1. Vulnerabilities in Mozilla Products (MFSA 2015-59, MFSA
2015-60, MFSA 2015-61, MFSA 2015-62, MFSA 2015-63, MFSA 2015-64, MFSA 2015-65,
MFSA 2015-66, MFSA 2015-67, MFSA 2015-68, MFSA 2015-69, MFSA 2015-70, MFSA
2015-71)
[03/07/2015]
Vulnerabilities were identified in Mozilla
Firefox, Mozilla Firefox ESR and Mozilla Thunderbird. An attacker could bypass
security restriction, obtain sensitive information, gain elevated privileges,
execute arbitrary code, cause a denial of service condition and compromise the
system. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-59/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-60/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-61/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-62/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-63/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-64/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-65/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-66/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-67/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-68/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-69/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-70/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-71/
2. Vulnerability in Cisco Adaptive Security
Appliance
[03/07/2015]
Vulnerability was identified in the Cisco
Adaptive Security Appliance. An attacker could bypass security restrictions,
cause a denial of service condition and crash the system. This vulnerability
affects multiple firmware versions of the mentioned product. Security patches
are available to resolve this
vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39612
3. Vulnerabilities in F5 Products (SOL16674, SOL16826,
SOL16835, SOL16837, SOL16841, SOL16845, SOL16846, SOL16859,
SOL16875)
[03/07/2015]
Vulnerabilities were identified in the F5 BIG-IP
LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP
Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP
WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, BIG-IQ Cloud, BIG-IQ
Device, BIG-IQ Security, BIG-IQ-ADC, LineRate and Traffix SDC. An attacker could
bypass security restrictions, obtain sensitive information, gain elevated
privileges, execute arbitrary code, cause a denial of service condition and
crash the system. These vulnerabilities affect multiple versions of the
mentioned products. Security patches are available to resolve these
vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/600/sol16674.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16826.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16835.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16837.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16841.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16845.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16846.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16859.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16875.html
4. Vulnerability in ManageEngine Password Manager Pro
(104336)
[03/07/2015]
Vulnerability was identified in the ManageEngine
Password Manager Pro. An attacker could bypass security restrictions, execute
arbitrary code and perform code injection attacks. This vulnerability affects
version 8.1 of the mentioned
product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104336
5. Vulnerability in Drupal Views Bulk Operations module
(DRUPAL-SA-CONTRIB-2015-131)
[03/07/2015] Vulnerability was identified in the Drupal Views Bulk
Operations module. An attacker could bypass security restrictions, gain elevated
privileges and execute arbitrary code. This vulnerability affects multiple
versions of the mentioned product. Security patches are available to resolve
this
vulnerability.
URL:www.drupal.org/node/2516688
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104320
6. Vulnerabilities in TYPO3 (TYPO3-CORE-SA-2015-002,
TYPO3-CORE-SA-2015-003, TYPO3-CORE-SA-2015-004)
[03/07/2015] Vulnerabilities were identified in the TYPO3. An attacker
could bypass security restrictions, obtain sensitive information, gain elevated
privileges and execute arbitrary code. These vulnerabilities affect multiple
versions of the mentioned product. Security patches are available to resolve
these
vulnerabilities.
URL:typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002/
URL:typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/
URL:typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004/
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104329
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104333
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104334
7. Security Updates in Debian
(DSA-3299-1)
[03/07/2015] Debian has
released security update packages for fixing the vulnerability identified in the
stunnel4 package for multiple versions of Debian GNU/Linux. An attacker could
bypass security
restrictions.
URL:www.debian.org/security/2015/dsa-3299
8. Security Updates in Red Hat Enterprise Linux
(RHSA-2015:1206-1, RHSA-2015:1207-1)
[03/07/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the openstack-cinder and firefox packages for Red Hat Enterprise Linux 5, 8
and 7. Due to multiple errors, an attacker could bypass security restrictions,
obtain sensitive information, gain elevated privileges, execute arbitrary code,
cause a denial of service condition and compromise the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1206.html
URL:rhn.redhat.com/errata/RHSA-2015-1207.html
9. Security Updates in SUSE (SUSE-SU-2015:1173-1,
SUSE-SU-2015:1177-1)
[03/07/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the ntp and MySQL packages of SUSE Linux Enterprise 11. Due to multiple errors,
an attacker could bypass security restrictions, obtain sensitive information,
execute arbitrary code, cause a denial of service condition and crash the
system.
URL:lists.opensuse.org/opensuse-security-announce/2015-07/msg00000.html
URL:lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html
10.
Vulnerabilities in Apple Products
(HT204934, HT204941, HT204942, HT204947, HT204949,
HT204950)
[02/07/2015]
Vulnerabilities were identified in the Apple Mac
EFI, Apple iOS, Apple OS X, Apple QuickTime, Apple iTunes and Apple Safari. An
attacker could bypass security restrictions, obtain sensitive information, gain
elevated privileges, execute arbitrary code, cause a denial of service condition
and compromise the system. These vulnerabilities affect multiple versions of the
mentioned products. Security patches are available to resolve these
vulnerabilities.
URL:support.apple.com/zh-hk/HT204934
URL:support.apple.com/zh-hk/HT204941
URL:support.apple.com/zh-hk/HT204942
URL:support.apple.com/zh-hk/HT204947
URL:support.apple.com/zh-hk/HT204949
URL:support.apple.com/zh-hk/HT204950
URL:www.hkcert.org/my_url/en/alert/15070201
URL:www.hkcert.org/my_url/en/alert/15070202
URL:www.hkcert.org/my_url/en/alert/15070203
URL:www.hkcert.org/my_url/en/alert/15070204
URL:www.hkcert.org/my_url/en/alert/15070205
URL:www.us-cert.gov/ncas/current-activity/2015/06/30/Apple-Releases-Security-Updates-QuickTime-Safari-Mac-EFI-OS-X
11.
Vulnerabilities in Cisco Products
(cisco-sa-20150701-cucdm)
[02/07/2015] Vulnerabilities were identified in the Cisco Unified
Communications Domain Manager, Cisco Digital Content Manager, Cisco Nexus
devices, Cisco Unified MeetingPlace and Cisco Adaptive Security Appliance. An
attacker could bypass security restrictions, obtain sensitive information, gain
elevated privileges, execute arbitrary code, perform code injection attacks,
cause a denial of service condition and compromise the system. These
vulnerabilities affect multiple firmware versions prior to 4.4.5 of the
mentioned products. Security patches are available to resolve these
vulnerabilities except the Cisco Nexus
devices.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150701-cucdm
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39556
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39568
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39569
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39570
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39571
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39583
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39611
URL:www.hkcert.org/my_url/en/alert/15070206
URL:www.us-cert.gov/ncas/current-activity/2015/07/01/Cisco-Releases-Security-Update
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104171
12.
Vulnerability in NetIQ Access Manager
(104144)
[02/07/2015]
Vulnerability was identified in the NetIQ Access
Manager. An attacker could bypass security restrictions and obtain sensitive
information. This vulnerability affects version 4.0 SP1 of the mentioned
product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104144
13.
Vulnerabilities in EMC Products (104307,
104308, 104309, 104310, 104311)
[02/07/2015] Vulnerabilities were identified in the EMC Documentum WebTop
Client, EMC Documentum D2 and EMC Isilon OneFS. An attacker could bypass
security restrictions, obtain sensitive information, gain elevated privileges,
execute arbitrary code, cause a denial of service condition and compromise the
system. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104307
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104308
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104309
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104310
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104311
14.
Vulnerabilities in F5 Products (SOL16819,
SOL16821, SOL16830, SOL16834)
[02/07/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP
AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway,
BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP
WebAccelerator, BIG-IP WOM, ARX, Enterprise Manager, BIG-IQ Cloud, BIG-IQ
Device, BIG-IQ Security, BIG-IQ-ADC and LineRate. An attacker could bypass
security restrictions, obtain sensitive information, gain elevated privileges,
execute arbitrary code, cause a denial of service condition and crash the
system. These vulnerabilities affect multiple versions of the mentioned
products. Security patches are available to resolve these
vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16819.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16821.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16830.html
URL:support.f5.com/kb/en-us/solutions/public/16000/800/sol16834.html
15.
Vulnerability in Huawei Home Gateway
Products (HW-443302)
[02/07/2015] Vulnerability was identified in the Huawei Home Gateway
HG520b and HG530. An attacker could bypass security restrictions and obtain
sensitive information. This vulnerability affects multiple firmware versions of
the mentioned
products.
URL:www.huawei.com/en/security/psirt/security-bulletins/security-notices/archive/hw-443302.htm
16.
Vulnerability in SolarWinds Storage
Manager (104169)
[02/07/2015] Vulnerability was identified in the SolarWinds Storage
Manager. An attacker could bypass security restrictions, gain elevated
privileges and execute arbitrary code. The affected version was not
specified.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104169
17.
Security Updates in Oracle Linux
(ELSA-2015-1197)
[02/07/2015] Oracle has
released security update packages for fixing the vulnerabilities identified in
the openssl package for Oracle Linux 5. Due to multiple errors, an attacker
could bypass security restrictions, obtain sensitive information, execute
arbitrary code, cause a denial of service condition and crash the
system.
URL:linux.oracle.com/errata/ELSA-2015-1197.html
18.
Security Updates in Debian
(DSA-3298-1)
[02/07/2015] Debian has
released security update packages for fixing the vulnerability identified in the
jackrabbit package for multiple versions of Debian GNU/Linux. An attacker could
bypass security restrictions, obtain sensitive information and execute arbitrary
code.
URL:www.debian.org/security/2015/dsa-3298
19.
