September 2016 - Arch-security - lists.archlinux.org

[arch-security] [ASA-201609-32] wordpress: multiple issues
by Levente Polyak 30 Sep '16

30 Sep '16

Arch Linux Security Advisory ASA-201609-32 ========================================== Severity: High Date : 2016-09-30 CVE-ID : CVE-2016-7168 CVE-2016-7169 Package : wordpress Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package wordpress before version 4.6.1-1 is vulnerable to multiple issues including directory traversal and cross-site scripting. Resolution ========== Upgrade to 4.6.1-1. # pacman -Syu "wordpress>=4.… [View More]

1 0

[arch-security] [ASA-201609-31] c-ares: arbitrary code execution
by Levente Polyak 30 Sep '16

30 Sep '16

Arch Linux Security Advisory ASA-201609-31 ========================================== Severity: High Date : 2016-09-30 CVE-ID : CVE-2016-5180 Package : c-ares Type : arbitrary code execution Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package c-ares before version 1.12.0-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 1.12.0-1. # pacman -Syu "c-ares>=1.12.0-1" The problem has been fixed upstream in version 1.… [View More]

1 0

[arch-security] [ASA-201609-30] openssl: denial of service
by Levente Polyak 28 Sep '16

28 Sep '16

Arch Linux Security Advisory ASA-201609-30 ========================================== Severity: Medium Date : 2016-09-28 CVE-ID : CVE-2016-7052 Package : openssl Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package openssl before version 1.0.2.j-1 is vulnerable to denial of service. Resolution ========== Upgrade to 1.0.2.j-1. # pacman -Syu "openssl>=1.0.2.j-1" The problem has been fixed upstream in version 1.0.2.j.… [View More]

1 0

[arch-security] [ASA-201609-29] bind: denial of service
by Levente Polyak 27 Sep '16

27 Sep '16

Arch Linux Security Advisory ASA-201609-29 ========================================== Severity: High Date : 2016-09-27 CVE-ID : CVE-2016-2776 Package : bind Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package bind before version 9.10.4.P3-1 is vulnerable to denial of service. Resolution ========== Upgrade to 9.10.4.P3-1. # pacman -Syu "bind>=9.10.4.P3-1" The problem has been fixed upstream in version 9.10.4.P3. … [View More]

1 0

[arch-security] [ASA-201609-28] lib32-openssl: denial of service
by Levente Polyak 27 Sep '16

27 Sep '16

Arch Linux Security Advisory ASA-201609-28 ========================================== Severity: Medium Date : 2016-09-27 CVE-ID : CVE-2016-7052 Package : lib32-openssl Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-openssl before version 1:1.0.2.j-1 is vulnerable to denial of service. Resolution ========== Upgrade to 1:1.0.2.j-1. # pacman -Syu "lib32-openssl>=1:1.0.2.j-1" The problem has been fixed … [View More]

1 0

[arch-security] [ASA-201609-27] wireshark-cli: denial of service
by Levente Polyak 26 Sep '16

26 Sep '16

Arch Linux Security Advisory ASA-201609-27 ========================================== Severity: Medium Date : 2016-09-26 CVE-ID : CVE-2016-7175 CVE-2016-7176 CVE-2016-7177 CVE-2016-7178 CVE-2016-7179 CVE-2016-7180 Package : wireshark-cli Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package wireshark-cli before version 2.2.0-2 is vulnerable to denial of service. Resolution ========== Upgrade to 2.2.0-2. # … [View More]

1 0

[arch-security] [ASA-201609-26] lib32-gnutls: certificate verification bypass
by Levente Polyak 26 Sep '16

26 Sep '16

Arch Linux Security Advisory ASA-201609-26 ========================================== Severity: Medium Date : 2016-09-26 CVE-ID : CVE-2016-7444 Package : lib32-gnutls Type : certificate verification bypass Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-gnutls before version 3.4.15-1 is vulnerable to certificate verification bypass. Resolution ========== Upgrade to 3.4.15-1. # pacman -Syu "lib32-gnutls>=3.4.15-1" The problem … [View More]

1 0

[arch-security] [ASA-201609-25] gnutls: certificate verification bypass
by Levente Polyak 26 Sep '16

