Updated openssl packages fix security vulnerabilities

Guido Vranken discovered that OpenSSL uses undefined pointer arithmetic CVE-2016-2177. Cesar Pereida, Billy Brumley and Yuval Yarom discovered a timing leak in the DSA code CVE-2016-2178. Quan Luo and the OCAP audit team discovered denial of service vulnerabilities in DTLS CVE-2016-2179,...

UBUNTU-CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

UBUNTU-CVE-2016-3634

The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...

DSA-3673-2 openssl - regression update

Bulletin has no description...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08117)

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Kernel is one of the kernel...

Debian DSA-3673-1 : openssl - security update

Several vulnerabilities were discovered in OpenSSL : - CVE-2016-2177 Guido Vranken discovered that OpenSSL uses undefined pointer arithmetic. Additional information can be found at https://www.openssl.org/blog/blog/2016/06/27/undefined-p ointer-arithmetic/ - CVE-2016-2178 Cesar Pereida, Billy...

Debian Security Advisory DSA 3673-1 (openssl - security update)

Several vulnerabilities were discovered in OpenSSL: CVE-2016-2177Guido Vranken discovered that OpenSSL uses undefined pointer arithmetic. Additional information can be found at https://www.openssl.org/blog/blog/2016/06/27/undefined-pointer-arithmetic/CVE-2016-2178 Cesar Pereida, Billy Brumley and...

DSA-3673-1 openssl - security update

Bulletin has no description...

Google Chrome V8 Arbitrary Memory Read Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. An arbitrary memory read vulnerability exists in V8 in versions of Google Chrome prior to 53.0.2785.113. An attacker can exploit this vulnerability to execute...

FreeBSD : chromium -- multiple vulnerabilities (653a8059-7c49-11e6-9242-3065ec8fd3ec)

Google Chrome Releases reports : Several security fixes in this release, including : - 641101 High CVE-2016-5170: Use after free in Blink.Credit to Anonymous - 643357 High CVE-2016-5171: Use after free in Blink. Credit to Anonymous - 616386 Medium CVE-2016-5172: Arbitrary Memory Read in v8. Credi...

chromium-browser: arbitrary memory read in v8

The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code...

Debian DSA-3667-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. - CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. - CVE-2016-5172 Choongwoo Han discovered an information leak in the v8...

[SECURITY] [DSA 3667-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3667-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 15, 2016 https://www.debian.org/security/faq -...

Security update for chromium (important)

Chromium was updated to 53.0.2785.113 to fix a number of security issues and bugs. The following vulnerabilities were fixed: - CVE-2016-5170: Use after free in Blink - CVE-2016-5171: Use after free in Blink - CVE-2016-5172: Arbitrary Memory Read in v8 - CVE-2016-5173: Extension resource access -...

Debian Security Advisory DSA 3667-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. CVE-2016-5172 Choongwoo Han discovered an information leak in the v8 javascript...

DSA-3667-1 chromium-browser - security update

Bulletin has no description...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: Several security fixes in this release, including: 641101 High CVE-2016-5170: Use after free in Blink.Credit to Anonymous 643357 High CVE-2016-5171: Use after free in Blink. Credit to Anonymous 616386 Medium CVE-2016-5172: Arbitrary Memory Read in v8. Credit to...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to read memory on the host machine

The vulnerability of the megasasdcmdcfgread function in the hw/scsi/megasas.c file of the hardware emulation software QEMU is related to the creation of a host adapter for the MegaRAID SAS 8708EM2 device. Exploiting this vulnerability allows an attacker to read memory from the host device by usin...

DEBIAN-CVE-2016-5105

The megasasdcmdcfgread function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface MFI command...

SUSE SLED12 / SLES12 Security Update : dosfstools (SUSE-SU-2016:2145-1)

dosfstools was updated to fix two security issues. These security issues were fixed : - CVE-2015-8872: The setfat function in fat.c in dosfstools might have allowed attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of...