Monthly Archives: April 2015

CentOS

CEEA-2015:0913 CentOS 5 tzdata Enhancement Update

CentOS Errata and Enhancement Advisory 2015:0913 

Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

i386:
8387fba89796124258e17bcea37cc9aa891f272170df2d4ed52b993d9e4eecce  tzdata-2015d-1.el5.i386.rpm
cab6bde88543bd51b4ba52e7a9fa77e4183cc5657ae7e36f1db3f1d205270af6  tzdata-java-2015d-1.el5.i386.rpm

x86_64:
13531800faae15e1fe2b4421ebafe34ad9900d0de0dba928b27aa41b32c2e05e  tzdata-2015d-1.el5.x86_64.rpm
849a0357c2d8ed582ad308776007df85bff2f9b08e407e60de0cc53a5487dadd  tzdata-java-2015d-1.el5.x86_64.rpm

Source:
71176448e8dce2b5fb872615cdc49be8854bba5c648b6a2156e500a2ec501f48  tzdata-2015d-1.el5.src.rpm
CentOS

CESA-2015:0895 Important CentOS 7 389-ds-baseSecurity Update

CentOS Errata and Security Advisory 2015:0895 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-0895.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

x86_64:
0b695f877ea66c6ba7cb15d35f743d2cdb7d26b3c2ad7da7bf5ef716e7dd7a17  389-ds-base-1.3.3.1-16.el7_1.x86_64.rpm
eaed7a4bf2c0822c4fee1690b818d9bb5184c3e417e6473a663d060c01c83a5d  389-ds-base-devel-1.3.3.1-16.el7_1.x86_64.rpm
5dd1ceb2c16799fd72ee1d9d79b934bdff6294dbe7e3dc605393701d6dd0ffa1  389-ds-base-libs-1.3.3.1-16.el7_1.x86_64.rpm

Source:
a5c1801f6621b7d79263c1df4d28afd00ff3ec2f6abc0f2faea373bcfcf70eb3  389-ds-base-1.3.3.1-16.el7_1.src.rpm
CentOS

CEEA-2015:0913 CentOS 7 tzdata Enhancement Update

CentOS Errata and Enhancement Advisory 2015:0913 

Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0913.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( sha256sum Filename ) 

x86_64:
9926c46800be11c474b10719b9935229019201c195e4debb0da4bfab5ff5ec8e  tzdata-2015d-1.el7.noarch.rpm
95551f69c3f204b9a7c279698a69b93075f59d82866f7e929b11d8ab60a1fcff  tzdata-java-2015d-1.el7.noarch.rpm

Source:
c733876d95f1e111fe2cb11a0628b09a10d82f539e299ef2358f11c8d868d3cf  tzdata-2015d-1.el7.src.rpm
Ubuntu

USN-2581-1: NetworkManager vulnerability

Ubuntu Security Notice USN-2581-1

28th April, 2015

network-manager vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

  • Ubuntu (vivid)
  • Ubuntu 14.10
  • Ubuntu 14.04 LTS

Summary

NetworkManager would allow unintended access to files and modem device
configuration.

Software description

  • network-manager
    – Network connection manager

Details

Tavis Ormandy discovered that NetworkManager incorrectly filtered paths
when requested to read modem device contexts. A local attacker could
possibly use this issue to bypass privileges and manipulate modem device
configuration or read arbitrary files.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu (vivid):
network-manager

0.9.10.0-4ubuntu15.1
Ubuntu 14.10:
network-manager

0.9.8.8-0ubuntu28.1
Ubuntu 14.04 LTS:
network-manager

0.9.8.8-0ubuntu7.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

CVE-2015-1322