26 Sep '16

Arch Linux Security Advisory ASA-201609-25 ========================================== Severity: Medium Date : 2016-09-26 CVE-ID : CVE-2016-7444 Package : gnutls Type : certificate verification bypass Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package gnutls before version 3.4.15-1 is vulnerable to certificate verification bypass. Resolution ========== Upgrade to 3.4.15-1. # pacman -Syu "gnutls>=3.4.15-1" The problem has been fixed … [View More]

1 0

[arch-security] [ASA-201609-24] lib32-openssl: multiple issues
by Levente Polyak 26 Sep '16

26 Sep '16

Arch Linux Security Advisory ASA-201609-24 ========================================== Severity: High Date : 2016-09-26 CVE-ID : CVE-2016-6304 CVE-2016-2178 CVE-2016-2177 CVE-2016-2183 CVE-2016-2182 CVE-2016-6303 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-6302 CVE-2016-6306 Package : lib32-openssl Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-openssl before version 1:1.0.2.i-1 is … [View More]vulnerable to multiple issues including denial of service, private key recovery, information disclosure and arbitrary code execution. Resolution ========== Upgrade to 1:1.0.2.i-1. # pacman -Syu "lib32-openssl>=1:1.0.2.i-1" The problems have been fixed upstream in version 1.0.2.i. Workaround ========== None. Description =========== - CVE-2016-6304 (denial of service) A malicious client can send an excessively large OCSP Status Request extension. If that client continually requests renegotiation, sending a large OCSP Status Request extension each time, then there will be unbounded memory growth on the server. This will eventually lead to a Denial Of Service attack through memory exhaustion. Servers with a default configuration are vulnerable even if they do not support OCSP. Builds using the "no-ocsp" build time option are not affected. - CVE-2016-2178 (private key recovery) Operations in the DSA signing algorithm should run in constant time in order to avoid side channel attacks. A flaw in the OpenSSL DSA implementation means that a non-constant time codepath is followed for certain operations. This has been demonstrated through a cache-timing attack to be sufficient for an attacker to recover the private DSA key. - CVE-2016-2177 (denial of service) OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap- buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. - CVE-2016-2183 (information disclosure) SWEET32 (https://sweet32.info) is an attack on older block cipher algorithms that use a block size of 64 bits. In mitigation for the SWEET32 attack DES based ciphersuites have been moved from the HIGH cipherstring group to MEDIUM. - CVE-2016-2182 (arbitrary code execution) The function BN_bn2dec() does not check the return value of BN_div_word(). This can cause an OOB write if an application uses this function with an overly large BIGNUM. This could be a problem if an overly large certificate or CRL is printed out from an untrusted source. TLS is not affected because record limits will reject an oversized certificate before it is parsed. - CVE-2016-6303 (arbitrary code execution) An overflow can occur in MDC2_Update() either if called directly or through the EVP_DigestUpdate() function using MDC2. If an attacker is able to supply very large amounts of input data after a previous