Showing posts with label NTP. Show all posts
Showing posts with label NTP. Show all posts
Tuesday, April 4, 2017
Weekly IT Security News Bulletin (27 March– 2 April 2017)
1. 3S-Smart Software Solutions GmbH CODESYS Web Server https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02
2. Apple products https://support.apple.com/kb/HT207600 https://support.apple.com/kb/HT207615 https://support.apple.com/kb/HT207617 https://support.apple.com/zh-hk/HT207607
3. CentOS
https://lists.centos.org/pipermail/centos-announce/2017-March/022347.html https://lists.centos.org/pipermail/centos-announce/2017-March/022349.html
4. Debian
https://www.debian.org/security/2017/dsa-3817 https://www.debian.org/security/2017/dsa-3818 https://www.debian.org/security/2017/dsa-3819 https://www.debian.org/security/2017/dsa-3820 https://www.debian.org/security/2017/dsa-3821 https://www.debian.org/security/2017/dsa-3822 https://www.debian.org/security/2017/dsa-3823 https://www.debian.org/security/2017/dsa-3824
5. F5 Products https://support.f5.com/csp/article/K18015201
6. Gentoo Linux
https://security.gentoo.org/glsa/201703-04 https://security.gentoo.org/glsa/201703-05 https://security.gentoo.org/glsa/201703-06 https://security.gentoo.org/glsa/201703-07
7. Google Chrome
https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html
8. Huawei Video Content Management Products http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170329-01-vcm-en
9. IBM Notes http://www-01.ibm.com/support/docview.wss?uid=swg21990421 http://www-01.ibm.com/support/docview.wss?uid=swg21990658
10. Mageia http://advisories.mageia.org/MGASA-2017-0083.html http://advisories.mageia.org/MGASA-2017-0084.html http://advisories.mageia.org/MGASA-2017-0085.html http://advisories.mageia.org/MGASA-2017-0086.html http://advisories.mageia.org/MGASA-2017-0087.html http://advisories.mageia.org/MGASA-2017-0088.html http://advisories.mageia.org/MGASA-2017-0089.html http://advisories.mageia.org/MGASA-2017-0090.html http://advisories.mageia.org/MGASA-2017-0091.html http://advisories.mageia.org/MGASA-2017-0092.html http://advisories.mageia.org/MGASA-2017-0093.html http://advisories.mageia.org/MGASA-2017-0094.html
11. NTP http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu https://www.hkcert.org/my_url/en/alert/17032701
12. Oracle Linux https://linux.oracle.com/errata/ELSA-2017-3531.html https://linux.oracle.com/errata/ELSA-2017-0565.html https://linux.oracle.com/errata/ELSA-2017-0725.html https://linux.oracle.com/errata/ELSA-2017-0817.html https://linux.oracle.com/errata/ELSA-2017-0680.html https://linux.oracle.com/errata/ELSA-2017-0654.html https://linux.oracle.com/errata/ELSA-2017-0631.html https://linux.oracle.com/errata/ELSA-2017-0744.html https://linux.oracle.com/errata/ELSA-2017-0794.html https://linux.oracle.com/errata/ELSA-2017-0662.html https://linux.oracle.com/errata/ELSA-2017-0564.html https://linux.oracle.com/errata/ELSA-2017-0630.html https://linux.oracle.com/errata/ELSA-2017-0621.html https://linux.oracle.com/errata/ELSA-2017-0641.html https://linux.oracle.com/errata/ELSA-2017-0574.html https://linux.oracle.com/errata/ELSA-2017-0847.html
13. Samba https://www.samba.org/samba/security/CVE-2017-2619.html https://www.hkcert.org/my_url/en/alert/17032702
14. Schneider Electric Products https://ics-cert.us-cert.gov/advisories/ICSA-17-089-01 https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02
15. Siemens RUGGEDCOM VPN Products
https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
16. Slackware http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackwaresecurity.435262 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackwaresecurity.438176 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2017&m=slackwaresecurity.370121
17. SUSE https://www.suse.com/support/update/announcement/2017/suse-su-20170839-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170841-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170848-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170853-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170855-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170858-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170859-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170860-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170862-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170864-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170865-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170866-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170867-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170868-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170869-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170870-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170871-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170872-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170873-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170874-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170875-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170876-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170877-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170878-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170879-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170880-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170881-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170882-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170883-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170884-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170885-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170886-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170887-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170888-1.html https://www.suse.com/support/update/announcement/2017/suse-su-20170889-1.html
