The symmetric-key encryption used in Tutanota is vulnerable to ciphertext malleability (a.k.a. arbitrary bit rewriting), since they fail to authenticate their ciphertexts.
Monthly Archives: June 2015
GLSA 201506-01: Adobe Flash Player: Multiple vulnerabilities
Fedora EPEL 7 Security Update: drupal7-7.38-1.el7
Resolved Bugs
1232972 – drupal7-7.38 is available<br
– Release 7.38 is a security fix release
– Upstream release notes: https://www.drupal.org/drupal-7.38-release-notes
Fedora EPEL 5 Security Update: php-htmLawed-1.1.20-1.el5
**1.1.20** – 9 June 2015. Fix for a potential security vulnerability arising from unescaped double-quote character in single-quoted attribute value of some deprecated elements when tag transformation is enabled; recognition for non-(HTML4) standard ‘allowfullscreen’ attribute of ‘iframe.’
Fedora EPEL 5 Security Update: drupal7-7.38-1.el5
Resolved Bugs
1232972 – drupal7-7.38 is available<br
– Release 7.38 is a security fix release
– Upstream release notes: https://www.drupal.org/drupal-7.38-release-notes
Fedora EPEL 7 Security Update: chicken-4.9.0.1-4.el7
Resolved Bugs
1231871 – CVE-2015-4556 chicken: out-of-bounds read in CHICKEN Scheme’s string-translate* procedure<br
Apply patch to work around out of bounds bug: BZ 1231871.
Fedora EPEL 6 Security Update: php-htmLawed-1.1.20-1.el6
**1.1.20** – 9 June 2015. Fix for a potential security vulnerability arising from unescaped double-quote character in single-quoted attribute value of some deprecated elements when tag transformation is enabled; recognition for non-(HTML4) standard ‘allowfullscreen’ attribute of ‘iframe.’
Fedora EPEL 6 Security Update: chicken-4.9.0.1-4.el6
Resolved Bugs
1231871 – CVE-2015-4556 chicken: out-of-bounds read in CHICKEN Scheme’s string-translate* procedure<br
Apply patch to work around out of bounds bug: BZ 1231871.
Fedora EPEL 7 Security Update: php-htmLawed-1.1.20-1.el7
**1.1.20** – 9 June 2015. Fix for a potential security vulnerability arising from unescaped double-quote character in single-quoted attribute value of some deprecated elements when tag transformation is enabled; recognition for non-(HTML4) standard ‘allowfullscreen’ attribute of ‘iframe.’
Fedora EPEL 7 Security Update: cups-x2go-3.0.1.3-1.el7
* New upstream version (3.0.1.2):
– cups-x2go{,.conf}: port to File::Temp. Use Text::ParseWords to split up the ps2pdf command line correctly. Don’t use system() but IPC::Open2::open2(). Capture the ps2pdf program’s stdout and write it to the temporary file handle “manually”. Should fix problems reported by Jan Bi on IRC.
– cups-x2go: fix commented out second ps2pdf definition to output PDF data to stdout.
* New upstream version (3.0.1.3):
– cups-x2go: import tempfile() function from File::Temp module.
– cups-x2go: only repeat the last X, not the whole “.pdfX” string (or the like.)
– cups-x2go: actually print “real” executed command instead of the “original” one with placeholders.
– cups-x2go: read output from ghostscript, don’t write a filehandle to the temporary file. Fixes a hanging ghostscript call and… well… random junk, instead of a “real” PDF file.
– cups-x2go: use parentheses around function arguments.
– cups-x2go: fix binmode() call, :raw layer is implicit.
– cups-x2go: fix print call… Does not allow to separate parameters with a comma.
– cups-x2go: add correct :raw layer to binmode calls.
– cups-x2go: fix tiny typo.
– cups-x2go: read data from GS and STDIN in chunks of 8 kbytes, instead of everything at once. Handles large print jobs gracefully.
– cups-x2go: add parentheses to close() calls.
– cups-x2go: delete PDF and title temporary files automatically.
– cups-x2go: unlink PS temporary file on-demand in END block. Also move closelog to END block, because we want to print diagnosis messages in the END block.
– cups-x2go: don’t use unlink() explicitly. Trust File::Temp and our END block to clean up correctly.
– cups-x2go: there is no continue in perl for stepping forward a loop. Still not. I keep forgetting that. Use next. (Partly) Fixes: #887.
– cups-x2go: use the same temp file template for PS, PDF and title files. Use appropriate suffixes if necessary when generating PDF and title temp files. (Fully) Fixes: #887.
Update to 3.0.1.1:
– Add a short README that provides some getting started information.
Update to 3.0.1.1:
– Add a short README that provides some getting started information.