www/chromium -- multiple vulnerabilities

Google Chrome Releases reports: 4 security fixes in this release: 464922 High CVE-2015-1266: Scheme validation error in WebUI. Credit to anonymous. 494640 High CVE-2015-1268: Cross-origin bypass in Blink. Credit to Mariusz Mlynski. 497507 Medium CVE-2015-1267: Cross-origin bypass in Blink. Credit...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2015:1071-1)

The SUSE Linux Enterprise 12 kernel was updated to version 3.12.43 to receive various security and bugfixes. Following security bugs were fixed : - CVE-2014-3647: arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 did not properly perform RIP changes, which allowed gue...

RHEL 6 / 7 : openssl (RHSA-2015:1115)

Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

wpa_supplicant security update

CentOS Errata and Security Advisory CESA-2015:1090 An updated wpasupplicant package that fixes two security issues and adds one enhancement is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability...

Fedora 21 : armacycles-ad-0.2.8.3.3-1.fc21 (2015-9504)

Changes since 0.2.8.3.2 : - security fix: do not read ahead of the beginning of network buffer. - security fix: don't attribute network errors from processing random packets to the connection to the server - security fix: while at it, don't process random packets unless they may be important - fi...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1042-1)

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed : - CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 - CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

SUSE SLED12 / SLES12 Security Update : autofs (SUSE-SU-2015:1020-1)

autofs was updated to fix one security issue. This security issue was fixed : - CVE-2014-8169: Prevent potential privilege escalation via interpreter load path for program-based automount maps bnc917977. The update package also includes non-security fixes. See advisory for details. Note that...

Fedora 22 : python-tornado-3.2.2-1.fc22 (2015-9143)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2015:0974-1)

Apache2 updated to fix four security issues and one non-security bug. The following vulnerabilities have been fixed : - modheaders rules could be bypassed via chunked requests. Adds 'MergeTrailers' directive to restore legacy behavior. bsc871310, CVE-2013-5704 - An empty value in Content-Type cou...

openSUSE Security Update : Chromium (openSUSE-2015-390)

Chromium was updated to 43.0.2357.65 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-1251: Use-after-free in Speech boo931659 - CVE-2015-1252: Sandbox escape in Chrome boo931671 - CVE-2015-1253: Cross-origin bypass in DOM boo931670 - CVE-2015-1254:...

CakePHP 2.6.6 and 3.0.6 Released

CakePHP 2.6.6 and 3.0.6 Released The CakePHP core team is ready to announce the immediate availability of CakePHP 2.6.6 and 3.0.6. These are maintenance releases that contain important security fixes. Security Fixes Earlier this week we were notified that RequestHandlerComponent had a vulnerabili...

SUSE SLES10 Security Update : MozillaFirefox (SUSE-SU-2014:1458-3)

This version update of Mozilla Firefox to 31.2.0ESR brings improvements, stability fixes and also security fixes for the following CVEs : CVE-2014-1574, CVE-2014-1575, CVE-2014-1576 ,CVE-2014-1577, CVE-2014-1578, CVE-2014-1581, CVE-2014-1583, CVE-2014-1585, CVE-2014-1586 It also disables SSLv3 by...

SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:0805-1)

cups-filters was updated to fix one security issue. This security issue was fixed : - CVE-2015-2265: Remote command execution in removebadchars bnc921753. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2015:0068-1)

The SUSE Linux Enterprise 12 kernel was updated to 3.12.31 to receive various security and bugfixes. Security issues fixed: CVE-2014-9322: A local privilege escalation in the x8664 32bit compatibility signal handling was fixed, which could be used by local attackers to crash the machine or execut...

SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2014:0140-1)

The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to 3.0.101 and also includes various other bug and security fixes. A new feature was added : - supported.conf: marked net/netfilter/xtset as supported bnc851066fate313309 The following security bugs have been fixed : CVE-2013-4587:...

SUSE SLES10 Security Update : Mozilla Firefox (SUSE-SU-2014:0665-2)

This Mozilla Firefox update provides several security and non-security fixes. Mozilla Firefox has been updated to the 24.5.0esr version, which fixes the following issues : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 Out of bounds read while decodi...

SUSE SLED12 / SLES12 Security Update : Security Update for Linux Kernel (SUSE-SU-2015:0658-1)

The SUSE Linux Enterprise Server 12 kernel was updated to 3.12.39 to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-0777: The XEN usb backend could leak information to the guest system due to copying uninitialized memory. - CVE-2015-2150: Xen and the Linux...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2015:0529-1)

The SUSE Linux Enterprise 12 kernel was updated to 3.12.38 to receive various security and bugfixes. This update contains the following feature enablements : - The remote block device rbd and ceph drivers have been enabled and are now supported. FATE318350 These can be used e.g. for accessing the...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2014:1422-1)

OpenJDK was updated to icedtea 2.5.3 OpenJDK 7u71 fixing security issues and bugs. - Security : - S8015256: Better class accessibility - S8022783, CVE-2014-6504: Optimize C2 optimizations - S8035162: Service printing service - S8035781: Improve equality for annotations - S8036805: Correct linker...

SUSE SLES10 Security Update : kernel (SUSE-SU-2015:0812-1)

The SUSE Linux Enterprise 10 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs have been fixed : CVE-2015-2041: A information leak in the llc2timeouttable was fixed bnc919007. CVE-2014-9322: arch/x86/kernel/entry64.S in the Linux kernel did not...