18. Ubuntu https://www.ubuntu.com/usn/usn-3233-1/ https://www.ubuntu.com/usn/usn-3239-3/ https://www.ubuntu.com/usn/usn-3244-1/ https://www.ubuntu.com/usn/usn-3245-1/ https://www.ubuntu.com/usn/usn-3246-1/ https://www.ubuntu.com/usn/usn-3247-1/ https://www.ubuntu.com/usn/usn-3236-1/ https://www.ubuntu.com/usn/usn-3248-1/ https://www.ubuntu.com/usn/usn-3249-1/ https://www.ubuntu.com/usn/usn-3249-2/ https://www.ubuntu.com/usn/usn-3250-1/ https://www.ubuntu.com/usn/usn-3250-2/ https://www.ubuntu.com/usn/usn-3251-1/ https://www.ubuntu.com/usn/usn-3251-2/ https://www.ubuntu.com/usn/usn-3216-2/ https://www.ubuntu.com/usn/usn-3242-2/
19. VMware Products http://www.vmware.com/security/advisories/VMSA-2017-0006.html
20. Windows Server 2003 IIS 6.0 https://nvd.nist.gov/vuln/detail/CVE-2017-7269
https://www.us-cert.gov/ncas/current-activity/2017/03/30/Internet-Information-Services-IIS-60Vulnerability
21. Xen http://xenbits.xen.org/xsa/advisory-206.html
Sunday, November 27, 2016
IT Security Alerts Weekly Digest (20 Nov ~ 26 Nov 2016)
1. Vulnerability in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161125-01-usg-en
2. Security Updates in FreeBSD
URL:www.vuxml.org/freebsd/8db8d62a-b08b-11e6-8eba-d050996490d0.html
URL:www.vuxml.org/freebsd/dc596a17-7a9e-11e6-b034-f0def167eeea.html
3. Security Updates in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162894-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162895-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162896-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162898-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162902-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162904-1.html
4. Vulnerabilities in Apache Tomcat
URL:tomcat.apache.org/security-6.html
URL:tomcat.apache.org/security-7.html
URL:tomcat.apache.org/security-8.html
URL:tomcat.apache.org/security-9.html
5. Vulnerabilities in Cisco Products
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd
6. Vulnerability in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/71/sol71814571.html
7. Vulnerabilities in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-fusionstorage-en
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-vrp-en
8. Security Update in Mageia
URL:advisories.mageia.org/MGASA-2016-0396.html
9. Security Updates in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-2819.html
URL:linux.oracle.com/errata/ELSA-2016-2820.html
10. Security Updates in Red Hat
URL:access.redhat.com/errata/RHSA-2016:2819
URL:access.redhat.com/errata/RHSA-2016:2820
11. Security Updates in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162887-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162891-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162893-1.html
12. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-3136-1/
URL:www.ubuntu.com/usn/usn-3137-1/
13. Vulnerability in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/68/sol68785753.html
14. Vulnerability in Fortinet Products
URL:fortiguard.com/advisory/fortios-flow-mode-detection-bypass-under-certain-conditions
15. Vulnerability in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-en
16. Vulnerabilities in VMware Products
URL:www.vmware.com/security/advisories/VMSA-2016-0021.html
URL:www.vmware.com/security/advisories/VMSA-2016-0022.html
17. Vulnerabilities in Xen
URL:xenbits.xen.org/xsa/advisory-191.html
URL:xenbits.xen.org/xsa/advisory-192.html
URL:xenbits.xen.org/xsa/advisory-193.html
URL:xenbits.xen.org/xsa/advisory-194.html
URL:xenbits.xen.org/xsa/advisory-195.html
URL:xenbits.xen.org/xsa/advisory-196.html
URL:xenbits.xen.org/xsa/advisory-197.html
URL:xenbits.xen.org/xsa/advisory-198.html
18. Security Update in Debian
URL:www.debian.org/security/2016/dsa-3722
19. Security Updates in Gentoo Linux
URL:security.gentoo.org/glsa/201611-15
URL:security.gentoo.org/glsa/201611-16
URL:security.gentoo.org/glsa/201611-17
URL:security.gentoo.org/glsa/201611-18
URL:security.gentoo.org/glsa/201611-19
URL:security.gentoo.org/glsa/201611-20
20. Security Updates in Red Hat
URL:access.redhat.com/errata/RHSA-2016:2815
URL:access.redhat.com/errata/RHSA-2016:2816
21. Security Updates in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162869-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162871-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162872-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162879-1.html
22. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-3134-1/
URL:www.ubuntu.com/usn/usn-3135-1/
23. Vulnerabilities in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/11/sol11307303.html
URL:support.f5.com/kb/en-us/solutions/public/k/30/sol30403302.html
24. Vulnerabilities in Network Time Protocol Daemon (ntpd)
URL:support.ntp.org/bin/view/Main/SecurityNotice#November_2016_ntp_4_2_8p9_NTP_Se
URL:www.us-cert.gov/ncas/current-activity/2016/11/21/Vulnerabilities-Identified-Network-Time-Protocol-Daemon-ntpd
25. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3719
URL:www.debian.org/security/2016/dsa-3720
URL:www.debian.org/security/2016/dsa-3721
26. Security Update in FreeBSD
URL:www.vuxml.org/freebsd/81fc7705-b002-11e6-b20a-14dae9d5a9d2.html
27. Security Updates in Mageia
URL:advisories.mageia.org/MGASA-2016-0392.html
URL:advisories.mageia.org/MGASA-2016-0393.html
URL:advisories.mageia.org/MGASA-2016-0394.html
URL:advisories.mageia.org/MGASA-2016-0395.html
28. Security Update in openSUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-11/msg00035.html
29. Security Update in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-2809.html
30. Security Update in Red Hat
URL:access.redhat.com/errata/RHSA-2016:2809
31. Security Update in Slackware
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.641761
32. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-3131-1/
URL:www.ubuntu.com/usn/usn-3132-1/
33. Vulnerability in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/52/sol52430518.html
34. Vulnerability in IBM Products
URL:www-01.ibm.com/support/docview.wss?uid=swg21994225
35. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3717
URL:www.debian.org/security/2016/dsa-3718
36. Security Updates in Gentoo Linux
URL:security.gentoo.org/glsa/201611-11
URL:security.gentoo.org/glsa/201611-12
URL:security.gentoo.org/glsa/201611-13
URL:security.gentoo.org/glsa/201611-14
