[slackware-security] mozilla-nss

New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-nss-3.23-i486-1slack14.1.txz: Upgraded. Upgraded to nss-3.23 and nspr-4.12. This release contains security fixes a...

Fedora 23 : libxmp-4.3.10-1.fc23 (2016-64c69ec297)

Latest stable release from upstream. Includes: Fixes for bugs reported by Coverity Scan Fixes for problems caused by fuzz files reported by Jonathan Neuschafer Other changes Full upstream changelog: https://sourceforge.net/projects/xmp/files/libxmp/4.3.10/Changelog/vie w Note that Tenable Network...

Fedora 23 : owncloud-8.0.10-1.fc23 (2016-a576196426)

This update provides the new upstream patch release of ownCloud 7.0.12 for EPEL 6, 8.0.10 for all other distributions. It also adds a 'well-known' redirect for WebDAV alongside the existing ones for CalDAV and CardDAV - if you don't know what this is, don't worry. These are bugfix updates which...

DSA-3506-1 libav - security update

Bulletin has no description...

WordPress ALO EasyMail Newsletter 2.6.01 CSRF

Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability Software Link: https://wordpress.org/plugins/alo-easymail/ Affected Version: 2.6.01 Exploit Author: Mohsen Lotfi Contact: [email protected] Twitter: foxonefoxone Date: 01-16-2016 1. Descripti...

WordPress ALO EasyMail NewsLetter 2.6.01 Plugin - Cross-Site Request Forgery

Exploit for php platform in category web applications Exploit Title: Wordpress ALO EasyMail Newsletter plugin cross-site request forgery vulnerability Software Link: https://wordpress.org/plugins/alo-easymail/ Affected Version: 2.6.01 Exploit Author: Mohsen Lotfi Contact: email protected Twitter:...

Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: The php package has been updated to version 5.6.18, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...

Updated php packages fix security vulnerability

The php package has been updated to version 5.6.17, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...

MGASA-2016-0024 Updated php packages fix security vulnerability

The php package has been updated to version 5.6.17, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...

Updated openvpn packages fix security vulnerability

OpenVPN versions before 2.3.9 contain an out of bounds read error in resolveremote in the file socket.c. With both IPv4 and IPv6 connections, OpenVPN will read a struct sockaddrin6, but in the IPv4 case the data structure is smaller than in the IPv6 case. The openvpn package has been updated to...

WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability

WordPress PDF and Print plugin version 1.7.4 suffers from a cross site scripting vulnerability. WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability Plugin Name : PDF & Print Effected Version : 1.7.4 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS...

WordPress Contact Form To DB 1.4.0 Cross Site Scripting

Plugin Name : Contact Form To DB Effected Version : 1.4.0 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following field put the payloa...

WordPress Quotes And Tips 1.19 Cross Site Scripting

Plugin Name : Quotes and Tips Effected Version : 1.19 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the payload a...

WordPress NextGEN Gallery 2.0.66.16 Cross Site Scripting

Plugin Name : NextGEN Gallery Effected Version : 2.0.66.16 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...

WordPress Twitter 2.37 Cross Site Scripting

Effected Version : 2.36 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : In the following fields put the payload as below...

WordPress User Role 1.4.1 Cross Site Scripting

Plugin Name : User Role Effected Version : 1.4.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : In the following field put the payload as...

OracleVM 2.2 : xen (OVMSA-2015-0151)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix-up bad changelog dates - guard against undue super page PTE creation XSA-148 Jan Beulich %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from...

WordPress Calls To Action 2.4.3 Cross Site Scripting Vulnerability

WordPress Calls to Action plugin version 2.4.3 suffers from a cross site scripting vulnerability. Product: Calls to Action WordPress plugin Vendor: InboundNow Vulnerable Versions: 2.4.3 and probably prior Tested Version: 2.4.3 Advisory Publication: October 7, 2015 without technical details Vendor...

WordPress Gwolle Guestbook 1.5.3 Remote File Inclusion

Advisory ID: HTB23275 Product: Gwolle Guestbook WordPress Plugin Vendor: Marcel Pol Vulnerable Versions: 1.5.3 and probably prior Tested Version: 1.5.3 Advisory Publication: October 14, 2015 without technical details Vendor Notification: October 14, 2015 Vendor Patch: October 16, 2015 Public...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 4.1.13 longterm kernel and fixes the following security issues: The virtnetprobe function in drivers/net/virtionet.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause...