Weekly Patch and Update Summary for Week of April 8, 2016

For all patches and updates listed below please use the appropriate updating methods for your system. It is advised that you patch and update your system as soon and possible.

Adobe released a security update to address multiple vulnerabilities in Flash Player. These vulnerabilities could allow an attacker to take control of a system. For more information please see APSB16-10.

Juniper released ScreenOS version 6.3.0r.22 to address encryption method issues. For more information please see Juniper Networks Completes ScreenOS Update.

Cisco has released updates for multiple products to address multiple vulnerabilities:

• Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability
• Vulnerability in GNU glibc Affecting Cisco Products: February 2016
• Cisco IOS XR Software SCP and SFTP Modules Denial of Service Vulnerability
• Cisco Prime Infrastructure and Evolved Programmable Network Manager Privilege Escalation API Vulnerability
• Cisco UCS Invicta Default SSH Key Vulnerability
• Cisco TelePresence Server Crafted URL Handling Denial of Service Vulnerability
• Cisco TelePresence Server Crafted IPv6 Packet Handling Denial of Service Vulnerability
• Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability
• Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability
• Cisco Videoscape Distribution Suite for Internet Streaming TCP Session Handling Denial of Service Vulnerability
• Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability

Google has made updates to their Safe Browsing Alerts for Network Administrators tool. They have added more information to their alerts. This information includes: URLs related to Unwanted Software, Malicious Software, and Social Engineering. For more information please see Improvements to Safe Browsing Alerts for Network Administrators

Canonical also released many security updates for their operating system Ubuntu. For more information please see Ubuntu security notices.

Below is the list of updates:

• USN-2917-2: Firefox regressions
• USN-2949-1: Linux kernel (Vivid HWE) vulnerabilities
• USN-2948-1: Linux kernel (Utopic HWE) vulnerabilities
• USN-2947-3: Linux kernel (Raspberry Pi 2) vulnerabilities
• USN-2947-2: Linux kernel (Wily HWE) vulnerabilities
• USN-2947-1: Linux kernel vulnerabilities
• USN-2946-2: Linux kernel (Trusty HWE) vulnerabilities
• USN-2946-1: Linux kernel vulnerabilities
• USN-2945-1: XChat-GNOME vulnerability
• USN-2944-1: Libav vulnerabilities