37. Security Updates in openSUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html
URL:lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html
38. Security Updates in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-3644.html
URL:linux.oracle.com/errata/ELSA-2016-3645.html
URL:linux.oracle.com/errata/ELSA-2016-3646.html
39. Security Update in Slackware
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.399411
40. Security Update in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162859-1.html
41. Security Update in Ubuntu
URL:www.ubuntu.com/usn/usn-3124-1/
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161125-01-usg-en
2. Security Updates in FreeBSD
URL:www.vuxml.org/freebsd/8db8d62a-b08b-11e6-8eba-d050996490d0.html
URL:www.vuxml.org/freebsd/dc596a17-7a9e-11e6-b034-f0def167eeea.html
3. Security Updates in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162894-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162895-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162896-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162898-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162902-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162904-1.html
4. Vulnerabilities in Apache Tomcat
URL:tomcat.apache.org/security-6.html
URL:tomcat.apache.org/security-7.html
URL:tomcat.apache.org/security-8.html
URL:tomcat.apache.org/security-9.html
5. Vulnerabilities in Cisco Products
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd
6. Vulnerability in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/71/sol71814571.html
7. Vulnerabilities in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-fusionstorage-en
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-vrp-en
8. Security Update in Mageia
URL:advisories.mageia.org/MGASA-2016-0396.html
9. Security Updates in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-2819.html
URL:linux.oracle.com/errata/ELSA-2016-2820.html
10. Security Updates in Red Hat
URL:access.redhat.com/errata/RHSA-2016:2819
URL:access.redhat.com/errata/RHSA-2016:2820
11. Security Updates in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162887-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162891-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162893-1.html
12. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-3136-1/
URL:www.ubuntu.com/usn/usn-3137-1/
13. Vulnerability in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/68/sol68785753.html
14. Vulnerability in Fortinet Products
URL:fortiguard.com/advisory/fortios-flow-mode-detection-bypass-under-certain-conditions
15. Vulnerability in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-en
16. Vulnerabilities in VMware Products
URL:www.vmware.com/security/advisories/VMSA-2016-0021.html
URL:www.vmware.com/security/advisories/VMSA-2016-0022.html
17. Vulnerabilities in Xen
URL:xenbits.xen.org/xsa/advisory-191.html
URL:xenbits.xen.org/xsa/advisory-192.html
URL:xenbits.xen.org/xsa/advisory-193.html
URL:xenbits.xen.org/xsa/advisory-194.html
URL:xenbits.xen.org/xsa/advisory-195.html
URL:xenbits.xen.org/xsa/advisory-196.html
URL:xenbits.xen.org/xsa/advisory-197.html
URL:xenbits.xen.org/xsa/advisory-198.html
18. Security Update in Debian
URL:www.debian.org/security/2016/dsa-3722
19. Security Updates in Gentoo Linux
URL:security.gentoo.org/glsa/201611-15
URL:security.gentoo.org/glsa/201611-16
URL:security.gentoo.org/glsa/201611-17
URL:security.gentoo.org/glsa/201611-18
URL:security.gentoo.org/glsa/201611-19
URL:security.gentoo.org/glsa/201611-20
20. Security Updates in Red Hat
URL:access.redhat.com/errata/RHSA-2016:2815
URL:access.redhat.com/errata/RHSA-2016:2816
21. Security Updates in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162869-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162871-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162872-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20162879-1.html
22. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-3134-1/
URL:www.ubuntu.com/usn/usn-3135-1/
23. Vulnerabilities in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/11/sol11307303.html
URL:support.f5.com/kb/en-us/solutions/public/k/30/sol30403302.html
24. Vulnerabilities in Network Time Protocol Daemon (ntpd)
URL:support.ntp.org/bin/view/Main/SecurityNotice#November_2016_ntp_4_2_8p9_NTP_Se
URL:www.us-cert.gov/ncas/current-activity/2016/11/21/Vulnerabilities-Identified-Network-Time-Protocol-Daemon-ntpd
25. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3719
URL:www.debian.org/security/2016/dsa-3720
URL:www.debian.org/security/2016/dsa-3721
26. Security Update in FreeBSD
URL:www.vuxml.org/freebsd/81fc7705-b002-11e6-b20a-14dae9d5a9d2.html
27. Security Updates in Mageia
URL:advisories.mageia.org/MGASA-2016-0392.html
URL:advisories.mageia.org/MGASA-2016-0393.html
URL:advisories.mageia.org/MGASA-2016-0394.html
URL:advisories.mageia.org/MGASA-2016-0395.html
28. Security Update in openSUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-11/msg00035.html
29. Security Update in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-2809.html
30. Security Update in Red Hat
URL:access.redhat.com/errata/RHSA-2016:2809
31. Security Update in Slackware
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.641761
32. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-3131-1/
URL:www.ubuntu.com/usn/usn-3132-1/
33. Vulnerability in F5 Products
URL:support.f5.com/kb/en-us/solutions/public/k/52/sol52430518.html
34. Vulnerability in IBM Products
URL:www-01.ibm.com/support/docview.wss?uid=swg21994225
35. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3717
URL:www.debian.org/security/2016/dsa-3718
36. Security Updates in Gentoo Linux
URL:security.gentoo.org/glsa/201611-11
URL:security.gentoo.org/glsa/201611-12
URL:security.gentoo.org/glsa/201611-13
URL:security.gentoo.org/glsa/201611-14
37. Security Updates in openSUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-11/msg00033.html
URL:lists.opensuse.org/opensuse-security-announce/2016-11/msg00034.html
38. Security Updates in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-3644.html
URL:linux.oracle.com/errata/ELSA-2016-3645.html
