LinuxSecurity.com: update to upstream release 0.3.1.7 —- update to upstream release 0.2.9.12 (SECURITY) (#1494860)

LinuxSecurity.com: Security fix for buffer overflow due to long input filenames [see Bug 1422550 and 1422545]

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

LinuxSecurity.com: Multiple vulnerabilities have been found in WebkitGTK+, the worst of which may allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Graphite, the worst of which could lead to the remote execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Puppet Agent, the worst of which could result in the execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in GNU Libtasn1, the worst of which may allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in elfutils, the worst of which may allow remote attackers to cause a Denial of Service condition. [More…]

LinuxSecurity.com: Security fix for buffer overflow due to long input filenames [see Bug 1422550 and 1422545]

LinuxSecurity.com: An update is now available for Red Hat JBoss BPM Suite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update is now available for Red Hat JBoss BRMS. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

LinuxSecurity.com: An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

LinuxSecurity.com: Security fix for CVE-2017-1495

LinuxSecurity.com: An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available. An update that fixes 9 vulnerabilities is now available.

LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: These releases are about hardening `git shell` that is used on servers against an unsafe user input, which `git cvsserver` copes with poorly. From the release notes: * “git cvsserver” no longer is invoked by “git shell” by default, as it is old and largely unmaintained. * Various Perl scripts did not use safe_pipe_capture() […]

LinuxSecurity.com: Martin Thomson discovered that nss, the Mozilla Network Security Service library, is prone to a use-after-free vulnerability in the TLS 1.2 implementation when handshake hashes are generated. A remote attacker can take advantage of this flaw to cause an application using the nss

LinuxSecurity.com: Several vulnerabilities were discovered in WordPress, a web blogging tool. They would allow remote attackers to exploit path-traversal issues, perform SQL injections and various cross-site scripting attacks.

LinuxSecurity.com: An update that fixes 47 vulnerabilities is now available. An update that fixes 47 vulnerabilities is now available. An update that fixes 47 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes 143 vulnerabilities is now available. An update that fixes 143 vulnerabilities is now available. An update that fixes 143 vulnerabilities is now available.

LinuxSecurity.com: An update that fixes 140 vulnerabilities is now available. An update that fixes 140 vulnerabilities is now available. An update that fixes 140 vulnerabilities is now available.

LinuxSecurity.com: 6.9.9-15 —- Rebuilt for ImageMagick 6.9.9-13

LinuxSecurity.com: 6.9.9-15 —- Rebuilt for ImageMagick 6.9.9-13

LinuxSecurity.com: update to upstream release 0.2.9.12 (SECURITY) (#1494860)

LinuxSecurity.com: 6.9.9-15 —- Rebuilt for ImageMagick 6.9.9-13

LinuxSecurity.com: An update for kernel is now available for Red Hat Enterprise Linux 7.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

LinuxSecurity.com: Multiple vulnerabilities have been found in PCRE2, the worst of which may allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Pacemaker, the worst of which could result in the execution of arbitrary code.

LinuxSecurity.com: A vulnerability in OCaml may allow local users to gain root privileges.

LinuxSecurity.com: Multiple vulnerabilities have been found in PostgreSQL, the worst of which could result in privilege escalation.

LinuxSecurity.com: A vulnerability in Munin allows local attackers to overwrite any file accessible to the www-data user.

LinuxSecurity.com: A vulnerability in sudo allows local users to gain root privileges.

LinuxSecurity.com: Multiple vulnerabilities have been found in ICU, the worst of which could allow remote code execution.

LinuxSecurity.com: A stack-based buffer overflow was found in file, possibly resulting in the execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities were found in RubyGems, the worst of which allows execution of arbitrary code.

