FreeBSD : chromium -- multiple vulnerabilities (7cf25a0c-d031-11e3-947b-00262d5ed8ee)

Google Chrome Releases reports belatedly : 9 security fixes in this release, including : - 354967 High CVE-2014-1730: Type confusion in V8. Credit to Anonymous. - 349903 High CVE-2014-1731: Type confusion in DOM. Credit to John Butler. - 359802 High CVE-2014-1736: Integer overflow in V8. Credit t...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-24.5.0-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

Fedora 20 : ansible-1.5.5-1.fc20 (2014-5407)

Update to 1.5.5. 2 minor security fixes in the apt and vault modules. https://github.com/ansible/ansible/blob/release1.5.4/CHANGELOG.md - Security fix for safeeval, which further hardens the checking of the evaluation function. - Fix for accelerate mode Note that Tenable Network Security has...

Fedora 19 : ansible-1.5.5-1.fc19 (2014-5375)

Update to 1.5.5. 2 minor security fixes in the apt and vault modules. https://github.com/ansible/ansible/blob/release1.5.4/CHANGELOG.md - Security fix for safeeval, which further hardens the checking of the evaluation function. - Fix for accelerate mode Note that Tenable Network Security has...

Updated ruby-rails and associated packages fix multiple vulnerabilities

Updated ruby-activerecord and ruby-actionpack packages fix security vulnerabilities: There is a data injection vulnerability in Active Record. Specially crafted strings can be used to save data in PostgreSQL array columns that may not be intended CVE-2014-0080. There is an XSS vulnerability in th...

Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2170-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2170-1 advisory. Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to...

Stable Channel Update

The Stable Channel has been updated to 34.0.1847.131 for Windows, Mac, and 34.0.1847.132 for Linux. This release also contains a Flash Player update, to version 13.0.0.206. Security Fixes and Rewards This update includes 9 security fixes. Below, we highlight fixes that were either contributed by...

chromium -- multiple vulnerabilities

Google Chrome Releases reports belatedly: 9 security fixes in this release, including: 354967 High CVE-2014-1730: Type confusion in V8. Credit to Anonymous. 349903 High CVE-2014-1731: Type confusion in DOM. Credit to John Butler. 359802 High CVE-2014-1736: Integer overflow in V8. Credit to SkyLin...

USN-2170-1 mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.37. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the...

Fedora 19 : php-5.5.11-1.fc19 (2014-4735)

03 Apr 2014, PHP 5.5.11 Core : - Allow zero length comparison in substrcompare Tjerk - Fixed bug 60602 procopen changes environment array Tjerk SPL : - Added feature 65545 SplFileObject::fread Tjerk cURL : - Fixed bug 66109 Can't reset CURLOPTCUSTOMREQUEST to default behaviour Tjerk - Fix...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt28

3:11-alt28 built April 15, 2014 Sergey V Turchin in task 118324 --- April 15, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0506, CVE-2014-0507, CVE-2014-0508, CVE-2014-0509...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt28

3:11-alt28 built April 15, 2014 Sergey V Turchin in task 118325 --- April 15, 2014 Sergey V Turchin - new version - security fixes: CVE-2014-0506, CVE-2014-0507, CVE-2014-0508, CVE-2014-0509...

SuSE Update for chromium openSUSE-SU-2014:0501-1 (chromium)

Check for the Version of chromium OpenVAS Vulnerability Test $Id: gbsuse201405011.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for chromium openSUSE-SU-2014:0501-1 chromium Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This...

chromium to 33.0.1750.152 stable release (important)

Chromium was updated to the 33.0.1750.152 stable channel uodate: - Security fixes: CVE-2014-1713: Use-after-free in Blink bindings CVE-2014-1714: Windows clipboard vulnerability CVE-2014-1705: Memory corruption in V8 CVE-2014-1715: Directory traversal issue Previous stable channel update...

Etsy Feature Flags Keep Marketplace Online and Secure

BOSTON – Etsy is one of the Web’s biggest marketplaces. Its developers may be one of Web’s busiest teams. Proudly, the vintage and homemade goods online store, will push code to production upwards of 50 times a day. And, according to Kenneth Lee, senior product security engineer, they do so with...

SuSE Update for MozillaFirefox openSUSE-SU-2014:0448-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201404481.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for MozillaFirefox openSUSE-SU-2014:0448-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH,...

Apple Fixes More Than 25 Flaws in Safari

Apple has updated its Safari browser, dropping a pile of security fixes that patch more than 25 vulnerabilities in the WebKit framework. Many of the vulnerabilities Apple repaired in Safari can lead to remote code execution, depending upon the attack vector. There are a number of use-after-free...

CVE-2013-7350

Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 730159141 and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important security fixes."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 730159141 and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important security fixes."...

ESA-2014-003: RSA® Data Loss Prevention Improper Session Management Vulnerability

ESA-2014-003.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-003: RSA® Data Loss Prevention Improper Session Management Vulnerability EMC Identifier: ESA-2014-003 CVE Identifier: CVE-2014-0624 Severity Rating: CVSS v2 Base Score: 7.4 AV:A/AC:M/Au:S/C:C/I:C/A:C Affected Products: RSA Da...