URL:linux.oracle.com/errata/ELSA-2016-3646.html
39. Security Update in Slackware
URL:www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.399411
40. Security Update in SUSE
URL:www.suse.com/support/update/announcement/2016/suse-su-20162859-1.html
41. Security Update in Ubuntu
URL:www.ubuntu.com/usn/usn-3124-1/
Monday, May 2, 2016
IT Security Alerts Weekly Digest (24 Apr ~ 30 Apr 2016)
1. Vulnerabilities in Cisco Products
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cis
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cwms
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112768
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112769
2. Vulnerabilities in Google Chrome
URL:googlechromereleases.blogspot.hk/2016/04/stable-channel-update_28.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112772
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112773
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112774
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112775
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112776
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112777
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112778
3. Vulnerabilities in IBM WebSphere
URL:www-01.ibm.com/support/docview.wss?uid=swg21966638
URL:www-01.ibm.com/support/docview.wss?uid=swg21969620
URL:www-01.ibm.com/support/docview.wss?uid=swg21975424
URL:www-01.ibm.com/support/docview.wss?uid=swg21979231
4. Security Update in Red Hat
URL:access.redhat.com/errata/RHSA-2016:0699
5. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html
6. Vulnerability in Apache Struts
URL:struts.apache.org/docs/s2-032.html
URL:www.hkcert.org/my_url/en/alert/16042801
URL:www.cert.org.cn/publish/main/9/2016/20160427071233907846865/20160427071233907846865_.html
7. Vulnerabilities in F5 BIG-IP, Enterprise Manager, BIG-IQ, Traffix SDC,
LineRate Products
URL:support.f5.com/kb/en-us/solutions/public/k/52/sol52349521.html
URL:support.f5.com/kb/en-us/solutions/public/k/93/sol93532943.html
8. Vulnerability in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160427-01-dns-en
9. Vulnerabilities in NTP
URL:support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
URL:www.kb.cert.org/vuls/id/718152
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112739
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112740
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112741
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112742
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112743
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112744
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112745
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112746
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112747
10. Vulnerability in Wireshark
URL:www.hkcert.org/my_url/en/alert/16042702
11. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3559
URL:www.debian.org/security/2016/dsa-3560
12. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
13. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-2934-1/
URL:www.ubuntu.com/usn/usn-2936-1/
URL:www.ubuntu.com/usn/usn-2950-2/
URL:www.ubuntu.com/usn/usn-2952-2/
URL:www.ubuntu.com/usn/usn-2955-1/
14. Vulnerabilities in Firefox and Firefox ESR
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-07/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-15/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-29/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-36/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-39/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-40/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-41/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-42/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-43/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-44/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-45/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-46/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-47/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-48/
URL:www.us-cert.gov/ncas/current-activity/2016/04/26/Mozilla-Releases-Security-Updates
URL:www.hkcert.org/my_url/en/alert/16042701
15. Vulnerability in F5 Traffic SDC
URL:support.f5.com/kb/en-us/solutions/public/k/23/sol23822215.html
16. Security Update in Debian
URL:www.debian.org/security/2016/dsa-3557
17. Security Update in FreeBSD
URL:www.vuxml.org/freebsd/92d44f83-a7bf-41cf-91ee-3d1b8ecf579f.html
18. Security Updates in Gentoo Linux
URL:security.gentoo.org/glsa/201604-04
URL:security.gentoo.org/glsa/201604-05
19. Security Updates in Mageia
URL:advisories.mageia.org/MGASA-2016-0151.html
URL:advisories.mageia.org/MGASA-2016-0152.html
URL:advisories.mageia.org/MGASA-2016-0153.html
URL:advisories.mageia.org/MGASA-2016-0154.html
20. Security Update in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-0695.html
21. Security Update in Redhat Products
URL:access.redhat.com/errata/RHSA-2016:0695
22. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html
URL:www.suse.com/support/update/announcement/2016/suse-ru-20161153-1.html
23. Vulnerability in Allround Automations PL/SQL Developer
URL:www.kb.cert.org/vuls/id/229047
24. Security Updates in Mageia
URL:advisories.mageia.org/MGASA-2016-0146.html
URL:advisories.mageia.org/MGASA-2016-0147.html
URL:advisories.mageia.org/MGASA-2016-0148.html
URL:advisories.mageia.org/MGASA-2016-0149.html
URL:advisories.mageia.org/MGASA-2016-0150.html
25. Security Updates in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-0684.html
URL:linux.oracle.com/errata/ELSA-2016-0685.html
26. Security Updates in Redhat Products
URL:access.redhat.com/errata/RHSA-2016:0684
URL:access.redhat.com/errata/RHSA-2016:0685
27. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00051.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161138-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161139-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161140-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161145-1.html
28. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-2954-1/
29. Vulnerabilities in HP Data Protector
