235-1)
[17/07/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the Adobe Flash Player packages for Red Hat Enterprise Linux 5 and 6. Due to
multiple errors, an attacker could bypass security restrictions, obtain
sensitive information, gain elevated privileges, execute arbitrary code, cause a
denial of service condition and compromise the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1235.html
8. Vulnerabilities in Cisco Products
(cisco-sa-20150715-vds)
[16/07/2015] Vulnerabilities were identified in the Cisco Videoscape
Delivery System, Cisco Unified Intelligence Center, Cisco Packet Data Network
Gateway, Cisco WebEx Meetings Server and Cisco Email Security Appliance. An
attacker could bypass security restrictions, obtain sensitive information,
execute arbitrary code, perform cross-site scripting attacks, cause a denial of
service condition and crash the system. These vulnerabilities affect multiple
firmware versions of the mentioned products. Security patches are available to
resolve these vulnerabilities except the Cisco Email Security
Appliance.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39920
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39934
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39938
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39940
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104800
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104802
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104806
9. Vulnerability in NetIQ Security Solutions
(104803)
[16/07/2015]
Vulnerability was identified in the NetIQ
Security Solutions for iSeries. An attacker could bypass security restrictions
and execute arbitrary code. This vulnerability affects version 8.1 of the
mentioned products. Security patches are available to resolve this
vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104803
10.
Security Updates in Oracle Linux and
Solaris (ELSA-2015-1228, ELSA-2015-1229,
ELSA-2015-3048)
[16/07/2015] Oracle has
released security update packages for fixing the vulnerabilities identified in
the java-1.8.0-openjdk, java-1.7.0-openjdk and kernel packages for Oracle Linux
6 and 7. Due to multiple errors, an attacker could bypass security restriction,
obtain sensitive information, gain elevated privileges, execute arbitrary code,
cause a denial of service condition and compromise the
system.
URL:linux.oracle.com/errata/ELSA-2015-1228.html
URL:linux.oracle.com/errata/ELSA-2015-1229.html
URL:linux.oracle.com/errata/ELSA-2015-3048.html
11.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1228-1, RHSA-2015:1229-1,
RHSA-2015:1230-1)
[16/07/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the java-1.8.0-openjdk and java-1.7.0-openjdk packages for Red Hat Enterprise
Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security
restrictions, obtain sensitive information, gain elevated privileges, execute
arbitrary code, cause a denial of service condition and compromise the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1228.html
URL:rhn.redhat.com/errata/RHSA-2015-1229.html
URL:rhn.redhat.com/errata/RHSA-2015-1230.html
12.
Security Updates in Ubuntu GNU/Linux
(USN-2656-2)
[16/07/2015] Ubuntu has
released security update packages for fixing the vulnerabilities identified in
the firefox package for versions 12.04 LTS of Ubuntu GNU/Linux. Due to multiple
errors, an attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, cause a denial of
service condition and compromise the
system.
URL:www.ubuntu.com/usn/usn-2656-2/
13. Vulnerabilities in Microsoft Products (2974294,
3065718, 3067505, 3068457, 3069392, 3070102, 3072000, 3072604, 3072620, 3072630,
3072631, 3072633, 3073094, 3074162, 3076321, 3077657)
[15/07/2015] Vulnerabilities were identified in the Microsoft SQL Server,
Microsoft Internet Explorer, Microsoft Windows, Microsoft Office and Microsoft
Malicious Software Removal Tool (MSRT). An attacker could bypass security
restrictions, obtain sensitive information, gain elevated privileges, execute
arbitrary code, cause a denial of service condition and compromise the system.
These vulnerabilities affect multiple versions of the mentioned products.
Security patches are available to resolve these
vulnerabilities.
URL:technet.microsoft.com/en-us/library/security/ms15-jul.aspx
URL:technet.microsoft.com/library/security/MS15-058
URL:technet.microsoft.com/library/security/MS15-065
URL:technet.microsoft.com/library/security/MS15-066
URL:technet.microsoft.com/library/security/MS15-067
URL:technet.microsoft.com/library/security/MS15-068
URL:technet.microsoft.com/library/security/MS15-069
URL:technet.microsoft.com/library/security/MS15-070
URL:technet.microsoft.com/library/security/MS15-071
URL:technet.microsoft.com/library/security/MS15-072
URL:technet.microsoft.com/library/security/MS15-073
URL:technet.microsoft.com/library/security/MS15-074
URL:technet.microsoft.com/library/security/MS15-075
URL:technet.microsoft.com/library/security/MS15-076
URL:technet.microsoft.com/library/security/MS15-077
URL:technet.microsoft.com/en-us/library/security/2974294
URL:technet.microsoft.com/en-us/library/security/3074162
URL:www.hkcert.org/my_url/en/alert/15071507
URL:www.hkcert.org/my_url/en/alert/15071508
URL:www.hkcert.org/my_url/en/alert/15071509
URL:www.hkcert.org/my_url/en/alert/15071510
URL:www.hkcert.org/my_url/en/alert/15071511
URL:www.hkcert.org/my_url/en/alert/15071512
URL:www.hkcert.org/my_url/en/alert/15071513
URL:www.hkcert.org/my_url/en/alert/15071514
URL:www.hkcert.org/my_url/en/alert/15071515
URL:www.hkcert.org/my_url/en/alert/15071516
URL:www.hkcert.org/my_url/en/alert/15071517
URL:www.hkcert.org/my_url/en/alert/15071518
URL:www.hkcert.org/my_url/en/alert/15071519
URL:www.us-cert.gov/ncas/current-activity/2015/07/14/Microsoft-Releases-July-2015-Security-Bulletin
14.
