February 2016 - Arch-security - lists.archlinux.org

[arch-security] [ASA-201602-24] cacti: sql injection
by Christian Rebischke 28 Feb '16

28 Feb '16

Arch Linux Security Advisory ASA-201602-24 ========================================== Severity: High Date : 2016-02-28 CVE-ID : CVE-2015-8604 CVE-2015-8377 CVE-2015-8369 Package : cacti Type : sql injection Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package cacti before version 0.8.8_g-2 is vulnerable to sql injection. Resolution ========== Upgrade to 0.8.8_g-2. # pacman -Syu "cacti>=0.8.8_g-2" The problem has been fixed upstream in … [View More]

1 0

[arch-security] [ASA-201602-23] lib32-glibc: unbound stack usage
by Christian Rebischke 28 Feb '16

28 Feb '16

Arch Linux Security Advisory ASA-201602-22 ========================================== Severity: Medium Date : 2016-02-28 CVE-ID : CVE-2014-9761 Package : lib32-glibc Type : unbound stack usage Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-glibc before version 2.23-1 is vulnerable to unbound stack usage. Resolution ========== Upgrade to 2.23-1. # pacman -Syu "lib32-glibc>=2.23-1" The problem has been fixed upstream in version … [View More]

1 0

[arch-security] [ASA-201602-22] glibc: unbound stack usage
by Christian Rebischke 28 Feb '16

28 Feb '16

Arch Linux Security Advisory ASA-201602-22 ========================================== Severity: Medium Date : 2016-02-28 CVE-ID : CVE-2014-9761 Package : glibc Type : unbound stack usage Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package glibc before version 2.23-1 is vulnerable to unbound stack usage. Resolution ========== Upgrade to 2.23-1. # pacman -Syu "glibc>=2.23-1" The problem has been fixed upstream in version 2.23. Workaround … [View More]

1 0

[arch-security] [ASA-201602-21] lib32-libssh2: man-in-the-middle
by Levente Polyak 25 Feb '16

25 Feb '16

Arch Linux Security Advisory ASA-201602-21 ========================================== Severity: High Date : 2016-02-25 CVE-ID : CVE-2016-0787 Package : lib32-libssh2 Type : man-in-the-middle Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-libssh2 before version 1.7.0-1 is vulnerable to man-in-the-middle. Resolution ========== Upgrade to 1.7.0-1. # pacman -Syu "lib32-libssh2>=1.7.0-1" The problem has been fixed upstream in … [View More]

1 0

[arch-security] [ASA-201602-20] libssh2: man-in-the-middle
by Levente Polyak 25 Feb '16

25 Feb '16

Arch Linux Security Advisory ASA-201602-20 ========================================== Severity: High Date : 2016-02-25 CVE-ID : CVE-2016-0787 Package : libssh2 Type : man-in-the-middle Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package libssh2 before version 1.7.0-1 is vulnerable to man-in-the-middle. Resolution ========== Upgrade to 1.7.0-1. # pacman -Syu "libssh2>=1.7.0-1" The problem has been fixed upstream in version 1.7.0. … [View More]

1 0

[arch-security] [ASA-201602-19] libgcrypt: secret key extraction
by Levente Polyak 24 Feb '16

24 Feb '16

Arch Linux Security Advisory ASA-201602-19 ========================================== Severity: High Date : 2016-02-24 CVE-ID : CVE-2015-7511 Package : libgcrypt Type : secret key extraction Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package libgcrypt before version 1.6.5-1 is vulnerable to a side-channel attack leading to extraction of secret decryption keys. Resolution ========== Upgrade to 1.6.5-1. # pacman -Syu "libgcrypt>=1.6.5-1" … [View More]

1 0

[arch-security] [ASA-201602-18] libssh: man-in-the-middle
by Remi Gacogne 23 Feb '16

23 Feb '16

Arch Linux Security Advisory ASA-201602-18 ========================================== Severity: High Date : 2016-02-23 CVE-ID : CVE-2016-0739 Package : libssh Type : man-in-the-middle Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package libssh before version 0.7.3-1 is vulnerable to man-in-the-middle. Resolution ========== Upgrade to 0.7.3-1. # pacman -Syu "libssh>=0.7.3-1" The problem has been fixed upstream in version 0.7.3. Workaround … [View More]