Security Updates in Mageia
(MGASA-2015-0249, MGASA-2015-0250, MGASA-2015-0251, MGASA-2015-0252,
MGASA-2015-0253, MGASA-2015-0254)
[02/07/2015] Mageia has
released security update packages for fixing the vulnerabilities identified in
the libvpx, postgresql9.0, postgresql9.1, postgresql9.2, postgresql9.3,
python-tornado, p7zip, drupal and apache-mod_jk packages for multiple versions
of Mageia. Due to multiple errors, an attacker could bypass security
restrictions, obtain sensitive information, gain elevated privileges, execute
arbitrary code, cause a denial of service condition and compromise the
system.
URL:advisories.mageia.org/MGASA-2015-0249.html
URL:advisories.mageia.org/MGASA-2015-0250.html
URL:advisories.mageia.org/MGASA-2015-0251.html
URL:advisories.mageia.org/MGASA-2015-0252.html
URL:advisories.mageia.org/MGASA-2015-0253.html
URL:advisories.mageia.org/MGASA-2015-0254.html
20.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1197-1, RHSA-2015:1199-1)
[02/07/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the openssl and kernel packages for Red Hat Enterprise Linux 5 and 6. Due to
multiple errors, an attacker could bypass security restrictions, obtain
sensitive information, gain elevated privileges, execute arbitrary code, cause a
denial of service condition and compromise the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1197.html
URL:rhn.redhat.com/errata/RHSA-2015-1199.html
21.
Security Updates in SUSE
(SUSE-SU-2015:1161-1)
[02/07/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the java-1_6_0-ibm package of SUSE Linux Enterprise 12. Due to multiple errors,
an attacker could bypass security restrictions, obtain sensitive information,
gain elevated privileges, execute arbitrary code, cause a denial of service
condition and crash the
system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html
22.
Security Updates in Ubuntu GNU/Linux
(USN-2652-1)
[02/07/2015] Ubuntu has
released security update packages for fixing the vulnerabilities identified in
the oxide-qt package for versions 14.04 LTS, 14.10 and 15.04 of Ubuntu
GNU/Linux. Due to multiple errors, an attacker could bypass security
restrictions and execute arbitrary
code.
URL:www.ubuntu.com/usn/usn-2652-1/
23. Vulnerabilities in Cisco
Products
[30/06/2015]
Vulnerabilities were identified in the Cisco
Unified IP Phones 9900 Series, Cisco Headend System Releases and Cisco Unified
Communications Domain Manager. An attacker could bypass security restrictions,
obtain sensitive information, cause a denial of service condition and crash the
system. These vulnerabilities affect multiple firmware versions of the mentioned
products. Security patches are available to resolve these vulnerabilities except
the Cisco Headend System
Releases.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39554
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39555
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39557
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39562
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104119
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104120
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104122
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104123
24.
Vulnerabilities in IBM WebSphere
Application Server (1959083)
[30/06/2015] Vulnerabilities were identified in the IBM WebSphere
Application Server. An attacker could bypass security restrictions, obtain
sensitive information, gain elevated privileges, execute arbitrary code, cause a
denial of service condition and crash the system. These vulnerabilities affect
versions prior to 8.5.5.6 of the mentioned product. Security patches are
available to resolve these
vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21959083
URL:www.hkcert.org/my_url/en/alert/15063001
25.
Vulnerability in HP-UX
(104121)
[30/06/2015]
Vulnerability was identified in the HP-UX. An
attacker could bypass security restrictions and gain elevated privileges. This
vulnerability affects versions 11iv2 and 11iv3 of the mentioned product.
Security patches are available to resolve this
vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104121
26.
Security Updates in Oracle Linux
(ELSA-2015-1193, ELSA-2015-1194)
[30/06/2015] Oracle has
released security update packages for fixing the vulnerabilities identified in
the xerces-c and postgresql packages for Oracle Linux 6 and 7. Due to multiple
errors, an attacker could bypass security restrictions, execute arbitrary code,
cause a denial of service condition and crash the
system.
URL:linux.oracle.com/errata/ELSA-2015-1193.html
URL:linux.oracle.com/errata/ELSA-2015-1194.html
27.
Security Updates in Debian (DSA-3296-1,
DSA-3297-1)
[30/06/2015] Debian has
released security update packages for fixing the vulnerabilities identified in
the libcrypto++ and unattended-upgrades packages for multiple versions of Debian
GNU/Linux. Due to multiple errors, an attacker could bypass security
restrictions, obtain sensitive information and execute arbitrary
code.
URL:www.debian.org/security/2015/dsa-3296
URL:www.debian.org/security/2015/dsa-3297
28.
Security Updates in Red Hat Enterprise
Linux (RHSA-2015:1193-1, RHSA-2015:1194-1, RHSA-2015:1195-1,
RHSA-2015:1196-1)
[30/06/2015] Red Hat
has released security update packages for fixing the vulnerabilities identified
in the xerces-c, postgresql, postgresql92-postgresql and
rh-postgresql94-postgresql packages for Red Hat Enterprise Linux 6 and 7. Due to
multiple errors, an attacker could bypass security restrictions, obtain
sensitive information, execute arbitrary code, cause a denial of service
condition and crash the
system.
URL:rhn.redhat.com/errata/RHSA-2015-1193.html
URL:rhn.redhat.com/errata/RHSA-2015-1194.html
URL:rhn.redhat.com/errata/RHSA-2015-1195.html
URL:rhn.redhat.com/errata/RHSA-2015-1196.html
29.
Security Updates in SUSE
(SUSE-SU-2015:1156-1, SUSE-SU-2015:1157-1)
[30/06/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the Xen package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker
could bypass security restrictions, obtain sensitive information, gain elevated
privileges, execute arbitrary code, cause a denial of service condition and
crash the
system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html
30.
Security Updates in Ubuntu GNU/Linux
(USN-2657-1)
[30/06/2015] Ubuntu has
released security update packages for fixing the vulnerability identified in the
unattended-upgrades packages for versions 12.04 LTS, 14.04 LTS, 14.10 and 15.04
of Ubuntu GNU/Linux. An attacker could bypass security restrictions, obtain
sensitive information and execute arbitrary
code.
URL:www.ubuntu.com/usn/usn-2657-1/
31. Vulnerability in Apple OS X
(HT202681)
[29/06/2015]
Vulnerability was identified in the Adobe Flash
Player web plug-in for Apple OS X. An attacker could bypass security
restrictions, obtain sensitive information, gain elevated privileges, execute
arbitrary code, perform code injection attacks, cause a denial of service
condition and compromise the system. This vulnerability affects versions prior
to Flash Player 18.0.0.194 and 13.0.0.296 of the mentioned products. Security
patches are available to resolve this
vulnerability.
URL:support.apple.com/en-us/HT202681
32.
Vulnerability in Cisco Application Policy
Infrastructure Controller
[29/06/2015] Vulnerability was identified in the Cisco Application Policy
Infrastructure Controller. An attacker could bypass security restrictions and
obtain sensitive information. This vulnerability affects multiple firmware
versions of the mentioned product. Security patches are available to resolve
this
vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39529
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104106
33.
Vulnerability in HP System Management
Homepage (104107)
[29/06/2015] Vulnerability was identified in the HP System Management
Homepage. An attacker could bypass security restrictions, gain elevated
privileges, execute arbitrary code, cause a denial of service condition and
crash the system. This vulnerability affects versions 3.2.2 and 3.2.7 of the
mentioned product. Security patches are available to resolve this
vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104107
34.
Vulnerabilities in F5 Products
(SOL15605)
[29/06/2015]
Vulnerabilities were identified in the F5 BIG-IP
LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP
Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP
WebAccelerator, BIG-IP WOM and Enterprise Manager. An attacker could bypass
security restrictions, obtain sensitive information, execute arbitrary code,
cause a denial of service condition and crash the system. These vulnerabilities
affect multiple versions of the mentioned products. Security patches are
available to resolve these
vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/15000/600/sol15605.html?ref=rss
35.
Vulnerability in Perl Compatible Regular
Expressions (104098)
[29/06/2015] Vulnerability was identified in the Perl Compatible Regular
Expressions. An attacker could bypass security restrictions, execute arbitrary
code, cause a denial of service condition and crash the system. This
vulnerability affects versions 8.35, 8.36 and 8.37 of the mentioned
product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104098
36.