Information Updates on Microsoft Security
Advisory (3057154)
[15/07/2015] Microsoft
has published Security Advisory KB3057154 for Microsoft Windows to enhance user
protection in environments where DES is still enabled for application
compatibility
reasons.
URL:technet.microsoft.com/en-us/library/security/3057154
15.
Vulnerabilities in Adobe Products
(APSB15-15, APSB15-17, APSB15-18)
[15/07/2015] Vulnerabilities were identified in the Adobe Acrobat and
Reader, Adobe Shockwave Player and Adobe Flash Player. An attacker could bypass
security restrictions, obtain sensitive information, gain elevated privileges,
execute arbitrary code, cause a denial of service condition and compromise the
system. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:helpx.adobe.com/security/products/acrobat/apsb15-15.html
URL:helpx.adobe.com/security/products/shockwave/apsb15-17.html
URL:helpx.adobe.com/security/products/flash-player/apsb15-18.html
URL:www.hkcert.org/my_url/en/alert/15071503
URL:www.hkcert.org/my_url/en/alert/15071504
URL:www.hkcert.org/my_url/en/alert/15071505
URL:www.kb.cert.org/vuls/id/338736
URL:www.kb.cert.org/vuls/id/918568
URL:www.us-cert.gov/ncas/current-activity/2015/07/11/Adobe-Flash-ActionScript-3-opaqueBackground-Use-After-Free
URL:www.us-cert.gov/ncas/current-activity/2015/07/14/Adobe-Releases-Security-Update-Shockwave-Player
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104569
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104570
16.
Security Updates in Oracle
Products
[15/07/2015]
Oracle has released security update packages for
fixing the vulnerabilities identified in the Oracle Database Server, Oracle
Fusion Applications and Middleware, Oracle Enterprise Manager Grid Control,
Oracle E-Business Suite, Oracle Supply Chain Products Suite, Oracle PeopleSoft
Products, Oracle JD Edwards Products, Oracle Siebel CRM, Oracle iLearning,
Oracle Communications Applications, Oracle Retail Applications, Oracle Health
Sciences Applications, Oracle Java SE, Oracle and Sun Systems Products, Oracle
Linux and Virtualization, Oracle MySQL and Support Tools. Due to multiple
errors, an attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, cause a denial of
service condition and compromise the system. Security patches are available to
resolve these
vulnerabilities.
URL:www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
URL:www.hkcert.org/my_url/en/alert/15071506
URL:www.us-cert.gov/ncas/current-activity/2015/07/14/Oracle-Releases-July-2015-Security-Advisory
17.
Vulnerabilities in Cisco
Products
[15/07/2015]
Vulnerabilities were identified in the Cisco
Identity Services Engine, Cisco TelePresence Integrator C Series devices, Cisco
Packet Data Network Gateway and Cisco Adaptive Security Appliance. An attacker
could bypass security restrictions, execute arbitrary code, perform code
injection and cross-site scripting attacks, cause a denial of service condition
and crash the system. These vulnerabilities affect multiple firmware versions of
the mentioned products. Security patches are available to resolve these
vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39871
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39872
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39880
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39907
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39919
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104562
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104564
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104568
18.
Vulnerabilities in F5 Products
(SOL16954)
[15/07/2015]
Vulnerabilities were identified in the F5 BIG-IP
LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP
Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP
WebAccelerator, BIG-IP WOM, Enterprise Manager, BIG-IQ Cloud, BIG-IQ Device,
BIG-IQ Security and BIG-IQ ADC. An attacker could bypass security restrictions,
execute arbitrary code, cause a denial of service condition and crash the
system. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/900/sol16954.html
19.
Vulnerabilities in Juniper Junos OS with
J-Web (JSA10682)
[15/07/2015] Vulnerabilities were identified in the Juniper Junos OS with
J-Web. An attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, perform cross
site scripting attacks, cause a denial of service condition and crash the
system. These vulnerabilities affect multiple versions of the mentioned product.
Security patches are available to resolve these
vulnerabilities.
URL:kb.juniper.net/index?page=content&id=JSA10682
20.
Vulnerability in BlackBerry Link
(BSRT-2015-001)
[15/07/2015] Vulnerability was identified in the BlackBerry Link. An
attacker could bypass security restrictions, gain elevated privileges, execute
arbitrary code and compromise the system. This vulnerability affects versions
prior to 1.2.3.53 of the mentioned product. Security patches are available to
resolve this
vulnerability.
URL:btsc.webapps.blackberry.com/btsc/dynamickc.do?externalId=KB37207&sliceID=1&command=show&forward=nonthreadedKC&kcId=KB37207
21.
Vulnerabilities in Samsung SyncThru
(104565)
[15/07/2015]
Vulnerabilities were identified in the Samsung
SyncThru. An attacker could bypass security restrictions, gain elevated
privileges, execute arbitrary code, cause a denial of service condition and
compromise the system. These vulnerabilities affect versions prior to 6 v1.0 of
the mentioned product. Security patches are available to resolve these
vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104565
22.
Security Updates in Oracle Linux and
Solaris (ELSA-2015-1221)
[15/07/2015] Oracle has
released security update packages for fixing the vulnerabilities identified in
the kernel package for Oracle Linux 6, Apache Tomcat and X.Org packages for
Oracle Solaris 10 and 11.1. Due to multiple errors, an attacker could bypass
security restriction, obtain sensitive information, gain elevated privileges,
execute arbitrary code, cause a denial of service condition and compromise the
system.
