Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 22: jffi Security Update Critical for DoS and XSS Exploits

fedora
Calendar Grey April 21, 2015
Dist Fedora Esm H88
Fedora 22 has released a security update for JFFI to address vulnerabilities related to XSS and DoS, improving system protection against these threats
Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811

Summary

An optimized Java interface to libffi.

Update Information:

Security fix for CVE-2015-1806, CVE-2015-1807, CVE-2015-1813, CVE-2015-1812, CVE-2015-1810, CVE-2015-1808, CVE-2015-1809, CVE-2015-1814, CVE-2015-1811

Topics%20covered

Topics Covered

security advisory critical Fedora XSS DoS security fix jffi

Change Log

References


[ 1 ] Bug #1205615 - CVE-2015-1812 CVE-2015-1813 jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177) https://bugzilla.redhat.com/show_bug.cgi?id=1205615 [ 2 ] Bug #1205620 - CVE-2015-1806 jenkins: Combination filter Groovy script unsecured (SECURITY-125) https://bugzilla.redhat.com/show_bug.cgi?id=1205620 [ 3 ] Bug #1205623 - CVE-2015-1808 jenkins: update center metadata retrieval DoS attack (SECURITY-163) https://bugzilla.redhat.com/show_bug.cgi?id=1205623 [ 4 ] Bug #1205627 - CVE-2015-1810 jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166) https://bugzilla.redhat.com/show_bug.cgi?id=1205627 [ 5 ] Bug #1205616 - CVE-2015-1814 jenkins: forced API token change (SECURITY-180) https://bugzilla.redhat.com/show_bug.cgi?id=1205616 [ 6 ] Bug #1205622 - CVE-2015-1807 jenkins: directory traversal from artifacts via symlink (SECURITY-162) https://bugzilla.redhat.com/show_bug.cgi?id=120...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update jffi' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: jffi
Product: Fedora 22
Version: 1.2.7
Release: 5.fc22
URL: https://github.com/jnr/jffi
Summary: Java Foreign Function Interface

Topics%20covered

Topics Covered

security advisory critical Fedora XSS DoS security fix jffi

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here