call t MVP_EncryptUpdate() with a partial block then a length check can overflow resulting in a heap corruption. The amount of data needed is comparable to SIZE_MAX which is impractical on most platforms. - CVE-2016-2179 (denial of service) In a DTLS connection where handshake messages are delivered out-of- order those messages that OpenSSL is not yet ready to process will be buffered for later use. Under certain circumstances, a flaw in the logic means that those messages do not get removed from the buffer even though the handshake has been completed. An attacker could force up to approx. 15 messages to remain in the buffer when they are no longer required. These messages will be cleared when the DTLS connection is closed. The default maximum size for a message is 100k. Therefore the attacker could force an additional 1500k to be consumed per connection. By opening many simultaneous connections an attacker could cause a DoS attack through memory exhaustion. - CVE-2016-2180 (denial of service) The function TS_OBJ_print_bio() misuses OBJ_obj2txt(): the return value is the total length the OID text representation would use and not the amount of data written. This will result in OOB reads when large OIDs are presented. - CVE-2016-2181 (denial of service) A flaw in the DTLS replay attack protection mechanism means that records that arrive for future epochs update the replay protection "window" before the MAC for the record has been validated. This could be exploited by an attacker by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means that all subsequent legitimate packets are dropped causing a denial of service for a specific DTLS connection. - CVE-2016-6302 (denial of service) If a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a DoS attack where a malformed ticket will result in an OOB read which will ultimately crash. The use of SHA512 in TLS session tickets is comparatively rare as it requires a custom server callback and ticket lookup mechanism. - CVE-2016-6306 (denial of service) In OpenSSL 1.0.2 and earlier some missing message length checks can result in OOB reads of up to 2 bytes beyond an allocated buffer. There is a theoretical DoS risk but this has not been observed in practice on common platforms. The messages affected are client certificate, client certificate request and server certificate. As a result the attack can only be performed against a client or a server which enables client authentication. Impact ====== A remote attacker is able to execute arbitrary code, recovery private keys, disclose sensitive information or perform a denial of service attack via various vectors. References ========== https://www.openssl.org/news/secadv/20160922.txt https://access.redhat.com/security/cve/CVE-2016-6304 https://access.redhat.com/security/cve/CVE-2016-2178 https://access.redhat.com/security/cve/CVE-2016-2177 https://access.redhat.com/security/cve/CVE-2016-2183 https://access.redhat.com/security/cve/CVE-2016-2182 https://access.redhat.com/security/cve/CVE-2016-6303 https://access.redhat.com/security/cve/CVE-2016-2179 https://access.redhat.com/security/cve/CVE-2016-2180 https://access.redhat.com/security/cve/CVE-2016-2181 https://access.redhat.com/security/cve/CVE-2016-6302 https://access.redhat.com/security/cve/CVE-2016-6306 [View Less]