URL:linux.oracle.com/errata/ELSA-2015-1221.html
URL:blogs.oracle.com/sunsecurity/entry/cve_2014_0075_numeric_errors
URL:blogs.oracle.com/sunsecurity/entry/cve_2014_0096_permissions_privileges
URL:blogs.oracle.com/sunsecurity/entry/cve_2014_0099_numeric_errors
URL:blogs.oracle.com/sunsecurity/entry/cve_2014_0119_permissions_privileges
URL:blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_apache_tomcat4
URL:blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_x_org2
23.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1221-1)
[15/07/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the kernel package for Red Hat Enterprise Linux 6. Due to multiple errors, an
attacker could bypass security restrictions, obtain sensitive information, gain
elevated privileges, execute arbitrary code, cause a denial of service condition
and compromise the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1221.html
24.
Vulnerabilities in Cisco
Products
[14/07/2015]
Vulnerabilities were identified in the Cisco
Identity Services Engine, Cisco Unified Communications Manager and Cisco
FireSIGHT Management Center. An attacker could bypass security restrictions,
obtain sensitive information, execute arbitrary code, perform code injection and
cross-site scripting attacks, cause a denial of service condition and crash the
system. These vulnerabilities affect multiple firmware versions of the mentioned
products.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39873
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39877
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39879
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39905
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104545
25.
Vulnerability in F5 BIG-IP Edge Clients
for Windows (SOL16903)
[14/07/2015] Vulnerability was identified in the F5 BIG-IP Edge Clients
for Windows. An attacker could bypass security restrictions, obtain sensitive
information, execute arbitrary code and perform cipher-downgrade attacks. This
vulnerability affects versions 6035.x - 7110.x of the mentioned product.
Security patches are available to resolve this vulnerability as recommended in
Microsoft Security Bulletin
MS15-031.
URL:support.f5.com/kb/en-us/solutions/public/16000/900/sol16903.html
26.
Vulnerabilities in Moodle (MSA-15-0026,
MSA-15-0027, MSA-15-0028, MSA-15-0029)
[14/07/2015] Vulnerabilities were identified in the Moodle. An attacker
could bypass security restrictions, obtain sensitive information, execute
arbitrary code and perform cross-site scripting attacks. These vulnerabilities
affect multiple versions of the mentioned product. Security patches are
available to resolve these
vulnerabilities.
URL:moodle.org/security/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104541
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104542
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104543
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104544
27.
Vulnerabilities in SAP Products (104276,
104511)
[14/07/2015]
Vulnerabilities were identified in the SAP ECC
and SAP Afaria. An attacker could bypass security restrictions and gain elevated
privileges. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104276
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104511
28.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1120-2)
[14/07/2015] Red Hat
has released security update packages for fixing the vulnerability identified in
the kernel package for Red Hat Enterprise Linux 5.9 Advanced Update Support. An
attacker could bypass security restrictions, gain elevated privileges, execute
arbitrary code, cause a denial of service condition and crash the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1120.html
29.
Security Updates in SUSE
(openSUSE-SU-2015:1229-1)
[14/07/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the MozillaFirefox and mozilla-nss packages of openSUSE 13.1 and 13.2. Due to
multiple errors, an attacker could bypass security restrictions, obtain
sensitive information, gain elevated privileges, execute arbitrary code, cause a
denial of service condition and compromise the
system.
URL:lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html
30.
Vulnerabilities in Adobe Flash Player
(APSA15-04)
[13/07/2015] Vulnerabilities were identified in the Adobe Flash Player. An
attacker could bypass security restrictions, obtain sensitive information,
execute arbitrary code, cause a denial of service condition and compromise the
system. These vulnerabilities affect multiple versions of the mentioned
product.
URL:helpx.adobe.com/security/products/flash-player/apsa15-04.html
URL:www.kb.cert.org/vuls/id/338736
URL:www.kb.cert.org/vuls/id/918568
URL:www.us-cert.gov/ncas/current-activity/2015/07/11/Adobe-Flash-ActionScript-3-opaqueBackground-Use-After-Free
31.
Vulnerabilities in Apple OS X
(HT202681)
[13/07/2015]
Vulnerabilities were identified in the Apple OS
X. An attacker could bypass security restrictions, obtain sensitive information,
gain elevated privileges, execute arbitrary code, cause a denial of service
condition and compromise the system. These vulnerabilities affect multiple
versions of the mentioned products. Security patches are available to resolve
these
vulnerabilities.
URL:support.apple.com/en-us/HT202681
32.
Vulnerabilities in Cisco Products
(cisco-sa-20150710-openssl)
[13/07/2015] Vulnerabilities were identified in the multiple Cisco
Products. An attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, perform code
injection and cross-site scripting attacks, and compromise the system. These
vulnerabilities affect multiple firmware versions of the mentioned products.
Security patches are available to resolve these vulnerabilities except the Cisco
TelePresence Advanced Media Gateway and Cisco Mobility Services
Engine.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39782
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39785
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39797
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39825
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104521
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104523
33.
Vulnerabilities in Novell Products
(5214311)
[13/07/2015]
Vulnerabilities were identified in the Novell
NetIQ Sentinel. An attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, cause a denial of
service condition and crash the system. These vulnerabilities affect multiple
versions of the mentioned products. Security patches are available to resolve
these
vulnerabilities.
URL:download.novell.com/Download?buildid=QhraQvuhtlA~
34.
Vulnerabilities in F5 Products (SOL16945,
SOL16949, SOL16950)
[13/07/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP
AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway,
BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP
WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, BIG-IQ Cloud, BIG-IQ
Device, BIG-IQ Security, BIG-IQ ADC and Traffix SDC. An attacker could bypass
security restrictions, obtain sensitive information, gain elevated privileges,
execute arbitrary code, cause a denial of service condition and crash the
system. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/900/sol16945.html
URL:support.f5.com/kb/en-us/solutions/public/16000/900/sol16949.html
URL:support.f5.com/kb/en-us/solutions/public/16000/900/sol16950.html
35.
