openSUSE Security Update : wireshark (openSUSE-2016-301)

Wireshark was updated to 1.12.10, fixing a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file, specifically : - CVE-2016-2523: DNP dissector...

Fedora 23 : php-5.6.18-1.fc23 (2016-46a34efa06)

04 Feb 2016, PHP 5.6.18 Core: Fixed bug php71039 exec functions ignore length but look for NULL termination. Anatol Fixed bug php71089 No check to duplicate zendextension. Remi Fixed bug php71201 round segfault on 64-bit builds. Anatol Added support for new HTTP 451 code. Julien Fixed bug php7127...

Fedora 22 : php-symfony-2.7.7-2.fc22 / php-twig-1.23.1-2.fc22 (2015-0b89738311)

Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...

Fedora 22 : libxmp-4.3.10-1.fc22 (2016-8f950932c1)

Latest stable release from upstream. Includes: Fixes for bugs reported by Coverity Scan Fixes for problems caused by fuzz files reported by Jonathan Neuschafer Other changes Full upstream changelog: https://sourceforge.net/projects/xmp/files/libxmp/4.3.10/Changelog/vie w Note that Tenable Network...

Fedora 22 : php-5.6.18-1.fc22 (2016-1bc6ca8445)

04 Feb 2016, PHP 5.6.18 Core: Fixed bug php71039 exec functions ignore length but look for NULL termination. Anatol Fixed bug php71089 No check to duplicate zendextension. Remi Fixed bug php71201 round segfault on 64-bit builds. Anatol Added support for new HTTP 451 code. Julien Fixed bug php7127...

Fedora 22 : claws-mail-3.13.1-4.fc22 (2015-3a073171c3)

Update from 3.12.0 to 3.13.1 for bug-fixes. Includes security fix for CVE-2015-8614. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 23 : wordpress-4.4.1-1.fc23 (2016-21f5261525)

WordPress 4.4.1 Security and Maintenance Release WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site to be compromised. This was reported by Crtc4L. There were also several non-security bug fixes: Emoji support has been updated to includ...

Fedora 23 : libxmp-4.3.10-1.fc23 (2016-64c69ec297)

Latest stable release from upstream. Includes: Fixes for bugs reported by Coverity Scan Fixes for problems caused by fuzz files reported by Jonathan Neuschafer Other changes Full upstream changelog: https://sourceforge.net/projects/xmp/files/libxmp/4.3.10/Changelog/vie w Note that Tenable Network...

Fedora 22 : claws-mail-3.13.2-1.fc22 (2016-b211281b8e)

Update from 3.13.1 to 3.13.2 for bug-fixes. Includes security fix for CVE-2015-8708. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 22 : php-5.6.17-1.fc22 (2016-5207e0c1a1)

07 Jan 2016, PHP 5.6.17 Core: Fixed bug php66909 configure fails utf8tomutf7 test. Michael Orlitzky Fixed bug php70958 Invalid opcode while using ::class as trait method paramater default value. Laruence Fixed bug php70957 self::class can not be resolved with reflection for abstract class. Laruen...

Fedora 22 : roundcubemail-1.1.4-2.fc22 (2015-431d39fbff)

Release 1.1.4 - Add workaround for https://bugs.php.net/bug.php?id=70757 1490582 - Fix duplicate messages in list and wrong count after delete 1490572 - Fix so Installer requires PHP5 - Make brute-force attacks harder by re-generating security token on every failed login 1490549 - Slow down brute...

Fedora 22 : wordpress-4.4.2-1.fc22 (2016-9d0a25ea07)

WordPress 4.4.2 Security and Maintenance Release WordPress 4.4.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.4.1 and earlier are affected by two security issues: a possible SSRF for...

Fedora 21 : php-horde-horde-5.2.8-1.fc21 / php-horde-imp-6.2.11-1.fc21 / php-horde-ingo-3.2.7-1.fc21 / etc (2015-a381facfd9)

horde 5.2.8 mjr SECURITY: Protect against CSRF attacks on various admin pages. jan Don't apply access keys to checkbox and radiobox rows in the sidebar Bug 14103. jan Send correct MIME type for non-statically cached JavaScript files. mjr Added configuration support for version 2 of...

Fedora 23 : libpng10-1.0.64-1.fc23 (2015-1d87313b7c)

An out-of-bounds read in pngconverttorfc1123 in png.c could potentially be exploited by a crafted PNG file to leak information from an application's memory CVE-2015-7981. Buffer overflow vulnerabilities in functions pnggetPLTE/pngsetPLTE, allowing remote attackers to cause DoS to application or...

Fedora 22 : wordpress-4.4.1-1.fc22 (2016-4c8956da04)

WordPress 4.4.1 Security and Maintenance Release WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site to be compromised. This was reported by Crtc4L. There were also several non-security bug fixes: Emoji support has been updated to includ...

Fedora 22 : libpng10-1.0.64-1.fc22 (2015-ec2ddd15d7)

An out-of-bounds read in pngconverttorfc1123 in png.c could potentially be exploited by a crafted PNG file to leak information from an application's memory CVE-2015-7981. Buffer overflow vulnerabilities in functions pnggetPLTE/pngsetPLTE, allowing remote attackers to cause DoS to application or...

Fedora 23 : libxml2-2.9.3-1.fc23 (2015-c24af963a2)

Very large set of security issues for libxml2 and a bunch of bug fixes tooCVE-2015-8242 CVE-2015-7500 CVE-2015-7499 CVE-2015-5312 CVE-2015-7498 CVE-2015-7497 CVE-2015-1819 CVE-2015-7941 CVE-2015-7942 CVE-2015-8035 Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : php-5.6.14-1.fc23 (2015-f82917c70c)

01 Oct 2015, PHP 5.6.14 Core: Fixed bug php70370 Bundled libtool.m4 doesn't handle FreeBSD 10 when building extensions. Adam CLI server: Fixed bug php68291 404 on urls with '+'. cmb DOM: Fixed bug php70001 Assigning to DOMNode::textContent does additional entity encoding. cmb Mysqlnd: Fixed bug...

Fedora 23 : wordpress-4.4.2-1.fc23 (2016-b61929db9e)

WordPress 4.4.2 Security and Maintenance Release WordPress 4.4.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.4.1 and earlier are affected by two security issues: a possible SSRF for...

OpenSSL CVE-2 0 1 6-0 8 0 0 and CVE-2 0 1 6-0 7 0 3 bug fixes the details of pick-up fun-vulnerability warning-the black bar safety net

! /Article/UploadPic/2016-3/201633103039309.jpg by 3 6 0 information security unit－ au2o3t@3 6 0 CloudSec Team 1. Primer Have been recently and 3 6 0 Nirvan Team DQ430 happy to participate in a encryption vendors of the annual General meeting, the results of openssl is also out of touch lively,...