SECURITY

No Image

RHEA-2017:2873-1: gcc-libraries bug fix and enhancement update

2017-10-11 KENNETH 0

RHEA-2017:2873-1: gcc-libraries bug fix and enhancement update Red Hat Enterprise Linux: Updated gcc-libraries packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Source: RHEA-2017:2873-1: gcc-libraries bug fix and enhancement update

No Image

October 2017 security update release

2017-10-11 KENNETH 0

October 2017 security update release Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this month’s security updates can be found in the Security Update Guide. Source: October 2017 security update release

No Image

USN-3441-1: curl vulnerabilities

2017-10-11 KENNETH 0

USN-3441-1: curl vulnerabilities Ubuntu Security Notice USN-3441-1 10th October, 2017 curl vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in curl. Software description curl – HTTP, HTTPS, and FTP client and client libraries Details Daniel Stenberg discovered that curl incorrectly handled large floatingpoint output. A remote attacker could use this issue to cause curl tocrash, resulting in a denial of service, or possibly execute arbitrarycode. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.(CVE-2016-9586) Even Rouault discovered that curl incorrectly handled large file names whendoing TFTP transfers. A remote attacker could use this issue to cause curlto crash, resulting in a denial of service, or possibly obtain sensitivememory contents. (CVE-2017-1000100) Brian Carpenter and Yongji Ouyang discovered that curl incorrectly handlednumerical [ more… ]

No Image

USN-3442-1: libXfont vulnerabilities

2017-10-11 KENNETH 0

USN-3442-1: libXfont vulnerabilities Ubuntu Security Notice USN-3442-1 10th October, 2017 libxfont, libxfont1, libxfont2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in libXfont. Software description libxfont – X11 font rasterisation library libxfont1 – X11 font rasterisation library libxfont2 – X11 font rasterisation library Details It was discovered that libXfont incorrectly handled certain patterns inPatternMatch. A local attacker could use this issue to cause libXfont tocrash, resulting in a denial of service, or possibly obtain sensitiveinformation. (CVE-2017-13720) It was discovered that libXfont incorrectly handled certain malformed PCFfiles. A local attacker could use this issue to cause libXfont to crash,resulting in a denial of service, or possibly obtain sensitive information.(CVE-2017-13722) Update instructions The problem can be corrected by updating your system to the following [ more… ]