Vulnerability in VMware Products
(VMSA-2015-0005)
[13/07/2015] Vulnerability was identified in the VMware Workstation,
VMware Player and VMware Horizon View Client for Windows. An attacker could
bypass security restrictions and gain elevated privileges. This vulnerability
affects multiple versions of the mentioned products. Security patches are
available to resolve this
vulnerability.
URL:www.vmware.com/security/advisories/VMSA-2015-0005.html
URL:www.us-cert.gov/ncas/current-activity/2015/07/10/VMware-Releases-Security-Advisory
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104519
36.
Vulnerability in EMC RecoverPoint
(104522)
[13/07/2015]
Vulnerability was identified in the EMC
RecoverPoint for VMs Installation Manager. An attacker could bypass security
restrictions and gain elevated privileges. This vulnerability affects version
4.2 of the mentioned product. Security patches are available to resolve this
vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104522
37.
Security Updates in Debian (DSA-3306-1,
DSA-3307-1)
[13/07/2015] Debian has
released security update packages for fixing the vulnerabilities identified in
the pdns and pdns-recursor packages for multiple versions of Debian GNU/Linux.
Due to multiple errors, an attacker could bypass security restrictions, cause a
denial of service condition and crash the
system.
URL:www.debian.org/security/2015/dsa-3306
URL:www.debian.org/security/2015/dsa-3307
38.
Security Updates in Gentoo Linux (GLSA
201507-10, GLSA 201507-11, GLSA 201507-12, GLSA 201507-13, GLSA 201507-14, GLSA
201507-15, GLSA 201507-16, GLSA 201507-17, GLSA 201507-18, GLSA
201507-19)
[13/07/2015]
Gentoo has released security update packages for
fixing the vulnerabilities identified in the t1utils, perl, libcapsinetwork,
adobe-flash, oracle-jre-bin, openssl, portage, net-snmp, chromium and mysql
packages for multiple versions of Gentoo Linux. Due to multiple errors, an
attacker could bypass security restrictions, obtain sensitive information, gain
elevated privileges, execute arbitrary code, cause a denial of service condition
and compromise the
system.
URL:security.gentoo.org/glsa/201507-10
URL:security.gentoo.org/glsa/201507-11
URL:security.gentoo.org/glsa/201507-12
URL:security.gentoo.org/glsa/201507-13
URL:security.gentoo.org/glsa/201507-14
URL:security.gentoo.org/glsa/201507-15
URL:security.gentoo.org/glsa/201507-16
URL:security.gentoo.org/glsa/201507-17
URL:security.gentoo.org/glsa/201507-18
URL:security.gentoo.org/glsa/201507-19
39.
Security Updates in Mageia
(MGASA-2015-0274)
[13/07/2015] Mageia has
released security update packages for fixing the vulnerability identified in the
openssl packages for multiple versions of Mageia. Due to multiple errors, an
attacker could bypass security restrictions and obtain sensitive
information.
URL:advisories.mageia.org/MGASA-2015-0274.html
40.
Security Updates in Slackware
(SSA:2015-192-01)
[13/07/2015] Slackware
has released security update packages for fixing the vulnerability identified in
the mozilla-thunderbird packages for multiple versions of Slackware Linux. An
attacker could bypass security restriction, obtain sensitive information, gain
elevated privileges, execute arbitrary code, cause a denial of service condition
and compromise the
system.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360005
41.
Security Updates in SUSE
(SUSE-SU-2015:1224-1, SUSE-SU-2015:1177-2)
[13/07/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the Linux Kernel and MySQL packages of SUSE Linux Enterprise 11. Due to multiple
errors, an attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, cause a denial of
service condition and compromise the
system.
URL:lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
URL:lists.opensuse.org/opensuse-security-announce/2015-07/msg00024.html
Showing posts with label Moodle. Show all posts
Showing posts with label Moodle. Show all posts
Sunday, July 19, 2015
Monday, May 25, 2015
IT Security Alerts Weekly Digest (17 May ~ 23 May 2015)
1. Information
Updates on Microsoft Security Bulletin (3057110)
[22/05/2015] Microsoft has updated information on the Security Bulletin for Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Microsoft Lync and Microsoft Silverlight. MS15-044 was revised to announce the availability of a new update (3065979) that fixes a known issue that some customers experienced after installing the 3045171 security update on all supported editions of Windows 7/Windows 2008 R2 and earlier systems. The 3045171 security update causes customer applications to crash while attempting to create text-outline-based path objects using GDI+.
URL:technet.microsoft.com/en-us/library/security/MS15-044
2. Vulnerability in Apache Jackrabbit
[22/05/2015] Vulnerability was identified in the Apache Jackrabbit. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects versions prior to 2.10.1 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:jackrabbit.apache.org/jcr/index.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103311
3. Vulnerability in Cisco Access Control Server
[22/05/2015] Vulnerability was identified in the Cisco Access Control Server. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects firmware version 5.5 (0.46.2) of the mentioned product.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38946
4. Vulnerability in python-kerberos (103310)
[22/05/2015] Vulnerability was identified in the python-kerberos. An attacker could bypass security restrictions, execute arbitrary code and perform spoofing attacks. This vulnerability affects version 1.2.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103310
5. Security Updates in Debian (DSA-3266-1)
[22/05/2015] Debian has released security update packages for fixing the vulnerability identified in the fuse package for multiple versions of Debian GNU/Linux. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3266
6. Security Updates in SUSE (SUSE-SU-2015:0923-1, SUSE-SU-2015:0927-1, SUSE-SU-2015:0928-1, SUSE-SU-2015:0929-1)
[22/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xen and KVM packages of SUSE Linux Enterprise 11 and 12, and the SUSE Manager 1.7 for SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html
7. Security Updates in Ubuntu GNU/Linux (USN-2609-1, USN-2610-1, USN-2617-1, USN-2618-1)
[22/05/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the apport, oxide-qt, fuse and python-dbusmock packages for versions 12.04 LTS, 14.04 LTS, 14.10, 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2609-1/
URL:www.ubuntu.com/usn/usn-2610-1/
URL:www.ubuntu.com/usn/usn-2617-1/
URL:www.ubuntu.com/usn/usn-2618-1/
8. Vulnerability in Microsoft Internet Explorer (103298)
[21/05/2015] Vulnerability was identified in the Microsoft Internet Explorer 11 . An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects version 11 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103298
9. Vulnerabilities in Cisco Products
[21/05/2015] Vulnerabilities were identified in the Cisco Prime Central for HCS and Cisco Adaptive Security Appliance. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect versions of the mentioned products. Security patches are available to resolve the vulnerability identified in Cisco Adaptive Security Appliance.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38927
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38937
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103296
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103297
10. Vulnerability in HP LoadRunner (103292)
[21/05/2015] Vulnerability was identified in the HP LoadRunner. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 11.52 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103292
11. Vulnerabilities in Trend Micro OfficeScan
[21/05/2015] Vulnerabilities were identified in the Trend Micro OfficeScan 11. An attacker could bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to 11.0 Service Pack 1 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:downloadcenter.trendmicro.com/index.php?regs=NABU&clk=tbl&clkval=4739&cm_mmc=RSS-_-Download%20Center-_-product-_-5
URL:docs.trendmicro.com/all/ent/officescan/v11.0/en-us/osce_11.0_sp1_server_readme.htm
URL:docs.trendmicro.com/all/ent/officescan/v11.0/en-us/osce_11.0_sp1_agent_readme.txt
12. Vulnerabilities in Huawei Mate 7 smartphone (Huawei-SA-20150520-01-MATE7)
[21/05/2015] Vulnerabilities were identified in the Huawei Mate 7 smartphone. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect firmware versions prior to V100R001CHNC00B126SP03 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-432799.htm
13. Vulnerability in IPsec-Tools (103287)
[21/05/2015] Vulnerability was identified in the IPsec-Tools. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects version 0.8.2 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103287
14. Vulnerability in TLS protocol (103294)
[21/05/2015] Vulnerability was identified in the TLS protocol. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects version 1.2 of the mentioned product and is commonly referred to as "Logjam".
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103294
15. Security Updates in Debian (DSA-3263-1, DSA-3265-1)
[21/05/2015] Debian has released security update packages for fixing the vulnerabilities identified in the proftpd-dfsg and zendframework packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3263
URL:www.debian.org/security/2015/dsa-3265
16. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1020-1, RHSA-2015:1021-1)
[21/05/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the java-1.7.1-ibm and java-1.5.0-ibm packages for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1020.html
URL:rhn.redhat.com/errata/RHSA-2015-1021.html
17. Security Updates in SUSE (SUSE-SU-2015:0921-1)
[21/05/2015] SUSE has released security update packages for fixing the vulnerability identified in the gstreamer-0_10-plugins-bad package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html
18. Security Updates in Ubuntu GNU/Linux (USN-2611-1, USN-2612-1, USN-2613-1, USN-2614-1, USN-2615-1, USN-2616-1)
[21/05/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ti-omap4, linux-lts-trusty and linux-lts-utopic packages for versions 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2611-1/
URL:www.ubuntu.com/usn/usn-2612-1/
URL:www.ubuntu.com/usn/usn-2613-1/
URL:www.ubuntu.com/usn/usn-2614-1/
URL:www.ubuntu.com/usn/usn-2615-1/
URL:www.ubuntu.com/usn/usn-2616-1/
19. Information Updates on Microsoft Security Bulletin (3057181)
[20/05/2015] Microsoft has updated information on the Security Bulletin for Microsoft Office. MS15-046 was revised to announce the release of the Microsoft Office for Mac 14.5.1 update. The release addresses a potential issue with Microsoft Outlook for Mac when customers install the Microsoft Office for Mac 14.5.0 update. Customers who have not already installed the 14.5.0 update should install the 14.5.1 update to be fully protected from this vulnerability.
URL:technet.microsoft.com/en-us/library/security/MS15-046
20. Vulnerabilities in Apple Watch OS (HT204870)
[20/05/2015] Vulnerabilities were identified in the Apple Watch OS. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 1.0.1 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:support.apple.com/en-hk/HT204870
21. Vulnerability in Cisco Unified Intelligence Center
[20/05/2015] Vulnerability was identified in the Cisco Unified Intelligence Center. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and perform cross-site request forgery attacks. This vulnerability affects version 10.6 (1) of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38913
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103281
22. Vulnerabilities in Google Chrome
[20/05/2015] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 43.0.2357.65 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:googlechromereleases.blogspot.mx/2015/05/stable-channel-update_19.html
URL:www.us-cert.gov/ncas/current-activity/2015/05/19/Google-Releases-Security-Update-Chrome
23. Vulnerability in KCodes NetUSB (VU#177092)
[20/05/2015] Vulnerability was identified in the KCodes NetUSB. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects multiple firmware versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.kb.cert.org/vuls/id/177092
24. Vulnerability in Samba (103230)
[20/05/2015] Vulnerability was identified in the Samba. An attacker could bypass security restrictions, execute arbitrary code and cause a denial of service condition. This vulnerability affects version 3.0.37 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103230
25. Security Updates in Debian (DSA-3262-1, DSA-3264-1)
[20/05/2015] Debian has released security update packages for fixing the vulnerabilities identified in the xen and icedove packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.debian.org/security/2015/dsa-3262
URL:www.debian.org/security/2015/dsa-3264
26. Security Updates in SUSE (openSUSE-SU-2015:0914-1)
[20/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player packages of openSUSE 13.1 and 13.2. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html
27. Vulnerabilities in Cisco Products
[19/05/2015] Vulnerabilities were identified in the Cisco Web Security Appliance (WSA) and Cisco FireSIGHT System Software. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned products.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38884
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38905
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103220
28. Vulnerability in IBM Products (1902300)
[19/05/2015] Vulnerability was identified in the IBM Notes, IBM Domino and IBM Expeditor. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects multiple versions of the mentioned products.
