New upstream bug-fix release which fixes a security flaw in cups-browsed.
Monthly Archives: March 2015
Fedora 21 Security Update: kernel-3.18.8-201.fc21
Resolved Bugs
1196581 – CVE-2015-1421 kernel: net: slab corruption from use after free on INIT collisions
1196595 – CVE-2015-1421 kernel: net: slab corruption from use after free on INIT collisions [fedora-all]
1190947 – Add support for Atheros AR5B195 combo card (the AR3011 bluetooth part)
1190933 – kernel 3.18: read-only root due to journal_async_commit in /etc/fstab
1188439 – Dell XPS 13 9343 (2015) touchpad freeze
1193907 – CVE-2015-0275 kernel: fs: ext4: fallocate zero range page size > block size BUG()
1195178 – CVE-2015-0275 kernel: fs: ext4: fallocate zero range page size > block size BUG() [fedora-all]
1194612 – Please move mptspi.ko.xz (and related modules) to kernel-core
1189864 – kernel: potential memory corruption (denial of service) in vhost/scsi driver
1192079 – kernel: potential memory corruption (denial of service) in vhost/scsi driver [fedora-all]
1192519 – CVE-2015-1593 kernel: Linux stack ASLR implementation Integer overflow
1192520 – kernel: Linux stack ASLR implementation Integer overflow [fedora-all]<br
Update to latest upstream stable release, Linux v3.18.8. Numerous bugfixes across the tree.
Fedora 21 Security Update: jBCrypt-0.4-1.fc21
Fedora 20 Security Update: cups-filters-1.0.53-6.fc20
This fixes a security flaw in cups-browsed.
Fedora 20 Security Update: kernel-3.18.8-100.fc20
Resolved Bugs
1196581 – CVE-2015-1421 kernel: net: slab corruption from use after free on INIT collisions
1196595 – CVE-2015-1421 kernel: net: slab corruption from use after free on INIT collisions [fedora-all]
1190947 – Add support for Atheros AR5B195 combo card (the AR3011 bluetooth part)
1190933 – kernel 3.18: read-only root due to journal_async_commit in /etc/fstab
1188439 – Dell XPS 13 9343 (2015) touchpad freeze
1193907 – CVE-2015-0275 kernel: fs: ext4: fallocate zero range page size > block size BUG()
1195178 – CVE-2015-0275 kernel: fs: ext4: fallocate zero range page size > block size BUG() [fedora-all]
1189864 – kernel: potential memory corruption (denial of service) in vhost/scsi driver
1192079 – kernel: potential memory corruption (denial of service) in vhost/scsi driver [fedora-all]
1192519 – CVE-2015-1593 kernel: Linux stack ASLR implementation Integer overflow
1192520 – kernel: Linux stack ASLR implementation Integer overflow [fedora-all]<br
Update to the latest stable upstream release, Linux v3.18.8. Numerous fixes across the tree.
Fedora 20 Security Update: jBCrypt-0.4-1.fc20
Netcat CMS 5.5 Cross Site Scripting
Netcat CMS version 5.5 suffers from a stored cross site scripting vulnerability.
Source Boston 2015 Call For Papers
Source Boston 2015 has announced its Call For Papers.
CVE-2015-0656
Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269.
CVE-2015-0933
Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a include command.