Firefox 37 arrives with Opportunistic Encryption support

Mozilla has rolled out the latest Version 37 of its Firefox browser for Windows desktop, Mac, Linux and Android operating systems. The new release also adds patches for 13 different security advisories along with some new security improvements as well as user-experience features. The biggest...

Mail.ru: e.mail.ru stored XSS in agent via sticker (smile)

Привет : смотрим скриншот : XSS в сообщениях агента с помощью стикера смайла. Отправка меседжа со стикером и XSS выглядит так: POST https://jim45.mail.ru/message?session=48280&r=18426&sdc=1 HTTP/1.1 Accept: / Content-Type: application/x-www-form-urlencoded X-Requested-With: XMLHttpRequest Referer...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2015-44 Certificate verification bypass through the HTTP/2 Alt-Svc header MFSA 2015-43 Loading privileged content through Reader mode...

Certificate verification bypass through the HTTP/2 Alt-Svc header — Mozilla

Security researcher Muneaki Nishimura discovered a flaw in the Mozilla's HTTP Alternative Services implementation. If an Alt-Svc header is specified in the HTTP/2 response, SSL certificate verification can be bypassed for the specified alternate server. As a result of this, warnings of invalid SS...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1.M70P.1

1.0.1k-alt1.M70P.1 built March 20, 2015 Gleb Fotengauer-Malinovskiy in task 142055 March 19, 2015 Gleb Fotengauer-Malinovskiy - Backported to p7 branch security: CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt2

March 19, 2015 Gleb Fotengauer-Malinovskiy 1.0.1k-alt2 - Fixed CVE-2015-0209, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt42

3:11-alt42 built March 13, 2015 Sergey V Turchin in task 141821 March 13, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt42

3:11-alt42 built March 13, 2015 Sergey V Turchin in task 141820 --- March 13, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342...

Concrete CMS: Stored XSS in Image Alt. Text

XSS payload can be executed and saved permanently in Image Alt. Text. Poc Code: "click me!"...

Security fix for the ALT Linux 6 package samba version 3.5.22-alt0.M60P.1

3.5.22-alt0.M60P.1 built Feb. 24, 2015 Andrey Cherepanov in task 140944 Feb. 23, 2015 Andrey Cherepanov - 3.5.22 + fixes CVE-2015-0240 security flaw in the smbd file server daemon...

Security fix for the ALT Linux 8 package samba version 4.1.17-alt1

Feb. 23, 2015 Anton V. Boyarshinov 4.1.17-alt1 - 4.1.17 - CVE-2015-0240 fixed...

Security fix for the ALT Linux 10 package samba version 4.1.17-alt1

Feb. 23, 2015 Andrey Cherepanov 4.1.17-alt1 - New version - Security fixes: + fixes CVE-2015-0240 security flaw in the smbd file server daemon...

Security fix for the ALT Linux 8 package samba-DC version 4.1.17-alt1

Feb. 23, 2015 Andrey Cherepanov 4.1.17-alt1 - New version - Security fixes: + fixes CVE-2015-0240 security flaw in the smbd file server daemon...

Security fix for the ALT Linux 8 package libvirt version 1.2.12-alt1

Feb. 11, 2015 Alexey Shabalin 1.2.12-alt1 - 1.2.12 - fixed CVE-2015-0236...

Security fix for the ALT Linux 8 package krb5 version 1.13-alt3

Feb. 8, 2015 Ivan A. Melnikov 1.13-alt3 - fix for MITKRB5-SA-2015-001 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423...

Security fix for the ALT Linux 9 package krb5 version 1.13-alt3

Feb. 8, 2015 Ivan A. Melnikov 1.13-alt3 - fix for MITKRB5-SA-2015-001 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423...

Security fix for the ALT Linux 7 package krb5 version 1.13-alt3

Feb. 8, 2015 Ivan A. Melnikov 1.13-alt3 - fix for MITKRB5-SA-2015-001 CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41

3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...