Original release date: September 21, 2016
Drupal has released an advisory to address vulnerabilities in Drupal core 8.x versions prior to 8.1.10. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system.
Users and administrators are encouraged to review Drupal’s Security Advisory and apply the necessary update.
This product is provided subject to this Notification and this Privacy & Use policy.
Original release date: September 21, 2016
Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates:
This product is provided subject to this Notification and this Privacy & Use policy.
Multiple security issues have been found in the Mozilla Firefox web
browser: Multiple memory safety errors, buffer overflows and other
implementation errors may lead to the execution of arbitrary code or
information disclosure.
Several vulnerabilities were discovered in OpenSSL:
Multiple IBM Products CVE-2016-5945 Arbitrary File Upload Vulnerability
Multiple IBM Products CVE-2016-5947 Clickjacking Vulnerability
MuJS Multiple Heap Based Buffer Overflow Vulnerabilities
file ‘readelf.c’ Out-of-Bounds Read Vulnerability
A malicious sftp server may force a client-side relative path traversal in jsch’s implementation for recursive sftp-get allowing the server to write files outside the clients download basedir with effective permissions of the jsch sftp client process. Versions 0.1.53 and below are affected.
Red Hat Security Advisory 2016-1929-01 – The Red Hat Virtualization Manager is a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features including search capabilities, resource management, live migrations, and virtual infrastructure provisioning. The Manager is a JBoss Application Server application that provides several interfaces through which the virtual environment can be accessed and interacted with, including an Administration Portal, a User Portal, and a Representational State Transfer Application Programming Interface.