Linux Advisory Watch: April 10th, 2015

Security Report Summary

Security Report Summary

Security Report Summary

Security Report Summary

Security Report Summary

Security Report Summary

Security Report Summary

Fix for CVE-2014-9706 (rhbz#1204889, rhbz#1204890, and rhbz#1204891)

Updated to latest SVN, fixing various bugs

Fix for CVE-2014-9706 (rhbz#1204889, rhbz#1204890, and rhbz#1204891)

Updated to latest SVN, fixing various bugs.

- Added patch from Debian to avoid free on invalid pointer due to a buffer overflow (#1196751, #1207180)- Added patch from Debian for symlink directory traversal (#1178824)- Added patch from Debian to fix the directory traversal via //multiple/leading/slash (#1178824)

Security fix for

- Update to 4.7- Release notes can be found at https://www.drupal.org/node/2460229- Security fix for drupal7-webform module- Upstream release notes: https://www.drupal.org/node/2457219 Release notes can be found at https://www.drupal.org/node/2454063- Update to 4.3- Release notes can be found at https://www.drupal.org/node/2427257 Update to 4.2- Release notes can be found at https://www.drupal.org/node/2381793

* Fixing arbitrary code execution

New upstream version - 37.0.1

* Fixing arbitrary code execution

Security fix for

- Update to 4.7- Release notes can be found at https://www.drupal.org/node/2460229 Security fix for drupal7-webform module- Upstream release notes: https://www.drupal.org/node/2457219 Release notes can be found at https://www.drupal.org/node/2454063- Update to 4.3- Release notes can be found at https://www.drupal.org/node/2427257 Update to 4.2- Release notes can be found at https://www.drupal.org/node/2381793

Security fix for CVE-2015-1815

CVE-2015-0296 texlive rpm scriptlet allows unprivileged user to delete arbitrary files. This update fixes this issue

Security fix for CVE-2015-1815

fixes built in also added a couple of other entities relatedpacthes including a fix to CVE-2014-3660

The 3.19.3 rebase contains improved hardware support, a number of new features, and many important fixes across the tree.

Update to 2.33.1Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/seamonkey/ for more info.Update to 2.33Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/seamonkey/ for more info.

Patches security vulnerability discussed here:https://bugzilla.redhat.com/show_bug.cgi?id=1181483Latest upstream release.Latest upstream release.

Update to 2.33.1Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/seamonkey/ for more info.

Patches security vulnerability discussed here:https://bugzilla.redhat.com/show_bug.cgi?id=1181483Latest upstream release.Latest upstream release.

Security fix for CVE-2015-1783

CVE-2015-1827: It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash.CVE-2015-0283: It was discovered that the slapi-nis Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for information about a group with many members, or a request for a user that belongs to a large number of groups, would cause a Directory Server to enter an infinite loop and consume an excessive amount of CPU time.These issues were discovered by Sumit Bose of Red Hat.

CVE-2015-1827: It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash.CVE-2015-0283: It was discovered that the slapi-nis Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for information about a group with many members, or a request for a user that belongs to a large number of groups, would cause a Directory Server to enter an infinite loop and consume an excessive amount of CPU time.These issues were discovered by Sumit Bose of Red Hat.

Security fix for CVE-2015-1783

Update to Qt 5.4.1

Security fix for CVE-2014-9130

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to upstream release 0.2.5.11.

Update to Qt 5.4.1

Update to Qt 5.4.1

* Fix privilege escalation via user creation with a crafted POST request

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Security fix for CVE-2014-9130

Update to latest versions of the respective branches. f20 has been updated from 2.5.x to 2.6.x because 2.5.x is EOL.

Update to version 31.6.

Security fix for CVE-2015-2331.

Update to upstream release 0.2.5.11.

Security fix for CVE-2015-2331.

Security fix for CVE-2015-0778

Security fix for CVE-2015-0778

* Fix privilege escalation via user creation with a crafted POST request

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to latest versions of the respective branches. f20 has been updated from 2.5.x to 2.6.x because 2.5.x is EOL.