URL:www.ibm.com/support/docview.wss?uid=swg21902300
29. Vulnerabilities in Moodle (MSA-15-0018, MSA-15-0019, MSA-15-0020, MSA-15-0021, MSA-15-0022, MSA-15-0023, MSA-15-0024, MSA-15-0025)
[19/05/2015] Vulnerabilities were identified in the Moodle. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:moodle.org/security/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103221
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103222
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103223
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103224
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103225
30. Security Updates in Oracle Linux (ELSA-2015-1012)
[19/05/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Oracle Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-1012.html
31. Security Updates in Mageia (MGASA-2015-0229, MGASA-2015-0230, MGASA-2015-0231, MGASA-2015-0232, MGASA-2015-0233, MGASA-2015-0234)
[19/05/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the moodle, xbmc, php, php-apc, php-timezonedb, phpmyadmin, avidemux, sqlite3, rootcerts, nss, firefox, firefox-l10n, thunderbird and thunderbird-l10n packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0229.html
URL:advisories.mageia.org/MGASA-2015-0230.html
URL:advisories.mageia.org/MGASA-2015-0231.html
URL:advisories.mageia.org/MGASA-2015-0232.html
URL:advisories.mageia.org/MGASA-2015-0233.html
URL:advisories.mageia.org/MGASA-2015-0234.html
32. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1012-1)
[19/05/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:rhn.redhat.com/errata/RHSA-2015-1012.html
33. Security Updates in SUSE (openSUSE-SU-2015:0892-1, openSUSE-SU-2015:0893-1, openSUSE-SU-2015:0894-1, SUSE-SU-2015:0896-1)
[19/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the Firefox 31.7.0esr and qemu packages of openSUSE 13.1 and 13.2, openSUSE Evergreen 11.4, and SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html
34. Security Updates in Ubuntu GNU/Linux (USN-2603-1)
[19/05/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the thunderbird packages for versions 12.04 LTS, 14.04 LTS, 14.10 and vivid of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2603-1/
35. Vulnerability in Apache Portable Runtime (103204)
[18/05/2015] Vulnerability was identified in the Apache Portable Runtime. An attacker could bypass security restrictions and cause a denial of service condition. This vulnerability affects versions prior to 1.5.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103204
36. Vulnerability in Cisco Unified Customer Voice Portal
[18/05/2015] Vulnerability was identified in the Cisco Unified Customer Voice Portal. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. This vulnerability affects firmware version 10.5(1) of the mentioned product.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38868
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103203
37. Vulnerability in Oracle Products
[18/05/2015] Vulnerability was identified in the Oracle VirtualBox, Oracle VM and Oracle Linux. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:www.oracle.com/technetwork/topics/security/alert-cve-2015-3456-2542656.html
38. Security Updates in Debian (DSA-3261-1)
[18/05/2015] Debian has released security update packages for fixing the vulnerabilities identified in the libmodule-signature-perl package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code and compromise the system.
URL:www.debian.org/security/2015/dsa-3261
39. Security Updates in Mageia (MGASA-2015-0227, MGASA-2015-0228)
[18/05/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the ruby-rest-client, ruby-netrc, ruby-http-cookie, kmod-vboxadditions, kmod-virtualbox and virtualbox packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0227.html
URL:advisories.mageia.org/MGASA-2015-0228.html
40. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1011-1)
[18/05/2015] Red Hat has released security update packages for fixing the vulnerability identified in the rhev-hypervisor package for Red Hat Enterprise Virtualization 3. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1011.html
41. Security Updates in Slackware (SSA:2015-137-01)
[18/05/2015] Slackware has released security update packages for fixing the vulnerabilities identified in the mozilla-thunderbird package for multiple versions of Slackware Linux. Due to multiple errors, an attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360171
42. Security Updates in SUSE (SUSE-SU-2015:0884-1, SUSE-SU-2015:0884-2, SUSE-SU-2015:0889-1, openSUSE-SU-2015:0890-1)
[18/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the spice, KVM and flash-player packages of SUSE Linux Enterprise 11, 12 and openSUSE Evergreen 11.4. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00011.html
[22/05/2015] Microsoft has updated information on the Security Bulletin for Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Microsoft Lync and Microsoft Silverlight. MS15-044 was revised to announce the availability of a new update (3065979) that fixes a known issue that some customers experienced after installing the 3045171 security update on all supported editions of Windows 7/Windows 2008 R2 and earlier systems. The 3045171 security update causes customer applications to crash while attempting to create text-outline-based path objects using GDI+.
