SECURITY

No Image

RHSA-2015:2594-1: Moderate: libpng security update

2015-12-10 KENNETH 0

Red Hat Enterprise Linux: Updated libpng packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. CVE-2015-7981, CVE-2015-8126, CVE-2015-8472 Source: rhn-errata

No Image

MS15-058 – Important: Vulnerabilities in SQL Server Could Allow Remote Code Execution (3065718) – Version: 1.2

2015-12-09 KENNETH 0

Severity Rating: ImportantRevision Note: V1.2 (December 9, 2015): Bulletin revised to clarify the product version guidance in the Update FAQ section by aligning it with the guidance provided in earlier releases. This is an informational change only. Customers who have already successfully installed the update do not need to take any action.Summary: This security update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow remote code execution if an authenticated attacker runs a specially crafted query that is designed to execute a virtual function from a wrong address, leading to a function call to uninitialized memory. To exploit this vulnerability an attacker would need permissions to create or modify a database. Source: ms-security

No Image

December 2015 Security Update Release Summary

2015-12-09 KENNETH 0

Today we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security TechNet Library.  MSRC Team Source: ms-msrc