FreeBSD : roundcube -- multiple vulnerabilities (038a5808-24b3-11e5-b0c8-bf4d8935d4fa)

Roundcube reports : We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially i...

CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)

Dear readers, we just fixed a recently reported vulnerability in Apache Jackrabbit's WebDAV module; see - the attached CVE report - patches for all currently maintained Jackrabbit branches We just released Jackrabbit 2.10.1 see below and we'll get to the other branches shortly. Check the CVE for...

SUSE SLES12 Security Update : docker (SUSE-SU-2015:0984-1)

The Linux container runtime environment Docker was updated to version 1.6.2 to fix several security and non-security issues. - Security : - Fix read/write /proc paths. CVE-2015-3630 - Prohibit VOLUME /proc and VOLUME /. CVE-2015-3631 - Fix opening of file-descriptor 1. CVE-2015-3627 - Fix symlink...

roundcube -- multiple vulnerabilities

Roundcube reports: We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially in...

Tails 1.4 - The Amnesic Incognito Live System

Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity , and helps you to: use the Internet anonymously and circumvent censorship ; all connections to the Internet are forced to go through the...

Fedora 21 : clamav-0.98.7-1.fc21 (2015-7334)

ClamAV 0.98.7 ============= This release contains new scanning features and bug fixes. - Improvements to PDF processing: decryption, escape sequence handling, and file property collection. - Scanning/analysis of additional Microsoft Office 2003 XML format. - Fix infinite loop condition on crafted...

[SECURITY] Fedora 21 Update: mksh-50f-1.fc21

mksh is the MirBSD enhanced version of the Public Domain Korn shell pdksh, a bourne-compatible shell which is largely similar to the original AT&T Korn shell. It includes bug fixes and feature improvements in order to produce a modern, robust shell good for interactive and especially script use,...

[SECURITY] Fedora 20 Update: mksh-50f-1.fc20

mksh is the MirBSD enhanced version of the Public Domain Korn shell pdksh, a bourne-compatible shell which is largely similar to the original AT&T Korn shell. It includes bug fixes and feature improvements in order to produce a modern, robust shell good for interactive and especially script use,...

Release Notes for Veeam Backup & Replication 8.0 Update 2b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 8.0 Update 2b Cause Please confirm you are running version 8.0.0.807, 8.0.0.817, 8.0.0.831, 8.0.0.917, 8.0.0.201...

[SECURITY] Fedora 22 Update: mksh-50f-1.fc22

mksh is the MirBSD enhanced version of the Public Domain Korn shell pdksh, a bourne-compatible shell which is largely similar to the original AT&T Korn shell. It includes bug fixes and feature improvements in order to produce a modern, robust shell good for interactive and especially script use,...

Fedora 21 : perl-DBD-Firebird-1.19-1.fc21 (2015-5552)

DBD::Firebird 1.19 2015-03-22 =============================== - Fix $VERSION in Firebird.pm - Fix typo in ISCPASSWORD spelling - Positive logic and early return - Allow re-executing/fetch on prepared sth RT92810, Tux - Add rests for $dbh-Name and others - Implement $dbh-Name - Fix attributions to...

SUSE-SU-2015:0688-1 Security update for webkitgtk

This update fixes the following security issues: - Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes:...

Debian DLA-58-3 : apt robustness improvements

The recent security updates to apt make apt bug 710924 1 much easier to trigger. Affected users see '416 Requested Range Not Satisfiable' errors during a apt-get update operation. With the 0.8.10.3+squeeze7 upload the fix for this error that was originally introduced in version 0.9.12 2 is now...

Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20150305)

It was found that LibreOffice documents executed macros unconditionally, without user approval, when these documents were opened using LibreOffice. An attacker could use this flaw to execute arbitrary code as the user running LibreOffice by embedding malicious VBA scripts in the document as macro...

CentOS 7 : libabw / libcmis / libetonyek / libfreehand / liblangtag / libmwaw / libodfgen / etc (CESA-2015:0377)

Updated libreoffice packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...

SUSE-SU-2015:0660-1 Security update for haproxy

This security update for haproxy provides version 1.5.4 with various fixes, improvements and one security fix. Update from version 1.4.24 to 1.5.4 = For a detailed description, please refer to the package changelog. Security Issues: CVE-2014-6269...

SUSE-RU-2015:0611-1 Recommended update for SUSE Manager Server 2.1

This collective update for SUSE Manager Server 2.1 provides the following new features: Connect SUSE Manager to the SUSE Customer Center. Manage SLE12 systems. ISS: export/import information about cloned channels to support Service Pack migration on ISS slaves. FATE317789 New API calls:...

SUSE-SU-2015:0371-1 Security update for Samba

Samba has been updated to fix one security issue: CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed: Realign the winbind request structure following requiremembershipof field expansion bnc913001. Reuse connections...

Security update for java-1_7_0-openjdk (important)

OpenJDK was updated to 2.5.4 - OpenJDK 7u75 to fix security issues and bugs: Security fixes - S8046656: Update protocol support - S8047125, CVE-2015-0395: ref More phantom object references - S8047130: Fewer escapes from escape analysis - S8048035, CVE-2015-0400: Ensure proper proxy protocols -...

Apple Releases iOS 8.1.3

Apple has rolled out iOS 8.1.3 for iPhone, iPod touch and iPad devices, after weeks of extensive testing. The iOS 8.1.3 update contains bug fixes, stability enhancements and performance improvements. Among the new features, it reduces the amount of storage space required to perform a software...