Security Updates in SUSE
(SUSE-SU-2015:1086-4, openSUSE-SU-2015:1148-1, SUSE-SU-2015:1150-1,
SUSE-SU-2015:1152-1)
[29/06/2015] SUSE has
released security update packages for fixing the vulnerabilities identified in
the java-1_7_0-ibm, Adobe Flash Player, compat-openssl098 and KVM packages of
openSUSE 13.1 and 13.2, and SUSE Linux Enterprise 11 and 12. Due to multiple
errors, an attacker could bypass security restrictions, obtain sensitive
information, gain elevated privileges, execute arbitrary code, cause a denial of
service condition and compromise the
system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00025.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00028.html
Showing posts with label US-CERT. Show all posts
Showing posts with label US-CERT. Show all posts
Tuesday, July 7, 2015
Sunday, June 28, 2015
IT Security Alerts Weekly Digest (21 Jun ~ 27 Jun 2015)
1. Vulnerabilities in Cisco Products (cisco-sa-20150625-ironport)
[26/06/2015] Vulnerabilities were identified in the Cisco Web Security Virtual Appliance (WSAv), Cisco Email Security Virtual Appliance (ESAv), Cisco Content Security Management Virtual Appliance (SMAv) and Cisco Wireless LAN Controller. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform code injection attacks, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39461
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39517
URL:www.us-cert.gov/ncas/current-activity/2015/06/25/Cisco-Releases-Security-Updates
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104072
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104073
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104075
2. Vulnerability in EMC Unisphere for VMAX (104074)
[26/06/2015] Vulnerability was identified in the EMC Unisphere for VMAX. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions 8.0.0, 8.0.1 and 8.0.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104074
3. Security Updates in Oracle Linux (ELSA-2015-1185, ELSA-2015-1189, ELSA-2015-3046, ELSA-2015-3047)
[26/06/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the nss, kvm and kernel packages for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-1185.html
URL:linux.oracle.com/errata/ELSA-2015-1189.html
URL:linux.oracle.com/errata/ELSA-2015-3046.html
URL:linux.oracle.com/errata/ELSA-2015-3047.html
4. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1185-1, RHSA-2015:1186-1, RHSA-2015:1187-1, RHSA-2015:1188-1, RHSA-2015:1189-1, RHSA-2015:1190-1)
[26/06/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the nss, nss-util, php55-php, php56-php, chromium-browser, kvm and kernel packages for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1185.html
URL:rhn.redhat.com/errata/RHSA-2015-1186.html
URL:rhn.redhat.com/errata/RHSA-2015-1187.html
URL:rhn.redhat.com/errata/RHSA-2015-1188.html
URL:rhn.redhat.com/errata/RHSA-2015-1189.html
URL:rhn.redhat.com/errata/RHSA-2015-1190.html
5. Security Updates in SUSE (openSUSE-SU-2015:1139-1, SUSE-SU-2015:1143-1)
[26/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the openssl packages of openSUSE 13.1 and 13.2, and SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html
6. Security Updates in Ubuntu GNU/Linux (USN-2653-1, USN-2654-1, USN-2655-1)
[26/06/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the python2.7, python3.2, python3.4, tomcat7 and tomcat6 packages for versions 12.04 LTS, 14.04 LTS, 14.10 and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2653-1/
URL:www.ubuntu.com/usn/usn-2654-1/
URL:www.ubuntu.com/usn/usn-2655-1/
7. Vulnerability in Apple OS X (104062)
[25/06/2015] Vulnerability was identified in the Apple OS X. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104062
8. Vulnerabilities in Cisco Products
[25/06/2015] Vulnerabilities were identified in the Cisco Unified Presence Server, Cisco IM and Presence Service, and Cisco IOS XR. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform cross-site scripting and code injection attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39504
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39505
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39506
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39509
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104059
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104063
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104064
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104065
9. Vulnerabilities in Samsung Products (104060, 104061)
[25/06/2015] Vulnerabilities were identified in the Samsung Galaxy S5 and Samsung Sbeam. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104060
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104061
10. Vulnerability in Thycotic Secret Server (104052)
[25/06/2015] Vulnerability was identified in the Thycotic Secret Server. An attacker could bypass security restrictions, execute arbitrary code and perform ross-site scripting attacks. This vulnerability affects versions 8.6.000000 and 8.8.000004 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104052
11. Security Updates in Oracle Linux (ELSA-2015-3045)
[25/06/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the kernel packages for Oracle Linux 7. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:linux.oracle.com/errata/ELSA-2015-3045.html
12. Security Updates in Debian (DSA-3294-1, DSA-3295-1)
[25/06/2015] Debian has released security update packages for fixing the vulnerabilities identified in the wireshark and cacti packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, perform cross-site scripting and code injection attacks, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3294
URL:www.debian.org/security/2015/dsa-3295
13. Security Updates in Mageia (MGASA-2015-0248)
[25/06/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the flash-player-plugin package for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0248.html
14. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1184-1)
[25/06/2015] Red Hat has released security update packages for fixing the vulnerability identified in the adobe flash player packages for Red Hat Enterprise Linux 5 and 6. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:rhn.redhat.com/errata/RHSA-2015-1184.html
15. Security Updates in SUSE (SUSE-SU-2015:1086-3, SUSE-SU-2015:1136-1, SUSE-SU-2015:1138-1)
[25/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player, IBM Java 1.7.0 and IBM Java 1.6.0 packages of SUSE Linux Enterprise 10, 11 and 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00020.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html
16. Information Updates on Microsoft Bulletins (3057110, 3058985)
[24/06/2015] Microsoft has updated information on the Security Bulletins for Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Microsoft Lync, and Microsoft Silverlight. (a) MS14-044 was revised to announce a detection change in the 3056819 update for Microsoft Silverlight 5. (b) MS15-049 was revised to announce a detection change in the 3056819 update for Microsoft Silverlight 5.
URL:technet.microsoft.com/en-us/library/security/MS15-044
URL:technet.microsoft.com/en-us/library/security/MS15-049
17. Vulnerability in Adobe Flash Player (APSB15-14)
[24/06/2015] Vulnerability was identified in the Adobe Flash Player. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:helpx.adobe.com/security/products/flash-player/apsb15-14.html
URL:technet.microsoft.com/en-us/library/security/2755801
URL:www.hkcert.org/my_url/en/alert/15062401
URL:www.us-cert.gov/ncas/current-activity/2015/06/23/Adobe-Releases-Security-Updates-Flash-Player
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104002
18. Vulnerabilities in Cisco Products
[24/06/2015] Vulnerabilities were identified in the Cisco WebEx Meeting Center, Cisco AnyConnect Secure Mobility Client for Windows, Cisco Nexus 9000 Series Software, Cisco Unified MeetingPlace, Cisco Wireless LAN Controller, Cisco Jabber for Windows and Cisco Identity Services Engine and Secure Access Control System. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform code injection attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities except the Cisco Jabber for Windows.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39458
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39466
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39467
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39469
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39470
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39472
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39494
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39501
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104003
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104008
19. Vulnerability in Paintshop Pro X7 (104001)
[24/06/2015] Vulnerability was identified in the Paintshop Pro X7. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104001
20. Vulnerability in FTP To Zip plugin for WordPress (104015)
[24/06/2015] Vulnerability was identified in the FTP To Zip plugin for WordPress. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions 1.8 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104015
21. Security Updates in Oracle Linux (ELSA-2015-1135, ELSA-2015-1137, ELSA-2015-1153, ELSA-2015-1154)
[24/06/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the php, kernel, mailman and libreswan packages for Oracle Linux 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-1135.html
URL:linux.oracle.com/errata/ELSA-2015-1137.html
URL:linux.oracle.com/errata/ELSA-2015-1153.html
URL:linux.oracle.com/errata/ELSA-2015-1154.html
22. Security Updates in Gentoo Linux (GLSA 201506-04)
[24/06/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the chromium packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201506-04
23. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1135-1)
[24/06/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the php packages for Red Hat Enterprise Linux 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1135.html
24. Security Updates in SUSE (SUSE-SU-2015:1103-1)
[24/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the e2fsprogs package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00019.html
25. Vulnerability in Apache Storm (103970)
[23/06/2015] Vulnerability was identified in the Apache Storm. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions prior to 0.10.0-beta1 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103970
26. Vulnerabilities in Apple OS X
[23/06/2015] Vulnerabilities were identified in the Apple OS X. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code and compromise the system. These vulnerabilities affect versions 10.10.3 and prior of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15062201
27. Vulnerabilities in Cisco Products
[23/06/2015] Vulnerabilities were identified in the Cisco Data Center Analytics Framework, Cisco Universal Broadband Routers, Cisco ASR 9000 Series Aggregation Services Routers and Cisco WebEx Meetings. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross-site scripting and cross-site request forgery attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities except the Cisco Data Center Analytics Framework.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39377
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39423
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39424
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39439
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39440
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39455
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39457
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39459
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39460
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103963
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103964
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103965
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103966
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103967
28. Vulnerabilities in Symantec Data Loss Prevention (SYM15-006)
[23/06/2015] Vulnerabilities were identified in the Symantec Data Loss Prevention Enforce Server Administration Console. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, perform cross-site scripting and cross-site request forgery attacks. These vulnerabilities affect versions prior to 12.5.2 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2015&suid=20150622_00
29. Vulnerability in FreeRADIUS (103971)
[23/06/2015] Vulnerability was identified in the FreeRADIUS. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions prior to 3.0.9 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103971
30. Vulnerabilities in Google Chrome
[23/06/2015] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 43.0.2357.130 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:googlechromereleases.blogspot.hk/2015/06/chrome-stable-update.html
URL:www.us-cert.gov/ncas/current-activity/2015/06/22/Google-Releases-Security-Update-Chrome
31. Security Updates in Gentoo Linux (GLSA 201506-02, GLSA 201506-03)
[23/06/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the openssl and gnutls packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201506-02
