openSUSE Security Update : MozillaThunderbird (openSUSE-2016-1195)

This update for Mozilla Thunderbird to version 45.4.0 fixes the following issues : - When using Thunderbird in a browser like context, for rendering HTML e-mail or feeds, it may be affected by vulnerabilities also fixed in Firefox ESR 45.4. MFSA 2016-86, boo999701 The following bugs were fixed in...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-1166)

This update for Mozilla Thunderbird to version 45.4.0 fixes the following issues : - When using Thunderbird in a browser like context, for rendering HTML e-mail or feeds, it may be affected by vulnerabilities also fixed in Firefox ESR 45.4. MFSA 2016-86, boo999701 The following bugs were fixed in...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

[SECURITY] Fedora 23 Update: zathura-pdf-mupdf-0.3.0-2.fc23

This plugin adds PDF support to zathura using the mupdf rendering engine...

[SECURITY] Fedora 24 Update: zathura-pdf-mupdf-0.3.0-2.fc24

This plugin adds PDF support to zathura using the mupdf rendering engine...

[SECURITY] Fedora 25 Update: zathura-pdf-mupdf-0.3.0-2.fc25

This plugin adds PDF support to zathura using the mupdf rendering engine...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P3-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. Testi...

CVE-2016-5275

Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering...

[SECURITY] Fedora 24 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc24

Provides rendering drivers for MIME data...

UBUNTU-CVE-2016-5275

Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering...

[SECURITY] Fedora 23 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc23

Provides rendering drivers for MIME data...

[SECURITY] Fedora 25 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc25

Provides rendering drivers for MIME data...

September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)

None None...

CVE-2016-5163

The CVE-2016-5163 issue affects Google Chrome’s bidirectional-text handling in the address bar (omnibox). Specifically, before Chrome 53.0.2785.89 on Windows/OS X and before 53.0.2785.92 on Linux, RTL Unicode text could cause the address bar to render URLs incorrectly, enabling spoofing via craft...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:2195-1)

Mozilla Firefox was updated to 45.3.0 ESR to fix the following issues bsc991809 : - MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards rv:48.0 / rv:45.3 - MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed - MFSA 2016-64/CVE-2016-2838...

Fedora 24 : webkitgtk4 (2016-4728dfe3ec)

This update addresses the following vulnerabilities : - CVE-2016-4622, CVE-2016-4624, CVE-2016-4591, CVE-2016-4590 Additional fixes : - Fix performance in accelerated compositing mode with the modesetting intel driver and DRI3 enabled. - Reduce the amount of file descriptors that the Web Process...

DLA-604-1 ruby-actionpack-3.2 - security update

Bulletin has no description...

[SECURITY] Fedora 24 Update: webkitgtk4-2.12.4-1.fc24

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...

RHEL 6 : kernel (RHSA-2016:1664)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Firefox, Chrome are caught: for the mainstream the browser's address fraud vulnerabilities-vulnerability warning-the black bar safety net

! Researcher Rafay Baloch yesterday disclosed the vulnerability details, he was in year 3, on Singapore's Black Hat Asia to do about the address bar spoofing of speech. The vulnerability principle Baloch in the personal web site said that the vulnerability of the main reason is that Chrome and...