A security issue affects these releases of Ubuntu and its
derivatives:
Ubuntu 15.04
Ubuntu 14.04 LTS
Ubuntu 12.04 LTS
Summary
Expat could be made to crash or run programs as your login if it opened a
specially crafted file.
Software description
expat
– XML parsing C library
Details
It was discovered that Expat incorrectly handled malformed XML data. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service, or possibly execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following
package version:
A security issue affects these releases of Ubuntu and its
derivatives:
Ubuntu 15.04
Summary
GnuTLS could be made to crash or run programs if it processed a specially
crafted certificate.
Software description
gnutls28
– GNU TLS library
Details
It was discovered that GnuTLS incorrectly handled parsing CRL distribution points. A remote attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2015-3308)
Kurt Roeckx discovered that GnuTLS incorrectly handled a long DistinguishedName (DN) entry in a certificate. A remote attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2015-6251)
Update instructions
The problem can be corrected by updating your system to the following
package version:
CentOS Errata and Security Advisory 2015:1695 Important
Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1695.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
8734f41a46e678a9256333fe5fd068cfb3ea94b561340fa54b6230e9fd9e4550 jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm
3c10722f61c4ce7891a0192f09d62bc0326dd58aa109ef718e9348b7e8eee8cb jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm
x86_64:
8734f41a46e678a9256333fe5fd068cfb3ea94b561340fa54b6230e9fd9e4550 jakarta-taglibs-standard-1.1.1-11.7.el6_7.noarch.rpm
3c10722f61c4ce7891a0192f09d62bc0326dd58aa109ef718e9348b7e8eee8cb jakarta-taglibs-standard-javadoc-1.1.1-11.7.el6_7.noarch.rpm
Source:
66f3e729df06bcbb30265e7c31922c23a6fab0590da90973070c7f4402fb7a08 jakarta-taglibs-standard-1.1.1-11.7.el6_7.src.rpm
CentOS Errata and Security Advisory 2015:1700 Important
Upstream details at : https://rhn.redhat.com/errata/RHSA-2015-1700.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
04d8c7473ff56d13b5c9599c685fd5535cfc973bdcd3c7c30e5a662ae0e2942b pcs-0.9.139-9.el6_7.1.i686.rpm
x86_64:
1b6670c2ec2b6b546d4b469c84b2db0f1cde3ca2a66cc085c4579ff546568628 pcs-0.9.139-9.el6_7.1.x86_64.rpm
Source:
6cc0bd0e3344f93909e8cf16e70a23093cdd1a81fdcb9165d8ce6e3da7625538 pcs-0.9.139-9.el6_7.1.src.rpm
Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.