Ubuntu Security Notice 2917-2 – USN-2917-1 fixed vulnerabilities in Firefox. This update caused several regressions that could result in search engine settings being lost, the list of search providers appearing empty or the location bar breaking after typing an invalid URL. This update fixes the problem. Various other issues were also addressed.
Monthly Archives: April 2016
Debian Security Advisory 3546-1
Debian Linux Security Advisory 3546-1 – Hans Jerry Illikainen discovered that missing input sanitising in the BMP processing code of the optipng PNG optimiser may result in denial of service or the execution of arbitrary code if a malformed file is processed.
Red Hat Security Advisory 2016-0610-01
Red Hat Security Advisory 2016-0610-01 – The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 11.2.202.616. Security Fix: This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content.
Apple Intel HD 3000 Graphics Driver 10.0.0 Privilege Escalation
Apple Intel HD 3000 graphics driver version 10.0.0 suffers from a local privilege escalation vulnerability.
WordPress Multiple Meta Box 1.0 SQL Injection
WordPress Multiple Meta Box plugin version 1.0 suffers from a remote SQL injection vulnerability.
Bugtraq: [SECURITY] [DSA 3546-1] optipng security update
[SECURITY] [DSA 3546-1] optipng security update
Bugtraq: AccelSite Content Manager v1.0 – SQL Injection Vulnerability
AccelSite Content Manager v1.0 – SQL Injection Vulnerability
Bugtraq: JAWS Weak Service Permissions leads to Privilege Escalation
JAWS Weak Service Permissions leads to Privilege Escalation
RHEA-2016:0609-1: new packages: kmod-bnx2x
Red Hat Enterprise Linux: New kmod-bnx2x packages are now available for Red Hat Enterprise Linux 6.
RHSA-2016:0610-1: Critical: flash-plugin security update
Red Hat Enterprise Linux: An update for flash-plugin is now available for Red Hat Enterprise Linux 5
Supplementary and Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of
Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033