URL:security.gentoo.org/glsa/201506-03
32. Security Updates in SUSE (openSUSE-SU-2015:1092-1, openSUSE-SU-2015:1094-1, SUSE-SU-2015:1086-2)
[23/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xen package of openSUSE 13.1 and 13.2, and IBM Java 1.6.0 package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html
33. Security Updates in Ubuntu GNU/Linux (USN-2651-1)
[23/06/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the GNU patch packages for versions 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2651-1/
34. Vulnerabilities in Cisco Products
[22/06/2015] Vulnerabilities were identified in the Cisco NX-OS Software, Cisco Web Security Appliance, Cisco Gateway General Packet Radio Service Support Node and Cisco uBR10000 Series Universal Broadband Routers. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities except the Cisco Web Security Appliance.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39421
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39422
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39431
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39432
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103948
35. Vulnerabilities in Cacti (103949, 103950)
[22/06/2015] Vulnerabilities were identified in the Cacti. An attacker could bypass security restrictions, execute arbitrary code, perform code injection and cross-site scripting attacks. These vulnerabilities affect versions prior to 0.8.8d of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103949
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103950
36. Security Updates in Debian (DSA-3291-1, DSA-3292-1, DSA-3293-1)
[22/06/2015] Debian has released security update packages for fixing the vulnerabilities identified in the drupal7, cinder and pyjwt packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.debian.org/security/2015/dsa-3291
URL:www.debian.org/security/2015/dsa-3292
URL:www.debian.org/security/2015/dsa-3293
37. Security Updates in Gentoo Linux (GLSA 201506-01)
[22/06/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the adobe-flash packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201506-01
38. Security Updates in Mageia (MGASA-2015-0244, MGASA-2015-0245, MGASA-2015-0246, MGASA-2015-0247)
[22/06/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the redis, ffmpeg, openssl and cups packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0244.html
URL:advisories.mageia.org/MGASA-2015-0245.html
URL:advisories.mageia.org/MGASA-2015-0246.html
URL:advisories.mageia.org/MGASA-2015-0247.html
39. Security Updates in Ubuntu GNU/Linux (USN-2640-2, USN-2641-2, USN-2642-2, USN-2643-2, USN-2644-2, USN-2646-2)
[22/06/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ti-omap4, linux-lts-trusty and linux-lts-utopic packages for versions 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2640-2/
URL:www.ubuntu.com/usn/usn-2641-2/
URL:www.ubuntu.com/usn/usn-2642-2/
URL:www.ubuntu.com/usn/usn-2643-2/
URL:www.ubuntu.com/usn/usn-2644-2/
URL:www.ubuntu.com/usn/usn-2646-2/
[26/06/2015] Vulnerabilities were identified in the Cisco Web Security Virtual Appliance (WSAv), Cisco Email Security Virtual Appliance (ESAv), Cisco Content Security Management Virtual Appliance (SMAv) and Cisco Wireless LAN Controller. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform code injection attacks, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39461
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39517
URL:www.us-cert.gov/ncas/current-activity/2015/06/25/Cisco-Releases-Security-Updates
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104072
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104073
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104075
2. Vulnerability in EMC Unisphere for VMAX (104074)
[26/06/2015] Vulnerability was identified in the EMC Unisphere for VMAX. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions 8.0.0, 8.0.1 and 8.0.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104074
3. Security Updates in Oracle Linux (ELSA-2015-1185, ELSA-2015-1189, ELSA-2015-3046, ELSA-2015-3047)
[26/06/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the nss, kvm and kernel packages for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-1185.html
URL:linux.oracle.com/errata/ELSA-2015-1189.html
URL:linux.oracle.com/errata/ELSA-2015-3046.html
URL:linux.oracle.com/errata/ELSA-2015-3047.html
4. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1185-1, RHSA-2015:1186-1, RHSA-2015:1187-1, RHSA-2015:1188-1, RHSA-2015:1189-1, RHSA-2015:1190-1)
[26/06/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the nss, nss-util, php55-php, php56-php, chromium-browser, kvm and kernel packages for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1185.html
URL:rhn.redhat.com/errata/RHSA-2015-1186.html
URL:rhn.redhat.com/errata/RHSA-2015-1187.html
URL:rhn.redhat.com/errata/RHSA-2015-1188.html
URL:rhn.redhat.com/errata/RHSA-2015-1189.html
URL:rhn.redhat.com/errata/RHSA-2015-1190.html
5. Security Updates in SUSE (openSUSE-SU-2015:1139-1, SUSE-SU-2015:1143-1)
[26/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the openssl packages of openSUSE 13.1 and 13.2, and SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html
6. Security Updates in Ubuntu GNU/Linux (USN-2653-1, USN-2654-1, USN-2655-1)
[26/06/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the python2.7, python3.2, python3.4, tomcat7 and tomcat6 packages for versions 12.04 LTS, 14.04 LTS, 14.10 and 15.04 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2653-1/
URL:www.ubuntu.com/usn/usn-2654-1/
URL:www.ubuntu.com/usn/usn-2655-1/
7. Vulnerability in Apple OS X (104062)
[25/06/2015] Vulnerability was identified in the Apple OS X. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104062
8. Vulnerabilities in Cisco Products
[25/06/2015] Vulnerabilities were identified in the Cisco Unified Presence Server, Cisco IM and Presence Service, and Cisco IOS XR. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform cross-site scripting and code injection attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39504
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39505
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39506
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39509
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104059
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104063
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104064
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104065
9. Vulnerabilities in Samsung Products (104060, 104061)
[25/06/2015] Vulnerabilities were identified in the Samsung Galaxy S5 and Samsung Sbeam. An attacker could bypass security restrictions, obtain sensitive information and execute arbitrary code. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104060
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104061
10. Vulnerability in Thycotic Secret Server (104052)
[25/06/2015] Vulnerability was identified in the Thycotic Secret Server. An attacker could bypass security restrictions, execute arbitrary code and perform ross-site scripting attacks. This vulnerability affects versions 8.6.000000 and 8.8.000004 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104052
11. Security Updates in Oracle Linux (ELSA-2015-3045)
[25/06/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the kernel packages for Oracle Linux 7. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:linux.oracle.com/errata/ELSA-2015-3045.html
12. Security Updates in Debian (DSA-3294-1, DSA-3295-1)
[25/06/2015] Debian has released security update packages for fixing the vulnerabilities identified in the wireshark and cacti packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, perform cross-site scripting and code injection attacks, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3294
URL:www.debian.org/security/2015/dsa-3295
13. Security Updates in Mageia (MGASA-2015-0248)
[25/06/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the flash-player-plugin package for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:advisories.mageia.org/MGASA-2015-0248.html
14. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1184-1)
[25/06/2015] Red Hat has released security update packages for fixing the vulnerability identified in the adobe flash player packages for Red Hat Enterprise Linux 5 and 6. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:rhn.redhat.com/errata/RHSA-2015-1184.html
15. Security Updates in SUSE (SUSE-SU-2015:1086-3, SUSE-SU-2015:1136-1, SUSE-SU-2015:1138-1)
[25/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the flash-player, IBM Java 1.7.0 and IBM Java 1.6.0 packages of SUSE Linux Enterprise 10, 11 and 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00020.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00021.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html
16. Information Updates on Microsoft Bulletins (3057110, 3058985)
[24/06/2015] Microsoft has updated information on the Security Bulletins for Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Microsoft Lync, and Microsoft Silverlight. (a) MS14-044 was revised to announce a detection change in the 3056819 update for Microsoft Silverlight 5. (b) MS15-049 was revised to announce a detection change in the 3056819 update for Microsoft Silverlight 5.
URL:technet.microsoft.com/en-us/library/security/MS15-044
URL:technet.microsoft.com/en-us/library/security/MS15-049
17. Vulnerability in Adobe Flash Player (APSB15-14)
[24/06/2015] Vulnerability was identified in the Adobe Flash Player. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:helpx.adobe.com/security/products/flash-player/apsb15-14.html
URL:technet.microsoft.com/en-us/library/security/2755801
URL:www.hkcert.org/my_url/en/alert/15062401
URL:www.us-cert.gov/ncas/current-activity/2015/06/23/Adobe-Releases-Security-Updates-Flash-Player
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104002
18. Vulnerabilities in Cisco Products
[24/06/2015] Vulnerabilities were identified in the Cisco WebEx Meeting Center, Cisco AnyConnect Secure Mobility Client for Windows, Cisco Nexus 9000 Series Software, Cisco Unified MeetingPlace, Cisco Wireless LAN Controller, Cisco Jabber for Windows and Cisco Identity Services Engine and Secure Access Control System. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform code injection attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities except the Cisco Jabber for Windows.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39458
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39466
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39467
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39469
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39470
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39472
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39494
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39501
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104003
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104008
19. Vulnerability in Paintshop Pro X7 (104001)
[24/06/2015] Vulnerability was identified in the Paintshop Pro X7. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104001
20. Vulnerability in FTP To Zip plugin for WordPress (104015)
[24/06/2015] Vulnerability was identified in the FTP To Zip plugin for WordPress. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions 1.8 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/104015
21. Security Updates in Oracle Linux (ELSA-2015-1135, ELSA-2015-1137, ELSA-2015-1153, ELSA-2015-1154)
[24/06/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the php, kernel, mailman and libreswan packages for Oracle Linux 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-1135.html
URL:linux.oracle.com/errata/ELSA-2015-1137.html
URL:linux.oracle.com/errata/ELSA-2015-1153.html
URL:linux.oracle.com/errata/ELSA-2015-1154.html
22. Security Updates in Gentoo Linux (GLSA 201506-04)
[24/06/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the chromium packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201506-04
23. Security Updates in Red Hat Enterprise Linux (RHSA-2015:1135-1)
[24/06/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the php packages for Red Hat Enterprise Linux 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-1135.html
24. Security Updates in SUSE (SUSE-SU-2015:1103-1)
[24/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the e2fsprogs package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, cause a denial of service condition and crash the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00019.html
25. Vulnerability in Apache Storm (103970)
[23/06/2015] Vulnerability was identified in the Apache Storm. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions prior to 0.10.0-beta1 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103970
26. Vulnerabilities in Apple OS X
[23/06/2015] Vulnerabilities were identified in the Apple OS X. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code and compromise the system. These vulnerabilities affect versions 10.10.3 and prior of the mentioned product.
