chromium -- multiple vulnerabilities

Chrome Releases reports: 51 security fixes in this release, including: 456516 High CVE-2015-1212: Out-of-bounds write in media. Credit to anonymous. 448423 High CVE-2015-1213: Out-of-bounds write in skia filters. Credit to cloudfuzzer. 445810 High CVE-2015-1214: Out-of-bounds write in skia filter...

JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532...

ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities EMC Identifier: ESA-2015-010 CVE Identifier: CVE-2015-0517, CVE-2015-0518 Affected products: • EMC Documentum D2 3.1 and all patch versions • EMC Documentum D2 3.1 SP1 and all patch versions • E...

CVE-2015-1172 Wordpress-theme remote arbitrary code

Product: holdingpattern Vendor: Liftux Vulnerable Versions: 0.6 and prior Tested Version: 0.6 Advisory Publication: January 18, 2015 Vendor Notification: January 14, 2015 Public Disclosure: January 18, 2015 Vulnerability Type: Exec Code Authentication: Not required to exploit CVE Reference:...

Holding Pattern Theme <= 0.6 - Arbitrary File Upload

An attacker can exploit this vulnerability to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation. Disclosure timeline: 2015-01-14 Vendor Alerted via email. 2015-01-14 Fix Requested via email. 2015-01-14...

SUSE-SU-2015:0353-1 Security update for samba

samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...

SUSE-SU-2015:0371-1 Security update for Samba

Samba has been updated to fix one security issue: CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. Additionally, these non-security issues have been fixed: Realign the winbind request structure following requiremembershipof field expansion bnc913001. Reuse connections...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/seamonkey-2.32.1-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information,...

openSUSE Security Update : clamav (openSUSE-2015-147)

clamav was updated to version 0.98.6 that fixes bugs and several security issues : - bsc916217, CVE-2015-1461: Remote attackers can have unspecified impact via Yoda's crypter or mew packer files. - bsc916214, CVE-2015-1462: Unspecified impact via acrafted upx packer file. - bsc916215,...

Fedora 20 : community-mysql-5.5.41-1.fc20 (2015-1162)

Update to MySQL 5.5.41, for various fixes described at http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-41.html. This update also fixes security issues CVE-2015-0411, CVE-2015-0382, CVE-2015-0381, CVE-2015-0432, CVE-2014-6568, CVE-2015-0374. Note that Tenable Network Security has extracted...

chromium-browser: various security fixes in Chrome 40.0.2214.111

Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

subversion security update

1.6.11-12 - moddavsvn fix for CVE-2014-3580 backport 1.6.11-11 - add security fixes for CVE-2014-3528, CVE2014-3580...

FreeBSD : chromium -- multiple vulnerabilities (a6eb239f-adbe-11e4-9fce-080027593b9a)

Chrome Releases reports : 11 security fixes in this release, including : - 447906 High CVE-2015-1209: Use-after-free in DOM. Credit to Maksymillian. - 453979 High CVE-2015-1210: Cross-origin-bypass in V8 bindings. Credit to anonymous. - 453982 High CVE-2015-1211: Privilege escalation using servic...

Stable Channel Update

The stable channel has been updated to 40.0.2214.111 for Windows, Mac and Linux. A full list of changes is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

chromium -- multiple vulnerabilities

Chrome Releases reports: 11 security fixes in this release, including: 447906 High CVE-2015-1209: Use-after-free in DOM. Credit to Maksymillian. 453979 High CVE-2015-1210: Cross-origin-bypass in V8 bindings. Credit to anonymous. 453982 High CVE-2015-1211: Privilege escalation using service worker...

Fedora 20 : privoxy-3.0.23-1.fc20 (2015-1176)

It was reported 1 that Privoxy 3.0.23 contains fixes for the following security issues : - Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. Reported by Matthew Daley...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2015:0190-1) (POODLE)

OpenJDK was updated to 2.5.4 - OpenJDK 7u75 to fix security issues and bugs : - Security fixes - S8046656: Update protocol support - S8047125, CVE-2015-0395: ref More phantom object references - S8047130: Fewer escapes from escape analysis - S8048035, CVE-2015-0400: Ensure proper proxy protocols ...

Security update for java-1_7_0-openjdk (important)

OpenJDK was updated to 2.5.4 - OpenJDK 7u75 to fix security issues and bugs: Security fixes - S8046656: Update protocol support - S8047125, CVE-2015-0395: ref More phantom object references - S8047130: Fewer escapes from escape analysis - S8048035, CVE-2015-0400: Ensure proper proxy protocols -...

Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.2. This update contains several security-related fixes for the following components : - bash - Bluetooth - CFNetwork Cache - CommerceKit Framework - CoreGraphics - CoreSymbolication - CPU Software - FontParser...

FreeBSD : chromium -- multiple vulnerabilities (e30e0c99-a1b7-11e4-b85c-00262d5ed8ee)

Google Chrome Releases reports : 62 security fixes in this release, including : - 430353 High CVE-2014-7923: Memory corruption in ICU. Credit to yangdingning. - 435880 High CVE-2014-7924: Use-after-free in IndexedDB. Credit to Collin Payne. - 434136 High CVE-2014-7925: Use-after-free in WebAudio...