URL:h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05085988
URL:www.kb.cert.org/vuls/id/267328
30. Vulnerability in libgd
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112558
31. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3553
URL:www.debian.org/security/2016/dsa-3555
URL:www.debian.org/security/2016/dsa-3556
32. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cis
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cwms
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112768
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112769
2. Vulnerabilities in Google Chrome
URL:googlechromereleases.blogspot.hk/2016/04/stable-channel-update_28.html
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112772
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112773
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112774
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112775
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112776
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112777
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112778
3. Vulnerabilities in IBM WebSphere
URL:www-01.ibm.com/support/docview.wss?uid=swg21966638
URL:www-01.ibm.com/support/docview.wss?uid=swg21969620
URL:www-01.ibm.com/support/docview.wss?uid=swg21975424
URL:www-01.ibm.com/support/docview.wss?uid=swg21979231
4. Security Update in Red Hat
URL:access.redhat.com/errata/RHSA-2016:0699
5. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html
6. Vulnerability in Apache Struts
URL:struts.apache.org/docs/s2-032.html
URL:www.hkcert.org/my_url/en/alert/16042801
URL:www.cert.org.cn/publish/main/9/2016/20160427071233907846865/20160427071233907846865_.html
7. Vulnerabilities in F5 BIG-IP, Enterprise Manager, BIG-IQ, Traffix SDC,
LineRate Products
URL:support.f5.com/kb/en-us/solutions/public/k/52/sol52349521.html
URL:support.f5.com/kb/en-us/solutions/public/k/93/sol93532943.html
8. Vulnerability in Huawei Products
URL:www.huawei.com/en/psirt/security-advisories/huawei-sa-20160427-01-dns-en
9. Vulnerabilities in NTP
URL:support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
URL:www.kb.cert.org/vuls/id/718152
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112739
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112740
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112741
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112742
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112743
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112744
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112745
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112746
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112747
10. Vulnerability in Wireshark
URL:www.hkcert.org/my_url/en/alert/16042702
11. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3559
URL:www.debian.org/security/2016/dsa-3560
12. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
13. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-2934-1/
URL:www.ubuntu.com/usn/usn-2936-1/
URL:www.ubuntu.com/usn/usn-2950-2/
URL:www.ubuntu.com/usn/usn-2952-2/
URL:www.ubuntu.com/usn/usn-2955-1/
14. Vulnerabilities in Firefox and Firefox ESR
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-07/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-15/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-29/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-36/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-39/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-40/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-41/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-42/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-43/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-44/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-45/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-46/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-47/
URL:www.mozilla.org/en-US/security/advisories/mfsa2016-48/
URL:www.us-cert.gov/ncas/current-activity/2016/04/26/Mozilla-Releases-Security-Updates
URL:www.hkcert.org/my_url/en/alert/16042701
15. Vulnerability in F5 Traffic SDC
URL:support.f5.com/kb/en-us/solutions/public/k/23/sol23822215.html
16. Security Update in Debian
URL:www.debian.org/security/2016/dsa-3557
17. Security Update in FreeBSD
URL:www.vuxml.org/freebsd/92d44f83-a7bf-41cf-91ee-3d1b8ecf579f.html
18. Security Updates in Gentoo Linux
URL:security.gentoo.org/glsa/201604-04
URL:security.gentoo.org/glsa/201604-05
19. Security Updates in Mageia
URL:advisories.mageia.org/MGASA-2016-0151.html
URL:advisories.mageia.org/MGASA-2016-0152.html
URL:advisories.mageia.org/MGASA-2016-0153.html
URL:advisories.mageia.org/MGASA-2016-0154.html
20. Security Update in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-0695.html
21. Security Update in Redhat Products
URL:access.redhat.com/errata/RHSA-2016:0695
22. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00054.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html
URL:www.suse.com/support/update/announcement/2016/suse-ru-20161153-1.html
23. Vulnerability in Allround Automations PL/SQL Developer
URL:www.kb.cert.org/vuls/id/229047
24. Security Updates in Mageia
URL:advisories.mageia.org/MGASA-2016-0146.html
URL:advisories.mageia.org/MGASA-2016-0147.html
URL:advisories.mageia.org/MGASA-2016-0148.html
URL:advisories.mageia.org/MGASA-2016-0149.html
URL:advisories.mageia.org/MGASA-2016-0150.html
25. Security Updates in Oracle Linux
URL:linux.oracle.com/errata/ELSA-2016-0684.html
URL:linux.oracle.com/errata/ELSA-2016-0685.html
26. Security Updates in Redhat Products
URL:access.redhat.com/errata/RHSA-2016:0684
URL:access.redhat.com/errata/RHSA-2016:0685
27. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00051.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161138-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161139-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161140-1.html
URL:www.suse.com/support/update/announcement/2016/suse-su-20161145-1.html
28. Security Updates in Ubuntu
URL:www.ubuntu.com/usn/usn-2954-1/
