[slackware-security] openssl

New openssl packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/openssl-1.0.1p-i486-1slack14.1.txz: Upgraded. This update fixes the following security issue: Alternative chains certificate...

CVE-2015-1793

The CVE-2015-1793 entry concerns OpenSSL’s X509_verify_cert in crypto/x509/x509_vfy.c, affecting OpenSSL 1.0.1n/o and 1.0.2b/c, where Basic Constraints cA values are mishandled when identifying alternative certificate chains. This could allow a remote attacker to spoof a Certification Authority r...

Critical OpenSSL Flaw Allows Hackers to Impersonate Any Trusted SSL Certificate

The mysterious security vulnerability in the widely used OpenSSL code library is neither HeartBleed nor FREAK, but it’s critical enough to be patched by sysadmins without any delay. OpenSSL Foundation released the promised patch against a high severity vulnerability in OpenSSL versions 1.0.1n and...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt4

July 9, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt4 - Fixed CVE-2015-1793...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt3.M70P.1

1.0.1k-alt3.M70P.1 built July 9, 2015 Gleb Fotengauer-Malinovskiy in task 146215 July 9, 2015 Gleb Fotengauer-Malinovskiy - Backported to p7 branch security: CVE-2015-1793...

CVE-2015-1793 OpenSSL "Alternative Chains Certificate Forgery"

...

Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt4

July 9, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt4 - Fixed CVE-2015-1793...

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt4

July 9, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt4 - Fixed CVE-2015-1793...

CVE-2011-1793

rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted SVG document that leads to a "stale pointer."...

CVE-2011-1793

CVE-2011-1793 affects Google Chrome (WebKit/WebCore) via the SVG handling path in RenderSVGResourceFilter.cpp. A crafted SVG document can trigger a crash or unspecified impact due to a stale pointer, in Chrome versions prior to 11.0.696.65. Affected component: WebCore/RenderSVGResourceFilter.cpp....

openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)

The browser engine libwebkit was updated to version 1.2.4 to fix several security bugs. CVE-2010-1781, CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792, CVE-2010-1793, CVE-2010-2648 %NASLMINLEVEL 70300 C Tenable Network Security,...

Ubuntu: Security Advisory (USN-1793-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-1793-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN17931.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for linux USN-1793-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64

Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...

CVE-2012-1793: PCWELT PcwRunAsGui and PcwRunAs information disclosure

The CVE-2012-1793 entry concerns PC-Welt’s PcwRunAsGui and PcwRunAs. A design flaw in the password obfuscation allows a local attacker to recover or decrypt passwords encrypted by pcwRunAsGui.exe, effectively exposing sensitive credentials from the RunAs workflow. The PacketStorm entry classifies...

PcwRunAs 0.4 Password Obfuscation Design Flaw

Vuln Title: PcwRunAs Password Obfuscation Design Flaw Date: 26.03.2012 Author: Christian Landström, otr Software Link: http://www.pcwelt.de/downloads/pcwRunAs-1215998.html Version: = 0.4 Tested on: Windows CVE : CVE-2012-1793 Risk: high Type: Privilege Escalation Vendor: PC-Welt Timeline:...

Fedora Update for webkitgtk FEDORA-2011-0121

Check for the Version of webkitgtk OpenVAS Vulnerability Test Fedora Update for webkitgtk FEDORA-2011-0121 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for webkitgtk FEDORA-2010-15982

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for webkitgtk FEDORA-2010-15957

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : webkitgtk-1.2.4-1.fc12 (2010-14419)

Update to 1.2.4 which fixes: CVE-2010-1780 CVE-2010-1782 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 CVE-2010-2648 Update to 1.2.3 which fixes: CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417...