Remote Code Execution Vulnerability in ThinkPHP 5

ThinkPHP is an open source PHP framework. A remote code execution vulnerability exists in ThinkPHP 5. ThinkPHP 5 is vulnerable to a remote code execution vulnerability due to unfiltering and improper use of sensitive functions when rendering template content. An attacker can exploit the...

[SECURITY] Fedora 23 Update: libass-0.13.4-1.fc23

Libass is a portable library for SSA/ASS subtitles rendering...

[SECURITY] Fedora 25 Update: libass-0.13.4-1.fc25

Libass is a portable library for SSA/ASS subtitles rendering...

[SECURITY] Fedora 24 Update: libass-0.13.4-1.fc24

Libass is a portable library for SSA/ASS subtitles rendering...

Libass Memory Overflow Vulnerability

libass is a lightweight library of functions for rendering subtitles in ASS/SSA format. A memory overflow vulnerability exists in Libass, which can be exploited by remote attackers to execute arbitrary code...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-1195)

This update for Mozilla Thunderbird to version 45.4.0 fixes the following issues : - When using Thunderbird in a browser like context, for rendering HTML e-mail or feeds, it may be affected by vulnerabilities also fixed in Firefox ESR 45.4. MFSA 2016-86, boo999701 The following bugs were fixed in...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-1166)

This update for Mozilla Thunderbird to version 45.4.0 fixes the following issues : - When using Thunderbird in a browser like context, for rendering HTML e-mail or feeds, it may be affected by vulnerabilities also fixed in Firefox ESR 45.4. MFSA 2016-86, boo999701 The following bugs were fixed in...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

[SECURITY] Fedora 23 Update: zathura-pdf-mupdf-0.3.0-2.fc23

This plugin adds PDF support to zathura using the mupdf rendering engine...

[SECURITY] Fedora 24 Update: zathura-pdf-mupdf-0.3.0-2.fc24

This plugin adds PDF support to zathura using the mupdf rendering engine...

[SECURITY] Fedora 25 Update: zathura-pdf-mupdf-0.3.0-2.fc25

This plugin adds PDF support to zathura using the mupdf rendering engine...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P3-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. Testi...

CVE-2016-5275

Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering...

[SECURITY] Fedora 24 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc24

Provides rendering drivers for MIME data...

UBUNTU-CVE-2016-5275

Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering...

[SECURITY] Fedora 23 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc23

Provides rendering drivers for MIME data...

[SECURITY] Fedora 25 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc25

Provides rendering drivers for MIME data...

September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)

None None...

CVE-2016-5163

The CVE-2016-5163 issue affects Google Chrome’s bidirectional-text handling in the address bar (omnibox). Specifically, before Chrome 53.0.2785.89 on Windows/OS X and before 53.0.2785.92 on Linux, RTL Unicode text could cause the address bar to render URLs incorrectly, enabling spoofing via craft...

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:2195-1)

Mozilla Firefox was updated to 45.3.0 ESR to fix the following issues bsc991809 : - MFSA 2016-62/CVE-2016-2835/CVE-2016-2836 Miscellaneous memory safety hazards rv:48.0 / rv:45.3 - MFSA 2016-63/CVE-2016-2830 Favicon network connection can persist when page is closed - MFSA 2016-64/CVE-2016-2838...