URL:technet.microsoft.com/en-us/library/security/MS15-044
2. Vulnerability in Apache Jackrabbit
[22/05/2015] Vulnerability was identified in the Apache Jackrabbit. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects versions prior to 2.10.1 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:jackrabbit.apache.org/jcr/index.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103311
3. Vulnerability in Cisco Access Control Server
[22/05/2015] Vulnerability was identified in the Cisco Access Control Server. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects firmware version 5.5 (0.46.2) of the mentioned product.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38946
4. Vulnerability in python-kerberos (103310)
[22/05/2015] Vulnerability was identified in the python-kerberos. An attacker could bypass security restrictions, execute arbitrary code and perform spoofing attacks. This vulnerability affects version 1.2.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103310
5. Security Updates in Debian (DSA-3266-1)
[22/05/2015] Debian has released security update packages for fixing the vulnerability identified in the fuse package for multiple versions of Debian GNU/Linux. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3266
6. Security Updates in SUSE (SUSE-SU-2015:0923-1, SUSE-SU-2015:0927-1, SUSE-SU-2015:0928-1, SUSE-SU-2015:0929-1)
[22/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xen and KVM packages of SUSE Linux Enterprise 11 and 12, and the SUSE Manager 1.7 for SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html
7. Security Updates in Ubuntu GNU/Linux (USN-2609-1, USN-2610-1, USN-2617-1, USN-2618-1)
[22/05/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the apport, oxide-qt, fuse and python-dbusmock packages for versions 12.04 LTS, 14.04 LTS, 14.10, 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2609-1/
URL:www.ubuntu.com/usn/usn-2610-1/
URL:www.ubuntu.com/usn/usn-2617-1/
URL:www.ubuntu.com/usn/usn-2618-1/
8. Vulnerability in Microsoft Internet Explorer (103298)
[21/05/2015] Vulnerability was identified in the Microsoft Internet Explorer 11 . An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects version 11 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103298
9. Vulnerabilities in Cisco Products
[21/05/2015] Vulnerabilities were identified in the Cisco Prime Central for HCS and Cisco Adaptive Security Appliance. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect versions of the mentioned products. Security patches are available to resolve the vulnerability identified in Cisco Adaptive Security Appliance.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38927
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38937
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103296
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103297
10. Vulnerability in HP LoadRunner (103292)
[21/05/2015] Vulnerability was identified in the HP LoadRunner. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects version 11.52 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103292
11. Vulnerabilities in Trend Micro OfficeScan
[21/05/2015] Vulnerabilities were identified in the Trend Micro OfficeScan 11. An attacker could bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to 11.0 Service Pack 1 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:downloadcenter.trendmicro.com/index.php?regs=NABU&clk=tbl&clkval=4739&cm_mmc=RSS-_-Download%20Center-_-product-_-5
URL:docs.trendmicro.com/all/ent/officescan/v11.0/en-us/osce_11.0_sp1_server_readme.htm
URL:docs.trendmicro.com/all/ent/officescan/v11.0/en-us/osce_11.0_sp1_agent_readme.txt
12. Vulnerabilities in Huawei Mate 7 smartphone (Huawei-SA-20150520-01-MATE7)
[21/05/2015] Vulnerabilities were identified in the Huawei Mate 7 smartphone. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect firmware versions prior to V100R001CHNC00B126SP03 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-432799.htm
13. Vulnerability in IPsec-Tools (103287)
[21/05/2015] Vulnerability was identified in the IPsec-Tools. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects version 0.8.2 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103287
14. Vulnerability in TLS protocol (103294)
[21/05/2015] Vulnerability was identified in the TLS protocol. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects version 1.2 of the mentioned product and is commonly referred to as "Logjam".
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103294
15. Security Updates in Debian (DSA-3263-1, DSA-3265-1)
[21/05/2015] Debian has released security update packages for fixing the vulnerabilities identified in the proftpd-dfsg and zendframework packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3263
URL:www.debian.org/security/2015/dsa-3265
16. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1020-1, RHSA-2015:1021-1)
[21/05/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the java-1.7.1-ibm and java-1.5.0-ibm packages for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1020.html
URL:rhn.redhat.com/errata/RHSA-2015-1021.html
17. Security Updates in SUSE (SUSE-SU-2015:0921-1)
[21/05/2015] SUSE has released security update packages for fixing the vulnerability identified in the gstreamer-0_10-plugins-bad package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00017.html
18. Security Updates in Ubuntu GNU/Linux (USN-2611-1, USN-2612-1, USN-2613-1, USN-2614-1, USN-2615-1, USN-2616-1)
[21/05/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ti-omap4, linux-lts-trusty and linux-lts-utopic packages for versions 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2611-1/
URL:www.ubuntu.com/usn/usn-2612-1/
URL:www.ubuntu.com/usn/usn-2613-1/
URL:www.ubuntu.com/usn/usn-2614-1/
URL:www.ubuntu.com/usn/usn-2615-1/
URL:www.ubuntu.com/usn/usn-2616-1/
19. Information Updates on Microsoft Security Bulletin (3057181)
[20/05/2015] Microsoft has updated information on the Security Bulletin for Microsoft Office. MS15-046 was revised to announce the release of the Microsoft Office for Mac 14.5.1 update. The release addresses a potential issue with Microsoft Outlook for Mac when customers install the Microsoft Office for Mac 14.5.0 update. Customers who have not already installed the 14.5.0 update should install the 14.5.1 update to be fully protected from this vulnerability.
