Apple Releases Security Updates for OS X Server, iTunes, Xcode, and iOS

Apple has released security updates for OS X Server, iTunes, Xcode, and iOS to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: OS X Server v5.0.3 for OS X Yosemite v10.10....

Apple Caching Service Detection (OS X Server)

Binary data 8850.prm...

Apple Time Machine Server Detection (OS X Server)

Binary data 8851.prm...

libXfont: crash on invalid read in bdfReadCharacters

A NULL pointer dereference flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server...

APPLE-SA-2015-08-13-4 OS X Server v4.1.5

APPLE-SA-2015-08-13-4 OS X Server v4.1.5 OS X Server v4.1.5 is now available and addresses the following: BIND Available for: OS X Yosemite v10.10.5 or later Impact: A remote attacker may be able to cause a denial of service Description: An assertion issue existed in the handling of TKEY packets...

Apple Mac OS X / OS X Server multiple security vulnerabilities

Over 150 different vulnerabilities in system components and libraries...

Mac OS X : OS X Server < 4.1.5 BIND DoS

The remote Mac OS X host has a version of OS X Server installed that is prior to 4.1.5. It is, therefore, affected by a denial of service vulnerability due to an assertion flaw that occurs when handling TKEY queries. A remote attacker can exploit this, via a specially crafted request, to cause a...

Apple Releases Security Updates for OS X Server, iOS, Safari, and Yosemite

Apple has released security updates for OS X Server, iOS, Safari, and Yosemite to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: iOS 8.4.1 for iPhone 4s and later, iPod...

SUSE-SU-2015:1127-1 Security update for xorg-x11-server

The X Server was updated to fix 1 security issues and 4 bugs: Security issues: - CVE-2015-3418: Fixed a regression introduced by CVE-2014-8092 in PutImage that caused crashes when called with 0 height bnc928520. Bugs fixed: - Xephyr: Don't crash when no command line argument is specified The DDX...

GLSA-201504-06 : X.Org X Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201504-06 X.Org X Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute...

X.Org X Server 'ProcPutImage()' Function Denial of Service Vulnerability

X.Org Server is the official reference implementation of the X Window System, which is open source free software. X.Org X Server has a denial of service vulnerability in the implementation of the 'ProcPutImage' function. An attacker can exploit the vulnerability to cause an application crash...

DLA-120-2 xorg-server - regression update

Bulletin has no description...

Unspecified Vulnerability in Apple OS X Server Firewall Component

Apple OS X Server is a set of Unix-based server operating software from the U.S. company Apple Apple. The software enables file sharing, meeting scheduling, web hosting, network remote access, etc. Firewall is one of the firewall components. A security vulnerability exists in the Firewall compone...

DLA-210-1 qt4-x11 - security update

Bulletin has no description...

CVE-2015-1151

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client...

CVE-2015-1150

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended...

Design/Logic Flaw

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client...

CVE-2015-1150

CVE-2015-1150 affects Apple OS X Server before 4.1, where the Firewall component uses an incorrect pathname in configuration files. This allows remote attackers to bypass network-access restrictions by sending packets intended for a blocked custom rule. Affected product: Apple OS X Server prior t...

CVE-2015-1151

CVE-2015-1151 affects Apple OS X Server prior to 4.1. The Wiki Server component is vulnerable such that a remote attacker can bypass access restrictions on Activity and People pages by connecting from an iPad client. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network attack vec...

CVE-2015-1150

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended...