Debian DLA-202-1 : wesnoth-1.8 security update

Ignacio R. Morelle discovered that missing path restrictions in the 'Battle of Wesnoth' game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded. For the oldstable distribution distribution, this problem has been fixed in version...

Fedora 21 : python-2.7.8-8.fc21 (2015-6003)

Security fix for CVE-2013-1752 multiple unbound readline DoS flaws in python stdlib following fixes which all relates to this CVE are in this patch : - poplib: limit maximum line length that we read from the network 16041 - smtplib: limit amount read from the network 16042 Note that Tenable Netwo...

Fedora 21 : owncloud-7.0.5-2.fc21 (2015-4476)

This update provides the new release 7.0.5, which resolves currently undisclosed security vulnerabilities in ownCloud. It is a minor version update and should apply without any issues or special handling, but as usual, we recommend backing up your data, configuration, and database before updating...

Fedora 21 : perl-Module-Signature-0.78-1.fc21 / perl-Test-Signature-1.11-1.fc21 (2015-5833)

This update addresses various security issues in perl-Module-Signature as described below. The default behavior is also changed so as to ignore any MANIFEST.SKIP files unless a 'skip' parameter is specified. An updated version of perl-Test-Signature that accounts for the changed default behavior ...

Fedora 20 : owncloud-7.0.5-2.fc20 (2015-4693)

This update provides the new release 7.0.5, which resolves currently undisclosed security vulnerabilities in ownCloud. It is a minor version update and should apply without any issues or special handling, but as usual, we recommend backing up your data, configuration, and database before updating...

Fedora 21 : perl-DBD-Firebird-1.19-1.fc21 (2015-5552)

DBD::Firebird 1.19 2015-03-22 =============================== - Fix $VERSION in Firebird.pm - Fix typo in ISCPASSWORD spelling - Positive logic and early return - Allow re-executing/fetch on prepared sth RT92810, Tux - Add rests for $dbh-Name and others - Implement $dbh-Name - Fix attributions to...

Fedora 20 : tcpdump-4.5.1-4.fc20 (2015-4953)

Contains security fix for CVE-2015-0261, CVE-2015-2154, CVE-2015-2153, CVE-2015-2155. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 20 : perl-DBD-Firebird-1.19-1.fc20 (2015-5601)

DBD::Firebird 1.19 2015-03-22 =============================== - Fix $VERSION in Firebird.pm - Fix typo in ISCPASSWORD spelling - Positive logic and early return - Allow re-executing/fetch on prepared sth RT92810, Tux - Add rests for $dbh-Name and others - Implement $dbh-Name - Fix attributions to...

Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2015-0807)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0807 advisory. 1:1.7.0.75-2.5.5.1.0.1.el511 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Oracle Linux' 1:1.7.0.75-2.5.5.1 - Repacked sources - Resolves:...

Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2015-0806)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0806 advisory. 1:1.7.0.75-2.5.5.1.0.1.el71 - Update DISTRONAME in specfile 1:1.7.0.75-2.5.5.1 - repacked sources - Resolves: rhbz1209072 1:1.7.0.75-2.5.5.0 - Bump...

Juniper Junos SRX Series Dynamic VPN XSS (JSA10677)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a cross-site scripting vulnerability due to a flaw in Dynamic VPN. A remote attacker can exploit this to view sensitive information or session credentials. Note that this issue only affects...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2015-0809)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0809 advisory. 1:1.8.0.45-30.b13 - repacked sources - Resolves: RHBZ1209076 1:1.8.0.45-7.b13 - Re-add %name prefix to patches to avoid conflicts with OpenJDK 7...

Debian DLA-199-1 : libx11 security update

Abhishek Arya discovered a buffer overflow in the MakeBigReq macro provided by libx11, which could result in denial of service or the execution of arbitrary code. Several other xorg packages e.g. libxrender will be recompiled against the fixed package after the release of this update. For detaile...

Fedora 20 : ca-certificates-2015.2.3-1.0.fc20 (2015-4486)

This is an update to the set of CA certificates released with NSS version 3.18 However, the package modifies the CA list to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for details. If you prefer to use the unchanged list provided by Mozilla, an...

Ubuntu 14.04 LTS : libx11, libxrender vulnerability (USN-2568-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2568-1 advisory. Abhishek Arya discovered that libX11 incorrectly handled memory in the MakeBigReq macro. A remote attacker could use this issue to cause applications to crash,...

Fedora 21 : arj-3.10.22-22.fc21 (2015-5603)

Added patch from Debian to avoid free on invalid pointer due to a buffer overflow 1196751, 1207180 - Added patch from Debian for symlink directory traversal 1178824 - Added patch from Debian to fix the directory traversal via //multiple/leading/slash 1178824 Note that Tenable Network Security has...

Ubuntu 14.10 : linux vulnerabilities (USN-2565-1)

An integer overflow was discovered in the stack randomization feature of the Linux kernel on 64 bit platforms. A local attacker could exploit this flaw to bypass the Address Space Layout Randomization ASLR protection mechanism. CVE-2015-1593 An information leak was discovered in the Linux Kernel'...

Oracle Linux 6 : krb5 (ELSA-2015-0794)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0794 advisory. - fix for CVE-2014-5355 1193939 'krb5: unauthenticated denial of service in recvauthcommon and others' - fix for CVE-2014-5353 1174543 'Fix LDAP misuse...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2564-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2564-1 advisory. An integer overflow was discovered in the stack randomization feature of the Linux kernel on 64 bit platforms. A local attacker could exploit this flaw t...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2560-1)

An integer overflow was discovered in the stack randomization feature of the Linux kernel on 64 bit platforms. A local attacker could exploit this flaw to bypass the Address Space Layout Randomization ASLR protection mechanism. CVE-2015-1593 An information leak was discovered in the Linux Kernel'...