29. Vulnerabilities in HP Data Protector
URL:h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05085988
URL:www.kb.cert.org/vuls/id/267328
30. Vulnerability in libgd
URL:exchange.xforce.ibmcloud.com/vulnerabilities/112558
31. Security Updates in Debian
URL:www.debian.org/security/2016/dsa-3553
URL:www.debian.org/security/2016/dsa-3555
URL:www.debian.org/security/2016/dsa-3556
32. Security Updates in SUSE
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html
URL:lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html
Sunday, October 25, 2015
IT Security Alerts Weekly Digest (18 Oct ~ 24 Oct 2015)
1. Vulnerabilities IBM Domino (1969050)
[23/10/2015] Vulnerabilities were identified in the IBM Domino. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21969050
2. Vulnerability Juniper MX Series router (JSA10485)
[23/10/2015] Vulnerability was identified in the Juniper MX Series router. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects multiple Junos versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:kb.juniper.net/index?page=content&id=JSA10485
3. Vulnerability in 3S CODESYS Gateway (ICSA-15-293-03)
[23/10/2015] Vulnerability was identified in the 3S CODESYS Gateway. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affect firmware versions prior to 2.3.9.48 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:ics-cert.us-cert.gov/advisories/ICSA-15-293-03
4. Vulnerabilities in IniNet Solutions Products (ICSA-15-293-01, ICSA-15-293-02)
[23/10/2015] Vulnerabilities were identified in the IniNet Solutions embeddedWebServer (eWebServer) and SCADA Web Server. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to 2.02 of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:ics-cert.us-cert.gov/advisories/ICSA-15-293-01
URL:ics-cert.us-cert.gov/advisories/ICSA-15-293-02
5. Vulnerabilities in Janitza UMG Power Quality Measuring Products (ICSA-15-265-03)
[23/10/2015] Vulnerabilities were identified in the Janitza UMG Power Quality Measuring Products. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:ics-cert.us-cert.gov/advisories/ICSA-15-265-03
6. Vulnerabilities in Linux Kernel (107416, 107417)
[23/10/2015] Vulnerabilities were identified in the Linux Kernel. An attacker could bypass security restrictions and obtain sensitive information. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107416
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107417
7. Vulnerabilities in Network Time Protocol Daemon
[23/10/2015] Vulnerabilities were identified in the Network Time Protocol Daemon (NTP). An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to 4.2.8p4 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
URL:www.us-cert.gov/ncas/current-activity/2015/10/21/Vulnerabilities-Identified-Network-Time-Protocol-Daemon-ntpd
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107436
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107437
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107438
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107439
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107440
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107441
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107442
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107443
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107444
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107445
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107445
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107447
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107447
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107449
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107450
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107451
8. Security Updates in Oracle Linux and Oracle Solaris (ELSA-2015-1917, ELSA-2015-1919, ELSA-2015-1920, ELSA-2015-1921, ELSA-2015-1924, ELSA-2015-1925)
[23/10/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the libwmf, java-1.8.0-openjdk, java-1.7.0-openjdk and qemu-kvm packages for Oracle Linux 5, 6 and 7, SSH, Apache HTTP server and Apache Tomcat packages for Oracle Solaris 10 and 11.2. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-1917.html
URL:linux.oracle.com/errata/ELSA-2015-1919.html
URL:linux.oracle.com/errata/ELSA-2015-1920.html
URL:linux.oracle.com/errata/ELSA-2015-1921.html
URL:linux.oracle.com/errata/ELSA-2015-1924.html
URL:linux.oracle.com/errata/ELSA-2015-1925.html
URL:www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
URL:www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
9. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1923-1, RHSA-2015:1924-1, RHSA-2015:1925-1, RHSA-2015:1926-1, RHSA-2015:1927-1, RHSA-2015:1928-1)
[23/10/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the qemu-kvm-rhev, qemu-kvm, kvm, java-1.8.0-oracle, java-1.7.0-oracle and java-1.6.0-sun packages for Red Hat Enterprise Virtualization 3, Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1923.html
URL:rhn.redhat.com/errata/RHSA-2015-1924.html
URL:rhn.redhat.com/errata/RHSA-2015-1925.html
URL:rhn.redhat.com/errata/RHSA-2015-1926.html
URL:rhn.redhat.com/errata/RHSA-2015-1927.html
URL:rhn.redhat.com/errata/RHSA-2015-1928.html
10. Security Updates in Ubuntu GNU/Linux (USN-2770-2)
[23/10/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the oxide-qt packages for versions 15.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2770-2/
11. Security Updates in Oracle Products
[22/10/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the Oracle Database Server, Mobile/Lite Server, Oracle Fusion Applications and Middleware, Oracle Enterprise Manager, Oracle E-Business Suite, Oracle Supply Chain Products Suite, Oracle PeopleSoft Products, Oracle Siebel, Oracle Industry Applications, Oracle Communications Applications, Oracle Retail Applications, Oracle Health Sciences Applications, Oracle Java SE, Oracle and Sun Systems Products, Pillar Axiom, Oracle Linux and Virtualization, Oracle MySQL and Support Tools. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. Security patches are available to resolve these vulnerabilities.