1 0

[arch-security] [ASA-201609-23] openssl: multiple issues
by Levente Polyak 26 Sep '16

26 Sep '16

Arch Linux Security Advisory ASA-201609-23 ========================================== Severity: High Date : 2016-09-26 CVE-ID : CVE-2016-6304 CVE-2016-2178 CVE-2016-2177 CVE-2016-2183 CVE-2016-2182 CVE-2016-6303 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-6302 CVE-2016-6306 Package : openssl Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package openssl before version 1.0.2.i-1 is vulnerable to … [View More]multiple issues including denial of service, private key recovery, information disclosure and arbitrary code execution. Resolution ========== Upgrade to 1.0.2.i-1. # pacman -Syu "openssl>=1.0.2.i-1" The problems have been fixed upstream in version 1.0.2.i. Workaround ========== None. Description =========== - CVE-2016-6304 (denial of service) A malicious client can send an excessively large OCSP Status Request extension. If that client continually requests renegotiation, sending a large OCSP Status Request extension each time, then there will be unbounded memory growth on the server. This will eventually lead to a Denial Of Service attack through memory exhaustion. Servers with a default configuration are vulnerable even if they do not support OCSP. Builds using the "no-ocsp" build time option are not affected. - CVE-2016-2178 (private key recovery) Operations in the DSA signing algorithm should run in constant time in order to avoid side channel attacks. A flaw in the OpenSSL DSA implementation means that a non-constant time codepath is followed for certain operations. This has been demonstrated through a cache-timing attack to be sufficient for an attacker to recover the private DSA key. - CVE-2016-2177 (denial of service) OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap- buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. - CVE-2016-2183 (information disclosure) SWEET32 (https://sweet32.info) is an attack on older block cipher algorithms that use a block size of 64 bits. In mitigation for the SWEET32 attack DES based ciphersuites have been moved from the HIGH cipherstring group to MEDIUM. - CVE-2016-2182 (arbitrary code execution) The function BN_bn2dec() does not check the return value of BN_div_word(). This can cause an OOB write if an application uses this function with an overly large BIGNUM. This could be a problem if an overly large certificate or CRL is printed out from an untrusted source. TLS is not affected because record limits will reject an oversized certificate before it is parsed. - CVE-2016-6303 (arbitrary code execution) An overflow can occur in MDC2_Update() either if called directly or through the EVP_DigestUpdate() function using MDC2. If an attacker is able to supply very large amounts of input data after a previous call t MVP_EncryptUpdate() with a partial block then a length check can overflow resulting in a heap corruption. The amount of data needed is comparable to SIZE_MAX which is impractical on most platforms. - CVE-2016-2179 (denial of service) In a DTLS connection where handshake messages are delivered out-of- order those messages that OpenSSL is not yet ready to process will be buffered for later use. Under certain circumstances, a flaw in the logic means that those messages do not get removed from the buffer even though the handshake has been completed. An attacker could force up to approx. 15 messages to remain in the buffer when they are no longer required. These messages will be cleared when the DTLS connection is closed. The default maximum size for a message is 100k. Therefore the attacker could force an additional 1500k to be consumed per connection. By opening many simultaneous connections an attacker could cause a DoS attack through memory exhaustion. - CVE-2016-2180 (denial of service) The function TS_OBJ_print_bio() misuses OBJ_obj2txt(): the return value is the total length the OID text representation would use and not the amount of data written. This will result in OOB reads when large OIDs are presented. - CVE-2016-2181 (denial of service) A flaw in the DTLS replay attack protection mechanism means that records that arrive for future epochs update the replay protection "window" before the MAC for the record has been validated. This could be exploited by an attacker by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means that all subsequent legitimate packets are dropped causing a denial of service for a specific DTLS connection. - CVE-2016-6302 (denial of service) If a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a DoS attack where a malformed ticket will result in an OOB read which will ultimately crash. The use of SHA512 in TLS session tickets is comparatively rare as it requires a custom server callback and ticket lookup mechanism. - CVE-2016-6306 (denial of service) In OpenSSL 1.0.2 and earlier some missing message length checks can result in OOB reads of up to 2 bytes beyond an allocated buffer. There is a theoretical DoS risk but this has not been observed in practice on common platforms. The messages affected are client certificate, client certificate request and server certificate. As a result the attack can only be performed against a client or a server which enables client authentication. Impact ====== A remote attacker is able to execute arbitrary code, recovery private keys, disclose sensitive information or perform a denial of service attack via various vectors. References ========== https://www.openssl.org/news/secadv/20160922.txt https://access.redhat.com/security/cve/CVE-2016-6304 https://access.redhat.com/security/cve/CVE-2016-2178 https://access.redhat.com/security/cve/CVE-2016-2177 https://access.redhat.com/security/cve/CVE-2016-2183 https://access.redhat.com/security/cve/CVE-2016-2182 https://access.redhat.com/security/cve/CVE-2016-6303 https://access.redhat.com/security/cve/CVE-2016-2179 https://access.redhat.com/security/cve/CVE-2016-2180 https://access.redhat.com/security/cve/CVE-2016-2181 https://access.redhat.com/security/cve/CVE-2016-6302 https://access.redhat.com/security/cve/CVE-2016-6306 [View Less]

1 0

[arch-security] [ASA-201609-22] firefox: multiple issues
by Levente Polyak 22 Sep '16