URL:www.hkcert.org/my_url/en/alert/15062201
27. Vulnerabilities in Cisco Products
[23/06/2015] Vulnerabilities were identified in the Cisco Data Center Analytics Framework, Cisco Universal Broadband Routers, Cisco ASR 9000 Series Aggregation Services Routers and Cisco WebEx Meetings. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, perform cross-site scripting and cross-site request forgery attacks, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities except the Cisco Data Center Analytics Framework.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39377
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39423
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39424
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39439
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39440
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39455
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39457
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39459
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39460
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103963
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103964
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103965
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103966
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103967
28. Vulnerabilities in Symantec Data Loss Prevention (SYM15-006)
[23/06/2015] Vulnerabilities were identified in the Symantec Data Loss Prevention Enforce Server Administration Console. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, perform cross-site scripting and cross-site request forgery attacks. These vulnerabilities affect versions prior to 12.5.2 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2015&suid=20150622_00
29. Vulnerability in FreeRADIUS (103971)
[23/06/2015] Vulnerability was identified in the FreeRADIUS. An attacker could bypass security restrictions and execute arbitrary code. This vulnerability affects versions prior to 3.0.9 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103971
30. Vulnerabilities in Google Chrome
[23/06/2015] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect versions prior to 43.0.2357.130 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:googlechromereleases.blogspot.hk/2015/06/chrome-stable-update.html
URL:www.us-cert.gov/ncas/current-activity/2015/06/22/Google-Releases-Security-Update-Chrome
31. Security Updates in Gentoo Linux (GLSA 201506-02, GLSA 201506-03)
[23/06/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the openssl and gnutls packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201506-02
URL:security.gentoo.org/glsa/201506-03
32. Security Updates in SUSE (openSUSE-SU-2015:1092-1, openSUSE-SU-2015:1094-1, SUSE-SU-2015:1086-2)
[23/06/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the xen package of openSUSE 13.1 and 13.2, and IBM Java 1.6.0 package of SUSE Linux Enterprise 11. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00017.html
URL:lists.opensuse.org/opensuse-security-announce/2015-06/msg00018.html
33. Security Updates in Ubuntu GNU/Linux (USN-2651-1)
[23/06/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the GNU patch packages for versions 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2651-1/
34. Vulnerabilities in Cisco Products
[22/06/2015] Vulnerabilities were identified in the Cisco NX-OS Software, Cisco Web Security Appliance, Cisco Gateway General Packet Radio Service Support Node and Cisco uBR10000 Series Universal Broadband Routers. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available to resolve these vulnerabilities except the Cisco Web Security Appliance.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39421
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39422
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39431
URL:tools.cisco.com/security/center/viewAlert.x?alertId=39432
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103948
35. Vulnerabilities in Cacti (103949, 103950)
[22/06/2015] Vulnerabilities were identified in the Cacti. An attacker could bypass security restrictions, execute arbitrary code, perform code injection and cross-site scripting attacks. These vulnerabilities affect versions prior to 0.8.8d of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103949
URL:exchange.xforce.ibmcloud.com/vulnerabilities/103950
36. Security Updates in Debian (DSA-3291-1, DSA-3292-1, DSA-3293-1)
[22/06/2015] Debian has released security update packages for fixing the vulnerabilities identified in the drupal7, cinder and pyjwt packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.debian.org/security/2015/dsa-3291
URL:www.debian.org/security/2015/dsa-3292
URL:www.debian.org/security/2015/dsa-3293
37. Security Updates in Gentoo Linux (GLSA 201506-01)
[22/06/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the adobe-flash packages for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201506-01
38. Security Updates in Mageia (MGASA-2015-0244, MGASA-2015-0245, MGASA-2015-0246, MGASA-2015-0247)
[22/06/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the redis, ffmpeg, openssl and cups packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0244.html
URL:advisories.mageia.org/MGASA-2015-0245.html
URL:advisories.mageia.org/MGASA-2015-0246.html
URL:advisories.mageia.org/MGASA-2015-0247.html
39. Security Updates in Ubuntu GNU/Linux (USN-2640-2, USN-2641-2, USN-2642-2, USN-2643-2, USN-2644-2, USN-2646-2)
[22/06/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ti-omap4, linux-lts-trusty and linux-lts-utopic packages for versions 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2640-2/
URL:www.ubuntu.com/usn/usn-2641-2/
URL:www.ubuntu.com/usn/usn-2642-2/
URL:www.ubuntu.com/usn/usn-2643-2/
URL:www.ubuntu.com/usn/usn-2644-2/
URL:www.ubuntu.com/usn/usn-2646-2/
Tuesday, April 7, 2015
IT Security Alerts Weekly Digest (29 Mar ~ 4 Apr 2015)
1. Vulnerabilities in Cisco Products (cisco-sa-20150401-cuc,
cisco-sa-20150401-dcnm)
[02/04/2015] Vulnerabilities were identified in Cisco Unity Connection and Cisco Prime Data Center Network Manager (DCNM). An attacker could bypass security restriction, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available for Firefox and Firefox ESR to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
2. Vulnerabilities in Google Chrome
[02/04/2015] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect versions prior to 41.0.2272.118 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:googlechromereleases.blogspot.hk/2015/04/stable-channel-update.html
URL:www.hkcert.org/my_url/en/alert/15040201
URL:www.us-cert.gov/ncas/current-activity/2015/04/01/Google-Releases-Security-Update-Chrome
3. Vulnerabilities in Novell iPrint Appliance (5206010)
[02/04/2015] Vulnerabilities were identified in the Novell iPrint Appliance. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect version 1.1 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=DyfzmiXp4gY~
4. Vulnerability in F5 Products (SOL16342)
[02/04/2015] Vulnerability was identified in the F5 BIG-IP LTM, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM and ARX. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16342
5. Security Updates in Oracle Linux (ELSA-2015-0771)
[02/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-0771.html
6. Security Updates in Debian (DSA-3210-1, DSA-3211-1)
[02/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the wireshark and iceweasel packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3210
URL:www.debian.org/security/2015/dsa-3211
7. Security Updates in Mandriva (MDVSA-2015:125, MDVSA-2015:126, MDVSA-2015:127, MDVSA-2015:128, MDVSA-2015:129, MDVSA-2015:130 MDVSA-2015:131, MDVSA-2015:132, MDVSA-2015:133, MDVSA-2015:134, MDVSA-2015:135, MDVSA-2015:136, MDVSA-2015:137, MDVSA-2015:138, MDVSA-2015:139, MDVSA-2015:140, MDVSA-2015:141, MDVSA-2015:142, MDVSA-2015:143, MDVSA-2015:144, MDVSA-2015:145-1)
[02/04/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the tcpdump, sudo, serf, sendmail, ruby, rsyslog, rsync, readline, python-requests, pulseaudio, ppp, perl, pcre, patch, openvpn, ntp, not-yet-commons-ssl, nodejs, mpfr, lua and libxfont packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A125/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A126/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A127/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A128/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A129/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A130/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A131/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A132/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A133/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A134/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A135/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A136/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A137/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A138/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A139/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A140/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A141/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A142/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A143/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A144/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A145-1/
8. Security Updates in Mageia (MGASA-2015-0122, MGASA-2015-0123, MGASA-2015-0124, MGASA-2015-0125)
[02/04/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the python-rope, chromium-browser-stable, tor and owncloud packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform code injection and cross-site scripting attacks, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0122.html
URL:advisories.mageia.org/MGASA-2015-0123.html
URL:advisories.mageia.org/MGASA-2015-0124.html
URL:advisories.mageia.org/MGASA-2015-0125.html
9. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0771-1)
[02/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:rhn.redhat.com/errata/RHSA-2015-0771.html
10. Security Updates in Ubuntu GNU/Linux (USN-2550-1, USN-2553-2, USN-2554-1, USN-2555-1)
[02/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the firefox, tiff, gnupg, gnupg2, libgcrypt11 and libgcrypt20 packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2550-1/
URL:www.ubuntu.com/usn/usn-2553-2/
URL:www.ubuntu.com/usn/usn-2554-1/
URL:www.ubuntu.com/usn/usn-2555-1/
11. Vulnerabilities in Mozilla Products (MFSA 2015-30, MFSA 2015-31, MFSA 2015-32, MFSA 2015-33, MFSA 2015-34, MFSA 2015-35, MFSA 2015-36, MFSA 2015-37, MFSA 2015-38, MFSA 2015-39, MFSA 2015-40, MFSA 2015-41, MFSA 2015-42)
[01/04/2015] Vulnerabilities were identified in Mozilla Firefox, Firefox ESR and Thunderbird. An attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available for Firefox and Firefox ESR to resolve these vulnerabilities.
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-30/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-31/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-32/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-33/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-34/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-35/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-36/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-37/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-38/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-39/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-40/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-41/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-42/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/
URL:www.hkcert.org/my_url/en/alert/15040101
URL:www.us-cert.gov/ncas/current-activity/2015/03/31/Mozilla-Releases-Security-Updates-Firefox-Firefox-ESR-and
12. Vulnerability in Apache Roller (101909)
[01/04/2015] Vulnerability was identified in the Apache Roller. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 5.1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101909
13. Vulnerability in Multicast DNS (VU#550620)
[01/04/2015] Vulnerability was identified in the Multicast DNS (mDNS). An attacker could bypass security restrictions, obtain sensitive information and cause a denial of service condition. This vulnerability affects multiple implementations of the mentioned protocol.