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to Qt 5.4.1

Update to latest upstream - 37.0

Security fix for CVE-2014-9472Security fix for CVE-2015-1165Security fix for CVE-2015-1464

Security fixes for CVE-2014-9637, CVE-2015-1196, and an infinite loop with a crafted diff.

CVE-2015-0296 texlive rpm scriptlet allows unprivileged user to delete arbitrary files. This update fixes this issue

Security fix for CVE-2014-6585, CVE-2014-6591

Update to upstream 1.7 release for security fixes

Update to latest upstream - 37.0

Update to upstream 1.7 release for security fixes

Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, and SeaMonkey, the worst of which may allow user-assisted execution of arbitrary code.

Multiple vulnerabilities has been found and corrected in ntp: The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle [More...]

Multiple vulnerabilities has been found and corrected in arj: Jakub Wilk discovered that arj follows symlinks created during unpacking of an arj archive. A remote attacker could use this flaw to perform a directory traversal attack if a user or automated [More...]

Updated mediawiki packages fix security vulnerabilities: In MediaWiki before 1.23.9, one could circumvent the SVG MIME blacklist for embedded resources. This allowed an attacker to embed JavaScript in the SVG (CVE-2015-2931). [More...]

Updated less package fixes security vulnerability: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access (CVE-2014-9488). [More...]

Multiple vulnerabilities has been discovered and corrected in java-1.8.0-openjdk: Multiple flaws were found in the way the Hotspot component in OpenJDK verified bytecode from the class files, and in the way this component [More...]

Updated libtasn1 packages fix security vulnerability: The libtasn1 library before version 4.4 is vulnerable to a two-byte stack overflow in asn1_der_decoding (CVE-2015-2806). [More...] _______________________________________________________________________

Updated cups-filters package fixes security vulnerability: cups-browsed in cups-filters before 1.0.66 contained a bug in the remove_bad_chars\(\) function, where it failed to reliably filter out illegal characters if there were two or more subsequent illegal [More...]

A vulnerability has been discovered and corrected in python-django: The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct [More...]

Multiple vulnerabilities has been discovered and corrected in subversion: Subversion HTTP servers with FSFS repositories are vulnerable to a remotely triggerable excessive memory use with certain REPORT requests [More...]

Updated icu packages fix security vulnerabilities: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified [More...]

Multiple vulnerabilities has been discovered and corrected in owncloud: * Multiple stored XSS in contacts application (oC-SA-2015-001) * Multiple stored XSS in documents application (oC-SA-2015-002) [More...]

Multiple vulnerabilities has been discovered and corrected in owncloud: * Login bypass when using user_ldap due to unauthenticated binds (oC-SA-2014-020) [More...]

Updated tor packages fix security vulnerabilities: The tor package has been updated to version 0.2.4.26, which fixes possible crashes that may be remotely trigger-able, which would result in a denial of service, and also fixes a few other bugs. [More...]

Multiple vulnerabilities has been discovered and corrected in flac: Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file (CVE-2014-9028). [More...]

Updated graphviz packages fix security vulnerability: Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vector, [More...]

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security [More...]

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. [More...]

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security [More...]

An updated novnc package that fixes one security issue is now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Moderate security [More...]

Updated openstack-nova packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. [More...]

Updated kernel packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security [More...]

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.5 Extended Update Support. Red Hat Product Security has rated this update as having Important security [More...]

Updated chromium-browser packages that fix two security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security [More...]

dpkg could be tricked into bypassing source package signature checks.

Several security issues were fixed in the kernel.

Several security issues were fixed in the kernel.

Several security issues were fixed in the kernel.

Several security issues were fixed in the kernel.

Several security issues were fixed in the kernel.

Several security issues were fixed in the kernel.

Libtasn1 could be made to crash or run programs if it processed speciallycrafted data.

Mailman could be made to run programs if it processed a specially craftedlist name.

Several security issues were fixed in Oxide.

Firefox could be made to bypass SSL certificate verification.

Several security issues were fixed in Thunderbird.