URL:www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
URL:blogs.oracle.com/sunsecurity/entry/cve_2014_7185_integer_overflow
URL:www.hkcert.org/my_url/en/alert/15102201
URL:www.us-cert.gov/ncas/current-activity/2015/10/20/Oracle-Releases-Security-Bulletin
12. Vulnerabilities in Apple Products (HT205317, HT205370, HT205372, HT205375, HT205376, HT205377, HT205378, HT205379)
[22/10/2015] Vulnerabilities were identified in the Apple Mac EFI, iOS, iTunes, OS X El Capitan, OS X Server, Safari, watchOS and Xcode. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.apple.com/en-hk/HT205317
URL:support.apple.com/en-hk/HT205370
URL:support.apple.com/en-hk/HT205372
URL:support.apple.com/en-hk/HT205375
URL:support.apple.com/en-hk/HT205376
URL:support.apple.com/en-hk/HT205377
URL:support.apple.com/en-hk/HT205378
URL:support.apple.com/en-hk/HT205379
URL:www.hkcert.org/my_url/en/alert/15102202
URL:www.us-cert.gov/ncas/current-activity/2015/10/21/Apple-Releases-Multiple-Security-Updates
13. Vulnerabilities in Cisco Products (cisco-sa-20151021-asa-dhcp1, cisco-sa-20151021-asa-dns1, cisco-sa-20151021-asa-dns2, cisco-sa-20151021-asa-ike, cisco-sa-20151021-ntp)
[22/10/2015] Vulnerabilities were identified in multiple Cisco products. An attacker could bypass security restrictions, gain elevated privileges, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dhcp1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns1
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-dns2
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-ike
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
URL:www.us-cert.gov/ncas/current-activity/2015/10/21/Cisco-Releases-Security-Updates
14. Vulnerabilities HP Products (VU#840844, VU#966927)
[22/10/2015] Vulnerabilities were identified in the HP Photosmart B210 printer, HP Client Autiomation and Radia Client Automation. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code on the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities identified in HP Client Autiomation and Radia Client Automation.
URL:www.kb.cert.org/vuls/id/840844
URL:www.kb.cert.org/vuls/id/966927
15. Vulnerabilities IBM HTTP Server (1969062)
[22/10/2015] Vulnerabilities were identified in the IBM HTTP Server bundled with IBM Domino. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect version 8.5.5.5 of IBM HTTP Server bundled in versions 9.0.0x and 9.0.1x of IBM Domino. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21969062
16. Vulnerabilities in Virtual Machine Monitors (VU#935424)
[22/10/2015] Vulnerabilities were identified in the Virtual Machine Monitors. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges and execute arbitrary code. These vulnerabilities affect multiple versions of the mentioned products.
URL:www.kb.cert.org/vuls/id/935424
17. Vulnerabilities in Medicomp MEDCIN Engine (VU#675052)
[22/10/2015] Vulnerabilities were identified in the Medicomp MEDCIN Engine. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect versions prior to 2.22.20153.226 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.kb.cert.org/vuls/id/675052
18. Vulnerabilities in Huawei products (Huawei-SA-20151021-01-USG, Huawei-SA-20151021-01-Routers)
[22/10/2015] Vulnerabilities were identified in multiple Huawei products. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-457916.htm
URL:www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-457933.htm
19. Security Updates in Debian (DSA-3375-1, DSA-3376-1)
[22/10/2015] Debian has released security update packages for fixing the vulnerabilities identified in the wordpress and chromium-browser packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.debian.org/security/2015/dsa-3375
URL:www.debian.org/security/2015/dsa-3376
20. Security Updates in SUSE (SUSE-SU-2015:1782-1, SUSE-SU-2015:1785-1)
[22/10/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the qemu and librsvg packages of SUSE Linux Enterprise 11 and 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html
URL:lists.opensuse.org/opensuse-security-announce/2015-10/msg00020.html
21. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1917-1, RHSA-2015:1918-1, RHSA-2015:1919-1, RHSA-2015:1920-1, RHSA-2015:1921-1)
[22/10/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the libwmf, swiftonfile, java-1.8.0-openjdk and java-1.7.0-openjdk packages for Red Hat Enterprise Linux 5, 6 and 7, and Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1917.html
URL:rhn.redhat.com/errata/RHSA-2015-1918.html
URL:rhn.redhat.com/errata/RHSA-2015-1919.html
URL:rhn.redhat.com/errata/RHSA-2015-1920.html
URL:rhn.redhat.com/errata/RHSA-2015-1921.html
22. Security Updates in Ubuntu GNU/Linux (USN-2770-1, USN-2773-1, USN-2774-1, USN-2775-1, USN-2776-1, USN-2777-1, USN-2778-1, USN-2779-1, USN-2780-1)
[22/10/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the oxide-qt, linux, linux-ti-omap4, linux-lts-trusty, linux-lts-utopic, linux-lts-vivid and miniupnpc packages for versions 12.04 LTS, 14.04 LTS and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2770-1/
URL:www.ubuntu.com/usn/usn-2773-1/
URL:www.ubuntu.com/usn/usn-2774-1/
URL:www.ubuntu.com/usn/usn-2775-1/
URL:www.ubuntu.com/usn/usn-2776-1/
URL:www.ubuntu.com/usn/usn-2777-1/
URL:www.ubuntu.com/usn/usn-2778-1/
URL:www.ubuntu.com/usn/usn-2779-1/
URL:www.ubuntu.com/usn/usn-2780-1/
23. Information Updates on Microsoft Security Advisory (2755801)
[20/10/2015] Microsoft has updated information on the Security Advisory for Adobe Flash Player in Internet Explorer on all supported editions of Windows. KB2755801 added the 3105216 update to the Current Update section.