URL:www.kb.cert.org/vuls/id/550620
14. Vulnerability in NVIDIA Display Driver
[01/04/2015] Vulnerability was identified in the NVIDIA Display Driver. An attacker could bypass security restriction, gain elevated privileges and compromise the system. This vulnerability affects version R304 309 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:nvidia.custhelp.com/app/answers/detail/a_id/3634
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101911
15. Vulnerability in GNU Libtasn1
[01/04/2015] Vulnerability was identified in the GNU Libtasn1. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects versions prior to 4.4 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:lists.gnu.org/archive/html/help-libtasn1/2015-03/msg00002.html
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101894
16. Security Updates in Oracle Linux (ELSA-2015-0766, ELSA-2015-0767, ELSA-2015-3019, ELSA-2015-3020, ELSA-2015-3021)
[01/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the firefox, flac and kernel packages for Oracle Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-0766.html
URL:linux.oracle.com/errata/ELSA-2015-0767.html
URL:linux.oracle.com/errata/ELSA-2015-3019.html
URL:linux.oracle.com/errata/ELSA-2015-3020.html
URL:linux.oracle.com/errata/ELSA-2015-3021.html
17. Security Updates in Mandriva (MDVSA-2015:105, MDVSA-2015:106, MDVSA-2015:107, MDVSA-2015:108, MDVSA-2015:109, MDVSA-2015:110 MDVSA-2015:111, MDVSA-2015:112, MDVSA-2015:113, MDVSA-2015:114, MDVSA-2015:115, MDVSA-2015:116, MDVSA-2015:117, MDVSA-2015:118, MDVSA-2015:119, MDVSA-2015:120, MDVSA-2015:121, MDVSA-2015:122, MDVSA-2015:123, MDVSA-2015:124)
[01/04/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the imagemagick, apache-mod_security, lcms2, cups, python-django, postgresql, libxml2, python-lxml, dovecot, cifs-utils, libvirt, libtasn1, emacs, xlockmore, x11-server, wpa_supplicant, wget, util-linux, unzip and torque packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A105/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A106/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A107/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A108/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A109/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A110/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A111/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A112/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A113/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A114/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A115/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A116/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A117/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A118/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A119/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A120/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A121/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A122/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A123/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A124/
18. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0766-1, RHSA-2015:0767-1)
[01/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the firefox and flac packages for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0766.html
URL:rhn.redhat.com/errata/RHSA-2015-0767.html
19. Security Updates in SUSE (openSUSE-SU-2015:0636-1)
[01/04/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the SeaMonkey package of openSUSE 13.1 and 13.2. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code.
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00036.html
20. Security Updates in Ubuntu GNU/Linux (USN-2553-1)
[01/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the LibTIFF package for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2553-1/
21. Vulnerability in Cisco Unified Communications Manager
[31/03/2015] Vulnerability was identified in the Cisco Unified Communications Manager. An attacker could bypass security restriction and obtain sensitive information. This vulnerability affects version 9.1(2.10000.28) Base of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38079
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101885
22. Vulnerabilities in IBM Products (1697284, 1700029)
[31/03/2015] Vulnerabilities were identified in the IBM WebSphere Application Server and IBM Domino. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21697284
URL:www.ibm.com/support/docview.wss?uid=swg21700029
23. Vulnerabilities in F5 Products (SOL16317, SOL16319, SOL16320, SOL16323)
[31/03/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM and ARX. An attacker could bypass security restrictions, cause a denial of service condition and crash the system.. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16317.html
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16319.html
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16320.html
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16323.html
24. Vulnerability in ManageEngine Desktop Central (101866)
[31/03/2015] Vulnerability was identified in the ManageEngine Desktop Central. An attacker could bypass security restriction and reset the admin passwords. This vulnerability affects versions prior to Build 90135 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101866
25. Security Updates in Oracle Linux (ELSA-2015-0749, ELSA-2015-0750)
[31/03/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the libxml2 and postgresql packages for Oracle Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-0749.html
URL:linux.oracle.com/errata/ELSA-2015-0750.html
26. Security Updates in Debian (DSA-3209-1)
[31/03/2015] Debian has released security update packages for fixing the vulnerabilities identified in the openldap package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3209
27. Security Updates in Mandriva (MDVSA-2015:084, MDVSA-2015:085, MDVSA-2015:086, MDVSA-2015:087, MDVSA-2015:088, MDVSA-2015:089, MDVSA-2015:090, MDVSA-2015:091, MDVSA-2015:092, MDVSA-2015:093, MDVSA-2015:094, MDVSA-2015:095, MDVSA-2015:096, MDVSA-2015:097, MDVSA-2015:098, MDVSA-2015:099, MDVSA-2015:100, MDVSA-2015:101, MDVSA-2015:102, MDVSA-2015:103, MDVSA-2015:104)
[31/03/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the tomcat, subversion, libssh, egroupware, udisks2, freetype2, libpng, mariadb, net-snmp, apache, nginx, openssh, stunnel, php-ZendFramework, curl, python-pillow, cups-filters, jbigkit, json-c, squid and elfutils packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A084/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A085/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A086/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A087/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A088/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A089/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A090/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A091/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A092/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A093/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A094/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A095/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A096/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A097/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A098/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A099/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A100/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A101/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A102/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A103/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A104/
28. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0749-1, RHSA-2015:0750-1, RHSA-2015:0751-1, RHSA-2015:0752-1)
[31/03/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the libxml2 and postgresql packages for Red Hat Enterprise Linux 6 and 7, kernel-rt package for Red Hat Enterprise MRG 2.5, and openssl package for Red Hat Storage 2.1. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform XML External Entity attacks, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0749.html
URL:rhn.redhat.com/errata/RHSA-2015-0750.html
URL:rhn.redhat.com/errata/RHSA-2015-0751.html
URL:rhn.redhat.com/errata/RHSA-2015-0752.html
29. Security Updates in SUSE (SUSE-SU-2015:0630-1)
[31/03/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the MozillaFirefox packages of SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
30. Security Updates in Ubuntu GNU/Linux (USN-2551-1)
[31/03/2015] Ubuntu has released security update packages for fixing the vulnerability identified in the jakarta-taglibs-standard package for versions 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code and perform external XML entity attacks.
URL:www.ubuntu.com/usn/usn-2551-1/
31. Vulnerability in Cisco NX-OS Software
[30/03/2015] Vulnerability was identified in the Cisco NX-OS Software. An attacker could bypass security restriction, execute arbitrary code, perform code injection attacks and compromise the system. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38062
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101852
32. Vulnerability in SSL Certificate Authorities (VU#591120)
[30/03/2015] Vulnerability was identified in multiple SSL Certificate Authorities. An attacker could bypass security restrictions, obtain sensitive information and perform HTTPS spoofing attacks. This vulnerability affects multiple versions of the mentioned products.
URL:www.kb.cert.org/vuls/id/591120
33. Vulnerability in RC4 Algorithm (101851)
[30/03/2015] Vulnerability was identified in the RC4 algorithm used in the TLS protocol and SSL protocol. An attacker could obtain sensitive information. This vulnerability affects version 1.2 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101851
34. Security Updates in Debian (DSA-3205-1, DSA-3206-1, DSA-3207-1, DSA-3208-1)
[30/03/2015] Debian has released security update packages for fixing the vulnerabilities identified in the batik, dulwich, shibboleth-sp2 and freexl packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3205
URL:www.debian.org/security/2015/dsa-3206
URL:www.debian.org/security/2015/dsa-3207
URL:www.debian.org/security/2015/dsa-3208
35. Security Updates in Gentoo Linux (GLSA 201503-13)
[30/03/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the busybox package for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201503-13
36. Security Updates in Mageia (MGASA-2015-0116, MGASA-2015-0117, MGASA-2015-0118, MGASA-2015-0119, MGASA-2015-0120, MGASA-2015-0121)
[30/03/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the setup, wireshark, dokuwiki, krb5, python-requests and drupal packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform code injection and cross-site scripting attacks, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0116.html
URL:advisories.mageia.org/MGASA-2015-0117.html
URL:advisories.mageia.org/MGASA-2015-0118.html
URL:advisories.mageia.org/MGASA-2015-0119.html
URL:advisories.mageia.org/MGASA-2015-0120.html
URL:advisories.mageia.org/MGASA-2015-0121.html
37. Security Updates in Mandriva (MDVSA-2015:062, MDVSA-2015:063, MDVSA-2015:064, MDVSA-2015:065, MDVSA-2015:066, MDVSA-2015:067, MDVSA-2015:068, MDVSA-2015:069, MDVSA-2015:070, MDVSA-2015:071, MDVSA-2015:072, MDVSA-2015:073, MDVSA-2015:074, MDVSA-2015:075, MDVSA-2015:076, MDVSA-2015:077, MDVSA-2015:078, MDVSA-2015:079, MDVSA-2015:080, MDVSA-2015:081, MDVSA-2015:082, MDVSA-2015:083)
[30/03/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the openssl, cabextract, cpio, e2fsprogs, krb5, libvirt, libpng12, gnutls, openldap, python, python3, python-numpy, mutt, php, samba and samba4 packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A062/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A063/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A064/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A065/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A066/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A067/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A068/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A069/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A070/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A071/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A072/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A073/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A074/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A075/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A076/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A077/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A078/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A079/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A080/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A081/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A082/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A083/
38. Security Updates in SUSE (SUSE-SU-2015:0613-1, openSUSE-SU-2015:0614-1, SUSE-SU-2015:0620-1, SUSE-SU-2015:0593-2)
[30/03/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the Xen, MySQL and MozillaFirefox packages of SUSE Linux Enterprise 10, 11 and 12, libXfont packages of openSUSE 13.1 and 13.2. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00031.html
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00033.html
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00034.html
39. Security Updates in Ubuntu GNU/Linux (USN-2541-1, USN-2542-1, USN-2543-1, USN-2544-1, USN-2545-1, USN-2546-1, USN-2547-1, USN-2548-1, USN-2549-1)
[30/03/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ti-omap4, linux-lts-trusty, linux-lts-utopic, mono, batik and libarchive packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2541-1/
URL:www.ubuntu.com/usn/usn-2542-1/
URL:www.ubuntu.com/usn/usn-2543-1/
URL:www.ubuntu.com/usn/usn-2544-1/
URL:www.ubuntu.com/usn/usn-2545-1/
URL:www.ubuntu.com/usn/usn-2546-1/
URL:www.ubuntu.com/usn/usn-2547-1/
URL:www.ubuntu.com/usn/usn-2548-1/
URL:www.ubuntu.com/usn/usn-2549-1/
[02/04/2015] Vulnerabilities were identified in Cisco Unity Connection and Cisco Prime Data Center Network Manager (DCNM). An attacker could bypass security restriction, obtain sensitive information, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect multiple firmware versions of the mentioned products. Security patches are available for Firefox and Firefox ESR to resolve these vulnerabilities.
