Gentoo Linux Security Advisory 201612-42 – Multiple vulnerabilities have been found in Zabbix, the worst of which may allow execution of arbitrary code. Versions less than 2.2.16 are affected.
Monthly Archives: December 2016
Slackware Security Advisory – php Updates
Slackware Security Advisory – New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
Slackware Security Advisory – kernel Updates
Slackware Security Advisory – New kernel packages are available for Slackware 14.2 and -current to fix a security issue.
Gentoo Linux Security Advisory 201612-41
Gentoo Linux Security Advisory 201612-41 – Multiple vulnerabilities have been found in WebKitGTK+, the worst of which may allow execution of arbitrary code. Versions less than 2.4.10-r200 are affected.
Gentoo Linux Security Advisory 201612-32
Gentoo Linux Security Advisory 201612-32 – A heap-based buffer overflow vulnerability in elfutils might allow remote attackers to execute arbitrary code. Versions less than 0.159 are affected.
More Firmware Backdoor Found In Cheap Android Phones
Here’s some bad news for Android users again.
Certain low-cost Android smartphones and tablets are shipped with malicious firmware, which covertly gathers data about the infected devices, displays advertisements on top of running applications and downloads unwanted APK files on the victim’s devices.
Security researchers from Russian antivirus vendor Dr.Web have discovered two types of
CVE-2016-5687
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
CVE-2016-5688
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions.
CVE-2016-5689
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.
CVE-2016-5690
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.