URL:technet.microsoft.com/library/security/2755801.aspx
24. Vulnerabilities in Cisco Products (cisco-sa-20151016-asrcdma, cisco-sa-20151016-fmc)
[20/10/2015] Vulnerabilities were identified in the Cisco ASR 5000 CDMA PMIpv6 and Cisco FireSIGHT Management Center Policy Code for VMware. An attacker could bypass security restrictions, gain elevated privileges, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-asrcdma
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc
25. Vulnerabilities in HP ArcSight Logger (VU#842252)
[20/10/2015] Vulnerabilities were identified in the HP ArcSight Logger. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to v6.0 P2 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.kb.cert.org/vuls/id/842252
26. Vulnerabilities in F5 Products (SOL17458, SOL17460, SOL17462)
[20/10/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP DNS, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security and BIG-IQ ADC. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17458.html
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17460.html
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17462.html
27. Security Updates in Debian (DSA-3374-1)
[20/10/2015] Debian has released security update packages for fixing the vulnerabilities identified in the postgresql-9.4 packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3374
28. Security Updates in SUSE (openSUSE-SU-2015:1781-1)
[20/10/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player packages of openSUSE Evergreen 11.4. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html
29. Vulnerabilities in Adobe Flash Player (APSB15-27)
[19/10/2015] Vulnerabilities were identified in the Adobe Flash Player. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple versions of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:helpx.adobe.com/security/products/flash-player/apsb15-27.html
URL:www.us-cert.gov/ncas/current-activity/2015/10/16/Adobe-Releases-Security-Updates-Flash-Player
30. Vulnerability in Cisco Wireless LAN Controller (cisco-sa-20151016-wlc)
[19/10/2015] Vulnerability was identified in the Cisco Wireless LAN Controller. An attacker could bypass security restrictions and cause a denial of service condition. This vulnerability affects firmware version 8.0(120) of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-wlc
31. Vulnerabilities in F5 Products (SOL17443, SOL17444, SOL17447, SOL17448)
[19/10/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP DNS, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, BIG-IQ Cloud, BIG-IQ Device, BIG-IQ Security and BIG-IQ ADC. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17443.html
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17444.html
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17447.html
URL:support.f5.com/kb/en-us/solutions/public/17000/400/sol17448.html
32. Vulnerabilities in Long Term Evolution (LTE) Mobile Networks (VU#943167)
[19/10/2015] Vulnerabilities were identified in the Long Term Evolution (LTE) mobile networks. An attacker could bypass security restrictions, obtain sensitive information, silently place phone calls without the user's knowledge. These vulnerabilities affects ALL Android versions of the mentioned products.
URL:www.kb.cert.org/vuls/id/943167
33. Vulnerability in Twilio module for Drupal (DRUPAL-SA-CONTRIB-2015-157)
[19/10/2015] Vulnerability was identified in the Twilio module for Drupal. An attacker could bypass security restrictions. This vulnerability affects versions prior to 7.x-1.11 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:www.drupal.org/node/2592901
URL:exchange.xforce.ibmcloud.com/vulnerabilities/107180
34. Security Updates in Oracle Linux (ELSA-2015-3087)
[19/10/2015] Oracle has released security update packages for fixing the vulnerability identified in the lxc packages for Oracle Linux 6 and 7. An attacker could bypass security restrictions and cause a denial of service condition.
URL:linux.oracle.com/errata/ELSA-2015-3087.html
35. Security Updates in Debian (DSA-3373-1)
[19/10/2015] Debian has released security update packages for fixing the vulnerabilities identified in the ownCloud packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3373
36. Security Updates in Gentoo Linux (GLSA 201510-01)
[19/10/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the BIND packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201510-01
37. Security Updates in Mageia (MGASA-2015-0401, MGASA-2015-0402, MGASA-2015-0403, MGASA-2015-0404)
[19/10/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the cyrus-imapd, 389-ds-base, wireshark and flash-player-plugin packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0401.html
URL:advisories.mageia.org/MGASA-2015-0402.html
URL:advisories.mageia.org/MGASA-2015-0403.html
URL:advisories.mageia.org/MGASA-2015-0404.html
38. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1913-1)
[19/10/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the Adobe Flash Player packages for Red Hat Enterprise Linux 6. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1913.html
39. Security Updates in SUSE (openSUSE-SU-2015:1768-1, SUSE-SU-2015:1770-1, SUSE-SU-2015:1771-1)
[19/10/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player packages of openSUSE 13.1 and 13.2, SUSE Linux Enterprise 11 and 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-10/msg00015.html
URL:lists.opensuse.org/opensuse-security-announce/2015-10/msg00016.html
URL:lists.opensuse.org/opensuse-security-announce/2015-10/msg00017.html
40. Security Updates in Ubuntu GNU/Linux (USN-2768-1, USN-2772-1)
[19/10/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the firefox, postgresql-9.1, postgresql-9.3 and postgresql-9.4 packages for versions 12.04 LTS, 14.04 LTS and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2768-1/
URL:www.ubuntu.com/usn/usn-2772-1/
Subscribe to:
Posts (Atom)