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
URL:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
2. Vulnerabilities in Google Chrome
[02/04/2015] Vulnerabilities were identified in the Google Chrome. An attacker could bypass security restrictions, obtain sensitive information, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect versions prior to 41.0.2272.118 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:googlechromereleases.blogspot.hk/2015/04/stable-channel-update.html
URL:www.hkcert.org/my_url/en/alert/15040201
URL:www.us-cert.gov/ncas/current-activity/2015/04/01/Google-Releases-Security-Update-Chrome
3. Vulnerabilities in Novell iPrint Appliance (5206010)
[02/04/2015] Vulnerabilities were identified in the Novell iPrint Appliance. An attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system. These vulnerabilities affect version 1.1 of the mentioned product. Security patches are available to resolve these vulnerabilities.
URL:download.novell.com/Download?buildid=DyfzmiXp4gY~
4. Vulnerability in F5 Products (SOL16342)
[02/04/2015] Vulnerability was identified in the F5 BIG-IP LTM, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM and ARX. An attacker could bypass security restrictions, cause a denial of service condition and crash the system. This vulnerability affects multiple versions of the mentioned products. Security patches are available to resolve this vulnerability.
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16342
5. Security Updates in Oracle Linux (ELSA-2015-0771)
[02/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Oracle Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-0771.html
6. Security Updates in Debian (DSA-3210-1, DSA-3211-1)
[02/04/2015] Debian has released security update packages for fixing the vulnerabilities identified in the wireshark and iceweasel packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3210
URL:www.debian.org/security/2015/dsa-3211
7. Security Updates in Mandriva (MDVSA-2015:125, MDVSA-2015:126, MDVSA-2015:127, MDVSA-2015:128, MDVSA-2015:129, MDVSA-2015:130 MDVSA-2015:131, MDVSA-2015:132, MDVSA-2015:133, MDVSA-2015:134, MDVSA-2015:135, MDVSA-2015:136, MDVSA-2015:137, MDVSA-2015:138, MDVSA-2015:139, MDVSA-2015:140, MDVSA-2015:141, MDVSA-2015:142, MDVSA-2015:143, MDVSA-2015:144, MDVSA-2015:145-1)
[02/04/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the tcpdump, sudo, serf, sendmail, ruby, rsyslog, rsync, readline, python-requests, pulseaudio, ppp, perl, pcre, patch, openvpn, ntp, not-yet-commons-ssl, nodejs, mpfr, lua and libxfont packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A125/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A126/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A127/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A128/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A129/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A130/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A131/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A132/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A133/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A134/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A135/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A136/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A137/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A138/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A139/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A140/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A141/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A142/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A143/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A144/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A145-1/
8. Security Updates in Mageia (MGASA-2015-0122, MGASA-2015-0123, MGASA-2015-0124, MGASA-2015-0125)
[02/04/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the python-rope, chromium-browser-stable, tor and owncloud packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform code injection and cross-site scripting attacks, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0122.html
URL:advisories.mageia.org/MGASA-2015-0123.html
URL:advisories.mageia.org/MGASA-2015-0124.html
URL:advisories.mageia.org/MGASA-2015-0125.html
9. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0771-1)
[02/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the thunderbird package for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code and cause a denial of service condition.
URL:rhn.redhat.com/errata/RHSA-2015-0771.html
10. Security Updates in Ubuntu GNU/Linux (USN-2550-1, USN-2553-2, USN-2554-1, USN-2555-1)
[02/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the firefox, tiff, gnupg, gnupg2, libgcrypt11 and libgcrypt20 packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2550-1/
URL:www.ubuntu.com/usn/usn-2553-2/
URL:www.ubuntu.com/usn/usn-2554-1/
URL:www.ubuntu.com/usn/usn-2555-1/
11. Vulnerabilities in Mozilla Products (MFSA 2015-30, MFSA 2015-31, MFSA 2015-32, MFSA 2015-33, MFSA 2015-34, MFSA 2015-35, MFSA 2015-36, MFSA 2015-37, MFSA 2015-38, MFSA 2015-39, MFSA 2015-40, MFSA 2015-41, MFSA 2015-42)
[01/04/2015] Vulnerabilities were identified in Mozilla Firefox, Firefox ESR and Thunderbird. An attacker could bypass security restriction, obtain sensitive information, gain elevated privileges, execute arbitrary code and cause a denial of service condition. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available for Firefox and Firefox ESR to resolve these vulnerabilities.
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-30/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-31/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-32/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-33/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-34/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-35/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-36/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-37/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-38/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-39/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-40/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-41/
URL:www.mozilla.org/en-US/security/advisories/mfsa2015-42/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
URL:www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/
URL:www.hkcert.org/my_url/en/alert/15040101
URL:www.us-cert.gov/ncas/current-activity/2015/03/31/Mozilla-Releases-Security-Updates-Firefox-Firefox-ESR-and
12. Vulnerability in Apache Roller (101909)
[01/04/2015] Vulnerability was identified in the Apache Roller. An attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code. This vulnerability affects versions prior to 5.1.2 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101909
13. Vulnerability in Multicast DNS (VU#550620)
[01/04/2015] Vulnerability was identified in the Multicast DNS (mDNS). An attacker could bypass security restrictions, obtain sensitive information and cause a denial of service condition. This vulnerability affects multiple implementations of the mentioned protocol.
URL:www.kb.cert.org/vuls/id/550620
14. Vulnerability in NVIDIA Display Driver
[01/04/2015] Vulnerability was identified in the NVIDIA Display Driver. An attacker could bypass security restriction, gain elevated privileges and compromise the system. This vulnerability affects version R304 309 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:nvidia.custhelp.com/app/answers/detail/a_id/3634
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101911
15. Vulnerability in GNU Libtasn1
[01/04/2015] Vulnerability was identified in the GNU Libtasn1. An attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system. This vulnerability affects versions prior to 4.4 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:lists.gnu.org/archive/html/help-libtasn1/2015-03/msg00002.html
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101894
16. Security Updates in Oracle Linux (ELSA-2015-0766, ELSA-2015-0767, ELSA-2015-3019, ELSA-2015-3020, ELSA-2015-3021)
[01/04/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the firefox, flac and kernel packages for Oracle Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:linux.oracle.com/errata/ELSA-2015-0766.html
URL:linux.oracle.com/errata/ELSA-2015-0767.html
URL:linux.oracle.com/errata/ELSA-2015-3019.html
URL:linux.oracle.com/errata/ELSA-2015-3020.html
URL:linux.oracle.com/errata/ELSA-2015-3021.html
17. Security Updates in Mandriva (MDVSA-2015:105, MDVSA-2015:106, MDVSA-2015:107, MDVSA-2015:108, MDVSA-2015:109, MDVSA-2015:110 MDVSA-2015:111, MDVSA-2015:112, MDVSA-2015:113, MDVSA-2015:114, MDVSA-2015:115, MDVSA-2015:116, MDVSA-2015:117, MDVSA-2015:118, MDVSA-2015:119, MDVSA-2015:120, MDVSA-2015:121, MDVSA-2015:122, MDVSA-2015:123, MDVSA-2015:124)
[01/04/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the imagemagick, apache-mod_security, lcms2, cups, python-django, postgresql, libxml2, python-lxml, dovecot, cifs-utils, libvirt, libtasn1, emacs, xlockmore, x11-server, wpa_supplicant, wget, util-linux, unzip and torque packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A105/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A106/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A107/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A108/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A109/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A110/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A111/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A112/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A113/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A114/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A115/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A116/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A117/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A118/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A119/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A120/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A121/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A122/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A123/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A124/
18. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0766-1, RHSA-2015:0767-1)
[01/04/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the firefox and flac packages for Red Hat Enterprise Linux 5, 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0766.html
URL:rhn.redhat.com/errata/RHSA-2015-0767.html
19. Security Updates in SUSE (openSUSE-SU-2015:0636-1)
[01/04/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the SeaMonkey package of openSUSE 13.1 and 13.2. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges and execute arbitrary code.
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00036.html
20. Security Updates in Ubuntu GNU/Linux (USN-2553-1)
[01/04/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the LibTIFF package for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.ubuntu.com/usn/usn-2553-1/
21. Vulnerability in Cisco Unified Communications Manager
[31/03/2015] Vulnerability was identified in the Cisco Unified Communications Manager. An attacker could bypass security restriction and obtain sensitive information. This vulnerability affects version 9.1(2.10000.28) Base of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38079
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101885
22. Vulnerabilities in IBM Products (1697284, 1700029)
[31/03/2015] Vulnerabilities were identified in the IBM WebSphere Application Server and IBM Domino. An attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:www.ibm.com/support/docview.wss?uid=swg21697284
URL:www.ibm.com/support/docview.wss?uid=swg21700029
23. Vulnerabilities in F5 Products (SOL16317, SOL16319, SOL16320, SOL16323)
[31/03/2015] Vulnerabilities were identified in the F5 BIG-IP LTM, BIG-IP AAM, BIG-IP AFM, BIG-IP Analytics, BIG-IP APM, BIG-IP ASM, BIG-IP Edge Gateway, BIG-IP GTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP PSM, BIG-IP WebAccelerator, BIG-IP WOM and ARX. An attacker could bypass security restrictions, cause a denial of service condition and crash the system.. These vulnerabilities affect multiple versions of the mentioned products. Security patches are available to resolve these vulnerabilities.