22 Sep '16

Arch Linux Security Advisory ASA-201609-22 ========================================== Severity: Critical Date : 2016-09-22 CVE-ID : CVE-2016-5256 CVE-2016-5257 CVE-2016-5270 CVE-2016-5271 CVE-2016-5272 CVE-2016-5273 CVE-2016-5274 CVE-2016-5275 CVE-2016-5276 CVE-2016-5277 CVE-2016-5278 CVE-2016-5279 CVE-2016-5280 CVE-2016-5281 CVE-2016-5282 CVE-2016-5283 CVE-2016-5284 Package : firefox Type : multiple issues Remote : Yes Link : https://wiki.… [View More]archlinux.org/index.php/CVE Summary ======= The package firefox before version 49.0-1 is vulnerable to multiple issues including but not limited to arbitrary code execution, information disclosure and certificate verification bypass. Resolution ========== Upgrade to 49.0-1. # pacman -Syu "firefox>=49.0-1" The problems have been fixed upstream in version 49.0. Workaround ========== None. Description =========== - CVE-2016-5256 (arbitrary code execution) Mozilla developers Christoph Diehl, Christian Holler, Gary Kwong, Nathan Froyd, Honza Bambas, Seth Fowler, and Michael Smith reported memory safety bugs present in Firefox 48. Some of these bugs showed evidence of memory corruption under certain circumstances could potentially exploited to run arbitrary code. - CVE-2016-5257 (arbitrary code execution) Mozilla developers and community members Christoph Diehl, Andrew McCreight, Dan Minor, Byron Campen, Jon Coppeard, Steve Fink, Tyson Smith, Philipp, and Carsten Book reported memory safety bugs present in Firefox 48 and Firefox ESR 45.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code. - CVE-2016-5270 (arbitrary code execution) An out-of-bounds write of a boolean value during text conversion with some unicode characters. - CVE-2016-5271 (information disclosure) An out-of-bounds read during the processing of text runs in some pages using display:contents. - CVE-2016-5272 (arbitrary code execution) A bad cast when processing layout with input elements can result in a potentially exploitable crash. - CVE-2016-5273 (arbitrary code execution) A potentially exploitable crash in accessibility in the mozilla::a11y::HyperTextAccessible::GetChildOffset function. - CVE-2016-5274 (arbitrary code execution) A use-after-free vulnerability has been discovered in the nsFrameManager::CaptureFrameState function in web animations during restyling. - CVE-2016-5275 (arbitrary code execution) A buffer overflow vulnerability has been discovered in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function when working with empty filters during canvas rendering. - CVE-2016-5276 (arbitrary code execution) A use-after-free vulnerability has been discovered in the mozilla::a11y::DocAccessible::ProcessInvalidationList function triggered by setting a aria-owns attribute. - CVE-2016-5277 (arbitrary code execution) A user-after-free vulnerability has been disconvered in the nsRefreshDriver::Tick function with web animations when destroying a timeline. - CVE-2016-5278 (arbitrary code execution) A potentially exploitable crash caused by a heap based buffer overflow has been discovered in the nsBMPEncoder::AddImageFrame function while encoding image frames to images. - CVE-2016-5279 (information disclosure) The full path to local files is available to scripts when local files are drag and dropped into Firefox. - CVE-2016-5280 (arbitrary code execution) A use-after-free vulnerability has been discovered in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function when changing text direction. - CVE-2016-5281 (arbitrary code execution) A use-after-free vulnerability has been discovered in the DOMSVGLength when manipulating SVG format content through a script. - CVE-2016-5282 (access restriction bypass) Favicons can be loaded through non-whitelisted protocols, such as jar. - CVE-2016-5283 (information disclosure) A timing attack vulnerability was discovered using iframes to potentially reveal private cross-origin data using document resizes and link colors. - CVE-2016-5284 (certificate verification bypass) Due to flaws in the process used to update "Preloaded Public Key Pinning", the pinning for add-on updates became ineffective in early September. An attacker who was able to get a mis-issued certificate for a Mozilla web site could send malicious add-on updates to users on networks controlled by the attacker. Users who have not installed any add-ons are not affected. Impact ====== A remote attacker is able to execute arbitrary code, disclose sensitive information and bypass certificate verification via various vectors. References ========== https://www.mozilla.org/en-US/security/advisories/mfsa2016-85/ https://access.redhat.com/security/cve/CVE-2016-5256 https://access.redhat.com/security/cve/CVE-2016-5257 https://access.redhat.com/security/cve/CVE-2016-5270 https://access.redhat.com/security/cve/CVE-2016-5271 https://access.redhat.com/security/cve/CVE-2016-5272 https://access.redhat.com/security/cve/CVE-2016-5273 https://access.redhat.com/security/cve/CVE-2016-5274 https://access.redhat.com/security/cve/CVE-2016-5275 https://access.redhat.com/security/cve/CVE-2016-5276 https://access.redhat.com/security/cve/CVE-2016-5277 https://access.redhat.com/security/cve/CVE-2016-5278 https://access.redhat.com/security/cve/CVE-2016-5279 https://access.redhat.com/security/cve/CVE-2016-5280 https://access.redhat.com/security/cve/CVE-2016-5281 https://access.redhat.com/security/cve/CVE-2016-5282 https://access.redhat.com/security/cve/CVE-2016-5283 https://access.redhat.com/security/cve/CVE-2016-5284 [View Less]