LinuxSecurity.com: Christian Boxd?rfer discovered a vulnerability in the handling of FreeDesktop.org .desktop files in Nautilus, a file manager for the GNOME desktop environment. An attacker can craft a .desktop file intended to run malicious commands but displayed as a innocuous document file in Nautilus. An

LinuxSecurity.com: Security fix for CVE-2017-6419 and CVE-2017-11423

LinuxSecurity.com: CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496

LinuxSecurity.com: It was discovered that the Tor onion service could leak sensitive information to log files if the “SafeLogging” option is set to “0”. The oldstable distribution (jessie) is not affected.

LinuxSecurity.com: Several vulnerabilities have been discovered in cURL, an URL transfer library. The Common Vulnerabilities and Exposures project identifies the following problems:

LinuxSecurity.com: Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163

LinuxSecurity.com: An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.

LinuxSecurity.com: A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in Ruby. Software Description: – ruby1.9.1: Object-oriented scripting language Details: It was discovered that Ruby incorrectly handled certain inputs. [More…]

LinuxSecurity.com: A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 ESM Summary: Several security issues were fixed in Dnsmasq. Software Description: – dnsmasq: Small caching DNS proxy and DHCP/TFTP server Details: USN-3430-1 fixed several vulnerabilities in Dnsmasq. This update [More…]

LinuxSecurity.com: A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 17.04 – Ubuntu 16.04 LTS – Ubuntu 14.04 LTS Summary: poppler could be made to crash if opened a specially crafted file. Software Description: – poppler: PDF rendering library Details: It was discovered that Poppler incorrectly handled certain files. [More…]

LinuxSecurity.com: **nag 4.2.17** * [jan] SECURITY: Fix unauthorized access to task exports. * [jan] Fix regression when exporting single tags to iCalendar CATEGORIES. * [jan] Officially support PHP 7.

LinuxSecurity.com: **passwd 5.0.7** * [jan] Officially support PHP 7. * [jan] SECURITY: Fix open redirects.

LinuxSecurity.com: **wicked 2.0.8** * [jan] SECURITY: Fix unauthorized access to page attachments.

LinuxSecurity.com: New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

LinuxSecurity.com: An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available. An update that fixes 16 vulnerabilities is now available.

LinuxSecurity.com: New gegl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

LinuxSecurity.com: This release fixes a crash when parsing an empty code string of a codewscope type.

LinuxSecurity.com: Multiple vulnerabilities have been found in RAR and UnRAR, the worst of which may allow attackers to execute arbitrary code.

LinuxSecurity.com: Libplist could be made to crash if it opened a specially crafted file.

LinuxSecurity.com: The 4.13.3 stable update contains a number of important fixes across the tree.

LinuxSecurity.com: A vulnerability in libsoup might allow remote attackers to execute arbitrary code.

LinuxSecurity.com: An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available. An update that fixes 15 vulnerabilities is now available.

LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in PHP, the worst of which could result in the execution of arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Tcpdump, the worst of which may allow execution of arbitrary code.

LinuxSecurity.com: This update fixes CVE-2017-14348. —- This update fixes CVE-2017-13735.

LinuxSecurity.com: Fix for possible buffer overrun in kodak_65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data —- Patch for CVE-2017-14348

LinuxSecurity.com: Upgrade to 1.5.3 and also note that 1.5.1 fixed CVE-2017-11424.

LinuxSecurity.com: # Security fixes – fix crash in edge case where a .pc file has misquoting in a fragment list. # Other bug fixes: – fix logic edge case when comparing relocated paths

LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle’s JRE and JDK software suites, and IcedTea, the worst of which may allow execution of arbitrary code. [More…]

LinuxSecurity.com: Multiple vulnerabilities have been found in Mercurial, the worst of which could lead to the remote execution of arbitrary code.

LinuxSecurity.com: A vulnerability in Postfix may allow local users to gain root privileges.

LinuxSecurity.com: A vulnerability in Exim may allow local users to gain root privileges.

LinuxSecurity.com: A command injection vulnerability in CVS may allow remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

LinuxSecurity.com: Multiple vulnerabilities have been found in Chromium, the worst of which could result in the execution of arbitrary code.