java-1.8.0-openjdk security update

1:1.8.0.77-0.b03 - Remove what remains of the SunEC sources in the remove-intree-libraries script. - Resolves: rhbz1320664 1:1.8.0.77-0.b03 - Update to u77b03. - Drop 8146566 which is applied upstream. - Replace s390 Java options patch with general version from IcedTea. - Apply s390 patches...

Stable Channel Update

The stable channel has been updated to 49.0.2623.108 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library...

Fedora 23 : webkitgtk4-2.10.9-1.fc23 (2016-7eb48a78dc)

This update together with the previous release brings the following fixes Security fixes: CVE-2016-1726 Limit the number of tiles according to the visible area. This was causing a huge memory consumption with some websites. Fix rendering of form controls and scrollbars with GTK+ = 3.19. Fix HTTP...

openSUSE Security Update : python-Pillow (openSUSE-2016-339)

This update for python-Pillow fixes the following issues : - backport security fixes from 3.1.1 Pillow-overflows.patch : - Fixed an integer overflow in Resample.c causing writes in the Python heap. - Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files. CVE-2016-TB...

SUSE-SU-2016:0769-1 Security update for tomcat

This update for tomcat fixes the following issues: Tomcat 8 was updated from 8.0.23 to 8.0.32, to fix bugs and security issues. Fixed security issues: CVE-2015-5174: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat allowed remote authenticated users to bypass intended...

CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5 Released

CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 2.6.13, 2.7.11, 2.8.2, 3.0.17, 3.1.12, and 3.2.5. These releases contain security fixes. 3.2.5 and 2.8.2 also contain bugfixes. Security Fixes These...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt60

3:11-alt60 built March 11, 2016 Sergey V Turchin in task 161198 March 11, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988, CVE-2016-0989, CVE-2016-0990, CVE-2016-0991, CVE-2016-0992,...

[slackware-security] mozilla-nss

New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-nss-3.23-i486-1slack14.1.txz: Upgraded. Upgraded to nss-3.23 and nspr-4.12. This release contains security fixes a...

Security fix for the ALT Linux 7 package samba version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group ALT...

Stable Channel Update

The stable channel has been updated to 49.0.2623.87 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library th...

March 8, 2016 — KB3140768 (OS Build 10586.164)

None None...

Fedora 23 : python-django-1.8.6-1.fc23 (2015-1dd5bc998f)

rebase to 1.8.6 rhbz1276914 ---- rebase to 1.8.5 rhbz1276914 ---- python-django-1.8.4-1.fc23 - Do not install bash completion for python executables Ville Skytta, rhbz1253076 - CVE-2015-5963 Denial-of-service possibility in logout view by filling session store rhbz1254911 - CVE-2015-5964...

Fedora 22 : prosody-0.9.9-2.fc22 (2016-e289f41b76)

Prosody 0.9.9 ============= A summary of changes: Security fixes -------------- Fix path traversal vulnerability in modhttpfiles CVE-2016-1231 Fix use of weak PRNG in generation of dialback secrets CVE-2016-1232 Bugs ---- Improve handling of CNAME records in DNS Fix traceback when deleting a user...

Fedora 23 : php-symfony-2.7.7-2.fc23 / php-twig-1.23.1-2.fc23 (2015-0efcb5fbc5)

Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...

Fedora 23 : mariadb-10.0.23-1.fc23 (2016-e30164d0a2)

This is an update to 10.0.23 that delivers also all fixes for CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4895, CVE-2015-4913,...

Fedora 23 : kernel-4.4.3-300.fc23 (2016-1642a20327)

The 4.4.3 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : mod_nss-1.0.12-1.fc23 (2015-c76c1c84cf)

Update to upstream 1.0.12 Fixes CVE-2015-5244 Add support for SNI Add RenegBufferSize option Add support for TLS Session Tickets RFC 5077 For full list of changes see https://fedorahosted.org/modnss/wiki/Releases modnss-1.0.12-1.fc23 - Update to upstream 1.0.12 Note that Tenable Network Security...

rails -- multiple vulnerabilities

Ruby on Rails blog: Rails 4.2.5.2, 4.1.14.2, and 3.2.22.2 have been released! These contain the following important security fixes, and it is recommended that users upgrade as soon as possible...

openSUSE Security Update : LibreOffice and related libraries (openSUSE-2016-273)

This update for LibreOffice and some library dependencies cmis-client, libetonyek, libmwaw, libodfgen, libpagemaker, libreoffice-share-linker, mdds, libwps fixes the following issues : Changes in libreoffice : - Provide l10n-pt from pt-PT - boo945047 - LO-L3: LO is duplicating master pages,...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0585-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.53 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel allowed local users to bypass intended AFUNIX socket permissions...