1 0

[arch-security] [ASA-201609-21] tomcat7: proxy injection
by Levente Polyak 22 Sep '16

22 Sep '16

Arch Linux Security Advisory ASA-201609-21 ========================================== Severity: Medium Date : 2016-09-22 CVE-ID : CVE-2016-5388 Package : tomcat7 Type : proxy injection Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package tomcat7 before version 7.0.72-1 is vulnerable to proxy injection. Resolution ========== Upgrade to 7.0.72-1. # pacman -Syu "tomcat7>=7.0.72-1" The problems have been fixed upstream in version 7.0.72. … [View More]

1 0

[arch-security] [ASA-201609-20] irssi: arbitrary code execution
by Jelle van der Waa 22 Sep '16

22 Sep '16

Arch Linux Security Advisory ASA-201609-20 ========================================== Severity: High Date : 2016-09-22 CVE-ID : CVE-2016-7045 Package : irssi Type : arbitrary code execution Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package irssi before version 0.8.20-1 is vulnerable to arbitrary code execution. Resolution ========== Upgrade to 0.8.20-1. # pacman -Syu "irssi>=0.8.20-1" The problem has been fixed upstream in version 0.8.… [View More]

1 0

[arch-security] [ASA-201609-19] curl: denial of service
by Jelle van der Waa 20 Sep '16

20 Sep '16

Arch Linux Security Advisory ASA-201609-19 ========================================== Severity: Low Date : 20916-09-20 CVE-ID : CVE-2016-7167 Package : curl Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package curl before version 7.50.3-1 is vulnerable to denial of service. Resolution ========== Upgrade to 7.50.3-1. # pacman -Syu "curl>=7.50.3-1" The problem has been fixed upstream in version 7.50.3. Workaround ==… [View More]

1 0

[arch-security] [ASA-201609-18] lib32-curl: denial of service
by Jelle van der Waa 20 Sep '16

20 Sep '16

Arch Linux Security Advisory ASA-201609-18 ========================================== Severity: Low Date : 20916-09-20 CVE-ID : CVE-2016-7167 Package : lib32-curl Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-curl before version 7.50.3-1 is vulnerable to denial of service. Resolution ========== Upgrade to 7.50.3-1. # pacman -Syu "lib32-curl>=7.50.3-1" The problem has been fixed upstream in version 7.… [View More]

1 0

[arch-security] [ASA-201609-17] lib32-jansson: denial of service
by Levente Polyak 20 Sep '16

20 Sep '16

Arch Linux Security Advisory ASA-201609-17 ========================================== Severity: Medium Date : 2016-09-20 CVE-ID : CVE-2016-4425 Package : lib32-jansson Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-jansson before version 2.8-1 is vulnerable to denial of service. Resolution ========== Upgrade to 2.8-1. # pacman -Syu "lib32-jansson>=2.8-1" The problem has been fixed upstream in version 2.… [View More]

1 0

[arch-security] [ASA-201609-16] php: multiple issues
by Levente Polyak 18 Sep '16

18 Sep '16

Arch Linux Security Advisory ASA-201609-16 ========================================== Severity: Critical Date : 2016-09-18 CVE-ID : CVE-2016-7411 CVE-2016-7412 CVE-2016-7413 CVE-2016-7414 CVE-2016-7416 CVE-2016-7417 CVE-2016-7418 Package : php Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package php before version 7.0.11-1 is vulnerable to multiple issues that can lead to arbitrary code execution and denial of … [View More]

1 0

[arch-security] [ASA-201609-15] jansson: denial of service
by Remi Gacogne 17 Sep '16

17 Sep '16

Arch Linux Security Advisory ASA-201609-15 ========================================== Severity: Low Date : 2016-09-17 CVE-ID : CVE-2016-4425 Package : jansson Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package jansson before version 2.8-1 is vulnerable to denial of service. Resolution ========== Upgrade to 2.8-1. # pacman -Syu "jansson>=2.8-1" The problem has been fixed upstream in version 2.8. Workaround ======… [View More]

1 0

[arch-security] [ASA-201609-14] lib32-libgcrypt: information disclosure
by Remi Gacogne 17 Sep '16