1 0

[arch-security] [ASA-201602-17] chromium: multiple issues
by Remi Gacogne 21 Feb '16

21 Feb '16

Arch Linux Security Advisory ASA-201602-17 ========================================== Severity: Critical Date : 2016-02-21 CVE-ID : CVE-2016-1629 Package : chromium Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package chromium before version 48.0.2564.116-1 is vulnerable to multiple issues. Resolution ========== Upgrade to 48.0.2564.116-1. # pacman -Syu "chromium>=48.0.2564.116-1" The problem has been fixed upstream … [View More]

1 0

[arch-security] [ASA-201602-16] thunderbird: multiple issues
by Remi Gacogne 21 Feb '16

21 Feb '16

Arch Linux Security Advisory ASA-201602-16 ========================================== Severity: Critical Date : 2016-02-21 CVE-ID : CVE-2015-7575 CVE-2016-1523 CVE-2016-1930 CVE-2016-1931 CVE-2016-1935 Package : thunderbird Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package thunderbird before version 38.6.0-1 is vulnerable to multiple issues. Resolution ========== Upgrade to 38.6.0-1. # pacman -Syu "thunderbird>=38.… [View More]6.0-1" The problem has been fixed upstream in version 38.6.0. Workaround ========== None. Description =========== - CVE-2015-7575 (man-in-the-middle): Security researcher Karthikeyan Bhargavan reported an issue in Network Security Services (NSS) where MD5 signatures in the server signature within the TLS 1.2 ServerKeyExchange message are still accepted. This is an issue since NSS has officially disallowed the accepting MD5 as a hash algorithm in signatures since 2011. This issues exposes NSS based clients such as Firefox to theoretical collision-based forgery attacks. This issue was fixed in NSS version 3.20.2. - CVE-2016-1523 (remote code execution): Security researcher Holger Fuhrmannek reported that a malicious Graphite "smart font" could circumvent the validation of internal instruction parameters in the Graphite 2 library using special CNTXT_ITEM instructions. This could result in arbitrary code execution. In general this flaw cannot be exploited through email in the Thunderbird product, but is potentially a risk in browser or browser-like contexts. - CVE-2016-1930 (remote code execution): Bob Clary, Christian Holler, Nils Ohlmeier, Gary Kwong, Jesse Ruderman, Carsten Book, and Randell Jesup reported memory safety problems and crashes. In general these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled, but are potentially a risk in browser or browser-like contexts. - CVE-2016-1931 (remote code execution): Bob Clary, Carsten Book, Christian Holler, Nicolas Pierron, Eric Rescorla, Tyson Smith, Gabor Krizsanits, and Randell Jesup reported memory safety problems and crashes. In general these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled, but are potentially a risk in browser or browser-like contexts. - CVE-2016-1935 (remote code execution): Security researcher Aki Helin used the Address Sanitizer tool to find a buffer overflow write when rendering some WebGL content. This leads to a potentially exploitable crash. In general this flaw cannot be exploited through email in the Thunderbird product, but is potentially a risk in browser or browser-like contexts. Impact ====== A remote attacker might be able to access sensitive information by performing a man-in-the-middle attack, or execute arbitrary code on the affected host. References ========== https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#t… https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/ https://www.mozilla.org/en-US/security/advisories/mfsa2016-03/ https://www.mozilla.org/en-US/security/advisories/mfsa2016-14/ https://access.redhat.com/security/cve/CVE-2015-7575 https://access.redhat.com/security/cve/CVE-2016-1523 https://access.redhat.com/security/cve/CVE-2016-1930 https://access.redhat.com/security/cve/CVE-2016-1931 https://access.redhat.com/security/cve/CVE-2016-1935 [View Less]

1 0

[arch-security] [Announcement] Discussion about restricting arch-security for public participation
by Levente Polyak 18 Feb '16

18 Feb '16

Dear arch-security subscribers, Dear arch-general subscribers, the policy of the arch-security mailinglist is currently changed to a restricted advisory announcements only list due to certain reason roughly explained on the arch-devops [0] and arch-dev-public [1] lists. As there was no announcement and discussion about this change yet, we want to invite you to discuss the restriction of the arch-security mailinglist on the CC-ed arch-general list. After making sure you are subscribed to arch-… [View More]

1 1