URL:technet.microsoft.com/en-us/library/security/MS15-046
20. Vulnerabilities in Apple Watch OS (HT204870)
[20/05/2015] Vulnerabilities were identified in the Apple Watch OS. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 1.0.1 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:support.apple.com/en-hk/HT204870
21. Vulnerability in Cisco Unified Intelligence Center
[20/05/2015] Vulnerability was identified in the Cisco Unified Intelligence Center. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and perform cross-site request forgery attacks. This vulnerability affects version 10.6 (1) of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38913
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103281
22. Vulnerabilities in Google Chrome
[20/05/2015] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 43.0.2357.65 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:googlechromereleases.blogspot.mx/2015/05/stable-channel-update_19.html
URL:www.us-cert.gov/ncas/current-activity/2015/05/19/Google-Releases-Security-Update-Chrome
23. Vulnerability in KCodes NetUSB (VU#177092)
[20/05/2015] Vulnerability was identified in the KCodes NetUSB. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects multiple firmware versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.kb.cert.org/vuls/id/177092
24. Vulnerability in Samba (103230)
[20/05/2015] Vulnerability was identified in the Samba. An attacker could bypass security restrictions, execute arbitrary code and cause a denial of service condition. This vulnerability affects version 3.0.37 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103230
25. Security Updates in Debian (DSA-3262-1, DSA-3264-1)
[20/05/2015] Debian has released security update packages for fixing the vulnerabilities identified in the xen and icedove packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.debian.org/security/2015/dsa-3262
URL:www.debian.org/security/2015/dsa-3264
26. Security Updates in SUSE (openSUSE-SU-2015:0914-1)
[20/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player packages of openSUSE 13.1 and 13.2. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html
27. Vulnerabilities in Cisco Products
[19/05/2015] Vulnerabilities were identified in the Cisco Web Security Appliance (WSA) and Cisco FireSIGHT System Software. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned products.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38884
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38905
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103220
28. Vulnerability in IBM Products (1902300)
[19/05/2015] Vulnerability was identified in the IBM Notes, IBM Domino and IBM Expeditor. An attacker could bypass security restrictions and obtain sensitive information. This vulnerability affects multiple versions of the mentioned products.
URL:www.ibm.com/support/docview.wss?uid=swg21902300
29. Vulnerabilities in Moodle (MSA-15-0018, MSA-15-0019, MSA-15-0020, MSA-15-0021, MSA-15-0022, MSA-15-0023, MSA-15-0024, MSA-15-0025)
[19/05/2015] Vulnerabilities were identified in the Moodle. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross site scripting attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:moodle.org/security/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103221
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103222
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103223
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103224
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103225
30. Security Updates in Oracle Linux (ELSA-2015-1012)
[19/05/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Oracle Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-1012.html
31. Security Updates in Mageia (MGASA-2015-0229, MGASA-2015-0230, MGASA-2015-0231, MGASA-2015-0232, MGASA-2015-0233, MGASA-2015-0234)
[19/05/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the moodle, xbmc, php, php-apc, php-timezonedb, phpmyadmin, avidemux, sqlite3, rootcerts, nss, firefox, firefox-l10n, thunderbird and thunderbird-l10n packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0229.html
URL:advisories.mageia.org/MGASA-2015-0230.html
URL:advisories.mageia.org/MGASA-2015-0231.html
URL:advisories.mageia.org/MGASA-2015-0232.html
URL:advisories.mageia.org/MGASA-2015-0233.html
URL:advisories.mageia.org/MGASA-2015-0234.html
32. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1012-1)
[19/05/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Red Hat Enterprise Linux 5, 6, and 7. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:rhn.redhat.com/errata/RHSA-2015-1012.html
33. Security Updates in SUSE (openSUSE-SU-2015:0892-1, openSUSE-SU-2015:0893-1, openSUSE-SU-2015:0894-1, SUSE-SU-2015:0896-1)
[19/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the Firefox 31.7.0esr and qemu packages of openSUSE 13.1 and 13.2, openSUSE Evergreen 11.4, and SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html
34. Security Updates in Ubuntu GNU/Linux (USN-2603-1)
[19/05/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the thunderbird packages for versions 12.04 LTS, 14.04 LTS, 14.10 and vivid of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2603-1/
35. Vulnerability in Apache Portable Runtime (103204)
[18/05/2015] Vulnerability was identified in the Apache Portable Runtime. An attacker could bypass security restrictions and cause a denial of service condition. This vulnerability affects versions prior to 1.5.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103204
36. Vulnerability in Cisco Unified Customer Voice Portal
[18/05/2015] Vulnerability was identified in the Cisco Unified Customer Voice Portal. An attacker could bypass security restrictions, execute arbitrary code and perform cross-site scripting attacks. This vulnerability affects firmware version 10.5(1) of the mentioned product.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38868
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103203
37. Vulnerability in Oracle Products
[18/05/2015] Vulnerability was identified in the Oracle VirtualBox, Oracle VM and Oracle Linux. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:www.oracle.com/technetwork/topics/security/alert-cve-2015-3456-2542656.html
38. Security Updates in Debian (DSA-3261-1)
[18/05/2015] Debian has released security update packages for fixing the vulnerabilities identified in the libmodule-signature-perl package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code and compromise the system.
URL:www.debian.org/security/2015/dsa-3261
39. Security Updates in Mageia (MGASA-2015-0227, MGASA-2015-0228)
[18/05/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the ruby-rest-client, ruby-netrc, ruby-http-cookie, kmod-vboxadditions, kmod-virtualbox and virtualbox packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0227.html
URL:advisories.mageia.org/MGASA-2015-0228.html
40. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1011-1)
[18/05/2015] Red Hat has released security update packages for fixing the vulnerability identified in the rhev-hypervisor package for Red Hat Enterprise Virtualization 3. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1011.html
41. Security Updates in Slackware (SSA:2015-137-01)
[18/05/2015] Slackware has released security update packages for fixing the vulnerabilities identified in the mozilla-thunderbird package for multiple versions of Slackware Linux. Due to multiple errors, an attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360171
42. Security Updates in SUSE (SUSE-SU-2015:0884-1, SUSE-SU-2015:0884-2, SUSE-SU-2015:0889-1, openSUSE-SU-2015:0890-1)
[18/05/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the spice, KVM and flash-player packages of SUSE Linux Enterprise 11, 12 and openSUSE Evergreen 11.4. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html
URL:lists.opensuse.org/opensuse-security-announce/2015-05/msg00011.html
Subscribe to:
Posts (Atom)