17 Sep '16

Arch Linux Security Advisory ASA-201609-14 ========================================== Severity: Low Date : 2016-09-17 CVE-ID : CVE-2016-6313 Package : lib32-libgcrypt Type : information disclosure Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package lib32-libgcrypt before version 1.7.3-1 is vulnerable to information disclosure. Resolution ========== Upgrade to 1.7.3-1. # pacman -Syu "lib32-libgcrypt>=1.7.3-1" The problem has been fixed … [View More]

1 0

[arch-security] [ASA-201609-13] chromium: multiple issues
by Remi Gacogne 17 Sep '16

17 Sep '16

Arch Linux Security Advisory ASA-201609-13 ========================================== Severity: Critical Date : 2016-09-17 CVE-ID : CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5173 CVE-2016-5174 CVE-2016-5175 Package : chromium Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package chromium before version 53.0.2785.116-1 is vulnerable to multiple issues. Resolution ========== Upgrade to 53.0.2785.116-1. # … [View More]

1 0

[arch-security] [ASA-201609-12] lib32-flashplugin: multiple issues
by Levente Polyak 15 Sep '16

15 Sep '16

Arch Linux Security Advisory ASA-201609-12 ========================================== Severity: Critical Date : 2016-09-15 CVE-ID : CVE-2016-4271 CVE-2016-4272 CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4277 CVE-2016-4278 CVE-2016-4279 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-4287 CVE-2016-6921 CVE-2016-6922 CVE-2016-6923 CVE-2016-6924 CVE-2016-6925 CVE-2016-6926 CVE-2016-6927 CVE-… [View More]

1 0

[arch-security] [ASA-201609-11] flashplugin: multiple issues
by Levente Polyak 15 Sep '16

15 Sep '16

Arch Linux Security Advisory ASA-201609-11 ========================================== Severity: Critical Date : 2016-09-15 CVE-ID : CVE-2016-4271 CVE-2016-4272 CVE-2016-4274 CVE-2016-4275 CVE-2016-4276 CVE-2016-4277 CVE-2016-4278 CVE-2016-4279 CVE-2016-4280 CVE-2016-4281 CVE-2016-4282 CVE-2016-4283 CVE-2016-4284 CVE-2016-4285 CVE-2016-4287 CVE-2016-6921 CVE-2016-6922 CVE-2016-6923 CVE-2016-6924 CVE-2016-6925 CVE-2016-6926 CVE-2016-6927 CVE-… [View More]

1 0

[arch-security] [ASA-201609-10] mariadb: multiple issues
by Christian Rebischke 14 Sep '16

14 Sep '16

Arch Linux Security Advisory ASA-201609-10 ========================================== Severity: Critical Date : 2016-09-14 CVE-ID : CVE-2016-6662 CVE-2016-6663 Package : mariadb Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package mariadb before version 10.1.17-1 is vulnerable to multiple issues including arbitrary code execution and access restriction bypass. Resolution ========== Upgrade to 10.1.17-1. # pacman -Syu "… [View More]

1 0

[arch-security] [ASA-201609-9] powerdns: denial of service
by Remi Gacogne 13 Sep '16

13 Sep '16

Arch Linux Security Advisory ASA-201609-9 ========================================= Severity: Medium Date : 2016-09-13 CVE-ID : CVE-2016-5426 CVE-2016-5427 Package : powerdns Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package powerdns before version 4.0.1-3 is vulnerable to denial of service. Resolution ========== Upgrade to 4.0.1-3. # pacman -Syu "powerdns>=4.0.1-3" The problems have been fixed upstream in … [View More]

1 0

[arch-security] [ASA-201609-8] libtorrent-rasterbar: denial of service
by Remi Gacogne 13 Sep '16

13 Sep '16

Arch Linux Security Advisory ASA-201609-8 ========================================= Severity: Low Date : 2016-09-13 CVE-ID : CVE-2016-7164 Package : libtorrent-rasterbar Type : denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package libtorrent-rasterbar before version 1:1.1.1-1 is vulnerable to denial of service. Resolution ========== Upgrade to 1:1.1.1-1. # pacman -Syu "libtorrent-rasterbar>=1:1.1.1-1" The problem has been … [View More]

1 0