Weekly Patch and Update Summary for Week of May 20, 2016

For all patches and updates listed below please use the appropriate updating methods for your system. It is advised that you patch and update your system as soon and possible.

Apple has released security updates for tvOS, iOS, watchOS, OS X El Capitan, Safari and iTunes.  Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.  For more information on these updates, please see:

• Security content of tvOS 9.2.1
• Security content of iOS 9.3.2
• Security content of watchOS 2.2.1
• Security content of OS X El Capitan v10.11.5 and Security Update 2016-003
• Security content of Safari 9.1.1
• Security content of iTunes 12.4

Cisco has released security updates to address vulnerabilities in it’s Web Security Appliance software.  Exploitation of these vulnerabilities could cause a denial-of-service-condition on an affected system.  For more information, please see:

• Cisco Web Security Appliance HTTP POST – Denial of Service Vulnerability
• Cisco Web Security Appliance Cached Range Request – Denial of Service Vulnerability
• Cisco Web Security Appliance HTTP Length – Denial of Service Vulnerability
• Cisco Web Security Appliance Connection – Denial of Service Vulnerability

Symantec has released Anti-Virus Engine 20151.1.1.4 to address a vulnerability in Symantec Antivirus products.  Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.  For more information please see SYM16-008.

Canonical has released many security updates for their operating system Ubuntu.  For more information please see Ubuntu Security Notices

List of Updates:

• USN-2950-4: Samba regressions
• USN-2983-1: Expat vulnerability
• USN-2982-1: Libksba vulnerabilities
• USN-2981-1: libarchive vulnerabilities
• USN-2980-1: libndp vulnerability
• USN-2979-4: Linux kernel (Qualcomm Snapdragon) vulnerability
• USN-2979-3: Linux kernel (Raspberry Pi 2) vulnerability
• USN-2979-2: Linux kernel (Xenial HWE) vulnerabilities
• USN-2979-1: Linux kernel vulnerabilities
• USN-2978-3: Linux kernel (Raspberry Pi 2) vulnerability
• USN-2978-2: Linux kernel (Wily HWE) vulnerabilities
• USN-2977-1: Linux kernel (Vivid HWE) vulnerability
• USN-2976-1: Linux kernel (Utopic HWE) vulnerability
• USN-2975-2: Linux kernel (Trusty HWE) vulnerability
• USN-2975-1: Linux kernel vulnerability