[USN-2592-1] XML::LibXML vulnerability

========================================================================== Ubuntu Security Notice USN-2592-1 May 04, 2015 libxml-libxml-perl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

python-numpy symbolic links vulnerability

Symbolic links vulnerability on temporary files creation...

[ MDVSA-2015:064 ] cabextract

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:064 http://www.mandriva.com/en/support/security/ Package : cabextract Date : March 27, 2015 Affected: Business Server 1.0, Business Server 2.0 Problem Description: Updated cabextract packages fix security...

stunnel crypto vulnerabilities

Entropy pools are reused if fork if used for threading...

cabextract directory traversal

Directory traversal on files extraction...

snmplib / snmpd DoS

Multiple DoS conditions...

[ MDVSA-2015:066 ] cpio

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:066 http://www.mandriva.com/en/support/security/ Package : cpio Date : March 27, 2015 Affected: Business Server 1.0 Problem Description: Updated cpio package fixes security vulnerability: In GNU Cpio 2.11, t...

libarchive directory traversal

Directory traversal and symbolic links vulnerability in cpio implementation...

[ MDVSA-2015:092 ] net-snmp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:092 http://www.mandriva.com/en/support/security/ Package : net-snmp Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated net-snmp packages fix security vulnerabilities: Remotely...

[ MDVSA-2015:077 ] python-numpy

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:077 http://www.mandriva.com/en/support/security/ Package : python-numpy Date : March 27, 2015 Affected: Business Server 2.0 Problem Description: Updated python-numpy packages fix security vulnerabilities: f2...

[ MDVSA-2015:096 ] stunnel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:096 http://www.mandriva.com/en/support/security/ Package : stunnel Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated stunnel package fixes security vulnerability: A flaw was...

libpng security vulnerabilities

Few integer overflows lead to heap buffer overrun...

[ MDVSA-2015:090 ] libpng

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:090 http://www.mandriva.com/en/support/security/ Package : libpng Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated libpng package fixes security vulnerabilities: The...

HP Support Solution Framework security vulnerabilities

Code execution, information disclosure...

[SECURITY] [DSA 3208-1] freexl security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3208-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 29, 2015 http://www.debian.org/security/faq -...

Android multiple security vulnerabilities

Restrictions bypass, code execution...

Apple Safari / Webkit multiple security vulnerabilities

Invalid SSL validation, information leakage, crossite access, memory corruptions...

cifs-utils buffer overflow

pamcifscreds buffer overflow...

Not Yet Commons SSL certificate spoofing

Insufficient certificate checking...

Shibboleth Service Provider DoS

Crash on parsing SAML message...

pillow multiple security vulnerabilities

Symbolic links vulnerability, DoS, shell injection...

TP-LINK devices unauthorized files access

Directory traversal in web interface...

[ MDVSA-2015:141 ] not-yet-commons-ssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:141 http://www.mandriva.com/en/support/security/ Package : not-yet-commons-ssl Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated not-yet-commons-ssl packages fixes security...

[ MDVSA-2015:134 ] pulseaudio

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:134 http://www.mandriva.com/en/support/security/ Package : pulseaudio Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated pulseaudio package fixes RTP remote crash vulnerability:...

[ MDVSA-2015:114 ] cifs-utils

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:114 http://www.mandriva.com/en/support/security/ Package : cifs-utils Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated cifs-utils packages fix security vulnerability: Sebastia...

SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)

SEC Consult Vulnerability Lab Security Advisory 20150410-0 ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested...

[ MDVSA-2015:158 ] jython

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:158 http://www.mandriva.com/en/support/security/ Package : jython Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated jython packages fix security vulnerability: There are server...

[ MDVSA-2015:122 ] util-linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:122 http://www.mandriva.com/en/support/security/ Package : util-linux Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated util-linux packages fix security vulnerability: Sebastia...

[ MDVSA-2015:099 ] python-pillow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:099 http://www.mandriva.com/en/support/security/ Package : python-pillow Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated python-imaging packages fix security vulnerabilities:...

dulwich security vulnerabilities

Code execution, buffer overflow...

[SECURITY] [DSA 3206-1] dulwich security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3206-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 28, 2015 http://www.debian.org/security/faq -...

Safari iOS/OS X/Windows cookie access vulnerability

OVERVIEW ========== The 4/8/2015 security updates from Apple included a patch for a Safari cross-domain vulnerability. An attacker could create web content which, when viewed by a target user, bypasses some of the normal cross-domain restrictions to access or modify HTTP cookies belonging to any...

gtk+ protection bypass

Screen lock bypass...

CVE-2014-7954 MTP path traversal vulnerability in Android

MTP path traversal vulnerability in Android 4.4 ----------------------------------------------- doSendObjectInfo method of the MtpServer class implemented in frameworks/av/media/mtp/MtpServer.cpp does not validate the name parameter of the incoming MTP packet at all. It is possible to upload file...

util-linux blkid commands injection

No description provided...

CVE-2014-7951 adb backup archive path traversal file overwrite

ADB backup archive path traversal file overwrite ------------------------------------------------ Using adb one can create a backup of his/her Android device and store it on the PC. The backup archive is based on the tar file format. By modifying tar headers to contain ../../ like patterns it is...

CVE-2014-7953 Android backup agent code execution

Android backup agent arbitrary code execution --------------------------------------------- The Android backup agent implementation was vulnerable to privilege escalation and race condition. An attacker with adb shell access could run arbitrary code as the system 1000 user or any other valid...

[ MDVSA-2015:100 ] cups-filters

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:100 http://www.mandriva.com/en/support/security/ Package : cups-filters Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated cups-filters packages fix security vulnerabilities:...

cups-filters code execution

cups-browsed shell characters vulnerability...

Jython weak permissions

Weak permissions on cache files creation...

[ MDVSA-2015:162 ] gtk+3.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:162 http://www.mandriva.com/en/support/security/ Package : gtk+3.0 Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated gtk+3.0 packages fix security vulnerability: Clemens Fries...

112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x00.txt.asc Date published: 2015-04-17 Vendors contacted:...

freexl multiple security vulnerabilities

Multiple memory corruptions on Excel documents parsing...

PulseAudio DoS

Crash on empty UDP packet...

[SECURITY] [DSA 3207-1] shibboleth-sp2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3207-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 28, 2015 http://www.debian.org/security/faq -...

[security bulletin] HPSBGN03316 rev.1 - HP Support Solution Framework on Windows, Remote Execution of Code, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04634535 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04634535 Version: 1 HPSBGN03316 rev....

APPLE-SA-2015-04-08-3 iOS 8.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-3 iOS 8.3 iOS 8.3 is now available and addresses the following: AppleKeyStore Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious application may be able to guess the user's...

[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3222-1] chrony security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3222-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 12, 2015 http://www.debian.org/security/faq -...

chrony multiple security vulnerabilities

Memory corruption, uninitialized pointer dereference, DoS...