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16317.html
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16319.html
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16320.html
URL:support.f5.com/kb/en-us/solutions/public/16000/300/sol16323.html
24. Vulnerability in ManageEngine Desktop Central (101866)
[31/03/2015] Vulnerability was identified in the ManageEngine Desktop Central. An attacker could bypass security restriction and reset the admin passwords. This vulnerability affects versions prior to Build 90135 of the mentioned product. Security patches are available to resolve this vulnerability.
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101866
25. Security Updates in Oracle Linux (ELSA-2015-0749, ELSA-2015-0750)
[31/03/2015] Oracle has released security update packages for fixing the vulnerabilities identified in the libxml2 and postgresql packages for Oracle Linux 6 and 7. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:linux.oracle.com/errata/ELSA-2015-0749.html
URL:linux.oracle.com/errata/ELSA-2015-0750.html
26. Security Updates in Debian (DSA-3209-1)
[31/03/2015] Debian has released security update packages for fixing the vulnerabilities identified in the openldap package for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3209
27. Security Updates in Mandriva (MDVSA-2015:084, MDVSA-2015:085, MDVSA-2015:086, MDVSA-2015:087, MDVSA-2015:088, MDVSA-2015:089, MDVSA-2015:090, MDVSA-2015:091, MDVSA-2015:092, MDVSA-2015:093, MDVSA-2015:094, MDVSA-2015:095, MDVSA-2015:096, MDVSA-2015:097, MDVSA-2015:098, MDVSA-2015:099, MDVSA-2015:100, MDVSA-2015:101, MDVSA-2015:102, MDVSA-2015:103, MDVSA-2015:104)
[31/03/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the tomcat, subversion, libssh, egroupware, udisks2, freetype2, libpng, mariadb, net-snmp, apache, nginx, openssh, stunnel, php-ZendFramework, curl, python-pillow, cups-filters, jbigkit, json-c, squid and elfutils packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A084/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A085/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A086/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A087/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A088/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A089/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A090/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A091/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A092/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A093/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A094/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A095/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A096/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A097/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A098/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A099/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A100/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A101/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A102/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A103/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A104/
28. Security Updates in Red Hat Enterprise Linux (RHSA-2015:0749-1, RHSA-2015:0750-1, RHSA-2015:0751-1, RHSA-2015:0752-1)
[31/03/2015] Red Hat has released security update packages for fixing the vulnerabilities identified in the libxml2 and postgresql packages for Red Hat Enterprise Linux 6 and 7, kernel-rt package for Red Hat Enterprise MRG 2.5, and openssl package for Red Hat Storage 2.1. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform XML External Entity attacks, cause a denial of service condition and compromise the system.
URL:rhn.redhat.com/errata/RHSA-2015-0749.html
URL:rhn.redhat.com/errata/RHSA-2015-0750.html
URL:rhn.redhat.com/errata/RHSA-2015-0751.html
URL:rhn.redhat.com/errata/RHSA-2015-0752.html
29. Security Updates in SUSE (SUSE-SU-2015:0630-1)
[31/03/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the MozillaFirefox packages of SUSE Linux Enterprise 12. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
30. Security Updates in Ubuntu GNU/Linux (USN-2551-1)
[31/03/2015] Ubuntu has released security update packages for fixing the vulnerability identified in the jakarta-taglibs-standard package for versions 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code and perform external XML entity attacks.
URL:www.ubuntu.com/usn/usn-2551-1/
31. Vulnerability in Cisco NX-OS Software
[30/03/2015] Vulnerability was identified in the Cisco NX-OS Software. An attacker could bypass security restriction, execute arbitrary code, perform code injection attacks and compromise the system. This vulnerability affects multiple versions of the mentioned product. Security patches are available to resolve this vulnerability.
URL:tools.cisco.com/security/center/viewAlert.x?alertId=38062
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101852
32. Vulnerability in SSL Certificate Authorities (VU#591120)
[30/03/2015] Vulnerability was identified in multiple SSL Certificate Authorities. An attacker could bypass security restrictions, obtain sensitive information and perform HTTPS spoofing attacks. This vulnerability affects multiple versions of the mentioned products.
URL:www.kb.cert.org/vuls/id/591120
33. Vulnerability in RC4 Algorithm (101851)
[30/03/2015] Vulnerability was identified in the RC4 algorithm used in the TLS protocol and SSL protocol. An attacker could obtain sensitive information. This vulnerability affects version 1.2 of the mentioned product.
URL:exchange.xforce.ibmcloud.com/#/vulnerabilities/101851
34. Security Updates in Debian (DSA-3205-1, DSA-3206-1, DSA-3207-1, DSA-3208-1)
[30/03/2015] Debian has released security update packages for fixing the vulnerabilities identified in the batik, dulwich, shibboleth-sp2 and freexl packages for multiple versions of Debian GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and crash the system.
URL:www.debian.org/security/2015/dsa-3205
URL:www.debian.org/security/2015/dsa-3206
URL:www.debian.org/security/2015/dsa-3207
URL:www.debian.org/security/2015/dsa-3208
35. Security Updates in Gentoo Linux (GLSA 201503-13)
[30/03/2015] Gentoo has released security update packages for fixing the vulnerabilities identified in the busybox package for multiple versions of Gentoo Linux. Due to multiple errors, an attacker could bypass security restrictions, execute arbitrary code, cause a denial of service condition and crash the system.
URL:security.gentoo.org/glsa/201503-13
36. Security Updates in Mageia (MGASA-2015-0116, MGASA-2015-0117, MGASA-2015-0118, MGASA-2015-0119, MGASA-2015-0120, MGASA-2015-0121)
[30/03/2015] Mageia has released security update packages for fixing the vulnerabilities identified in the setup, wireshark, dokuwiki, krb5, python-requests and drupal packages for multiple versions of Mageia. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, perform code injection and cross-site scripting attacks, cause a denial of service condition and crash the system.
URL:advisories.mageia.org/MGASA-2015-0116.html
URL:advisories.mageia.org/MGASA-2015-0117.html
URL:advisories.mageia.org/MGASA-2015-0118.html
URL:advisories.mageia.org/MGASA-2015-0119.html
URL:advisories.mageia.org/MGASA-2015-0120.html
URL:advisories.mageia.org/MGASA-2015-0121.html
37. Security Updates in Mandriva (MDVSA-2015:062, MDVSA-2015:063, MDVSA-2015:064, MDVSA-2015:065, MDVSA-2015:066, MDVSA-2015:067, MDVSA-2015:068, MDVSA-2015:069, MDVSA-2015:070, MDVSA-2015:071, MDVSA-2015:072, MDVSA-2015:073, MDVSA-2015:074, MDVSA-2015:075, MDVSA-2015:076, MDVSA-2015:077, MDVSA-2015:078, MDVSA-2015:079, MDVSA-2015:080, MDVSA-2015:081, MDVSA-2015:082, MDVSA-2015:083)
[30/03/2015] Mandriva has released security update packages for fixing the vulnerabilities identified in the openssl, cabextract, cpio, e2fsprogs, krb5, libvirt, libpng12, gnutls, openldap, python, python3, python-numpy, mutt, php, samba and samba4 packages for versions MBS1 and MBS2 of Mandriva GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A062/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A063/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A064/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A065/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A066/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A067/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A068/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A069/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A070/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A071/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A072/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A073/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A074/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A075/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A076/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A077/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A078/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A079/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A080/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A081/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A082/
URL:www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015%3A083/
38. Security Updates in SUSE (SUSE-SU-2015:0613-1, openSUSE-SU-2015:0614-1, SUSE-SU-2015:0620-1, SUSE-SU-2015:0593-2)
[30/03/2015] SUSE has released security update packages for fixing the vulnerabilities identified in the Xen, MySQL and MozillaFirefox packages of SUSE Linux Enterprise 10, 11 and 12, libXfont packages of openSUSE 13.1 and 13.2. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00031.html
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00033.html
URL:lists.opensuse.org/opensuse-security-announce/2015-03/msg00034.html
39. Security Updates in Ubuntu GNU/Linux (USN-2541-1, USN-2542-1, USN-2543-1, USN-2544-1, USN-2545-1, USN-2546-1, USN-2547-1, USN-2548-1, USN-2549-1)
[30/03/2015] Ubuntu has released security update packages for fixing the vulnerabilities identified in the linux, linux-ti-omap4, linux-lts-trusty, linux-lts-utopic, mono, batik and libarchive packages for versions 10.04 LTS, 12.04 LTS, 14.04 LTS and 14.10 of Ubuntu GNU/Linux. Due to multiple errors, an attacker could bypass security restrictions, obtain sensitive information, gain elevated privileges, execute arbitrary code, cause a denial of service condition and compromise the system.
URL:www.ubuntu.com/usn/usn-2541-1/
URL:www.ubuntu.com/usn/usn-2542-1/
URL:www.ubuntu.com/usn/usn-2543-1/
URL:www.ubuntu.com/usn/usn-2544-1/
URL:www.ubuntu.com/usn/usn-2545-1/
URL:www.ubuntu.com/usn/usn-2546-1/
URL:www.ubuntu.com/usn/usn-2547-1/
URL:www.ubuntu.com/usn/usn-2548-1/
URL:www.ubuntu.com/usn/usn-2549-1/
Subscribe to:
Posts (Atom)