VARIoT IoT vulnerabilities database
| VAR-201507-0517 | CVE-2015-4290 | Mac OS X Run on Cisco AnyConnect Secure Mobility Client Service disruption in the kernel extension (DoS) Vulnerabilities |
CVSS V2: 4.9 CVSS V3: - Severity: MEDIUM |
The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255. Vendors have confirmed this vulnerability Bug ID CSCut12255 It is released as.Local user disrupts service operation due to problems with adjacent memory areas ( panic ) There is a possibility of being put into a state. Cisco AnyConnect Secure Mobility Client is prone to a local denial-of-service vulnerability.
A local attacker can exploit this issue to cause a denial-of-service condition.
This issue is being tracked by Cisco bug ID CSCut12255
| VAR-201507-0037 | CVE-2015-5477 |
ISC BIND CVE-2015-5477 Remote Denial of Service Vulnerability
Related entries in the VARIoT exploits database: VAR-E-201505-0004, VAR-E-201505-0003, VAR-E-201505-0002 |
CVSS V2: 7.8 CVSS V3: - Severity: HIGH |
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. ISC BIND is prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to cause a denial-of-service. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Important: bind security update
Advisory ID: RHSA-2015:1513-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1513.html
Issue date: 2015-07-28
CVE Names: CVE-2015-5477
=====================================================================
1. Summary:
Updated bind packages that fix one security issue are now available for Red
Hat Enterprise Linux 6 and 7.
Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Client (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - noarch, x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64
Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64
Red Hat Enterprise Linux HPC Node (v. 6) - x86_64
Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64
Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64
Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64
3. Description:
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.
A flaw was found in the way BIND handled requests for TKEY DNS resource
records. A remote attacker could use this flaw to make named (functioning
as an authoritative DNS server or a DNS resolver) exit unexpectedly with an
assertion failure via a specially crafted DNS request packet.
(CVE-2015-5477)
Red Hat would like to thank ISC for reporting this issue. Upstream
acknowledges Jonathan Foote as the original reporter.
All bind users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the BIND daemon (named) will be restarted automatically.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1247361 - CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service
6. Package List:
Red Hat Enterprise Linux Desktop (v. 6):
Source:
bind-9.8.2-0.37.rc1.el6_7.2.src.rpm
i386:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.i686.rpm
x86_64:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux Desktop Optional (v. 6):
i386:
bind-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.i686.rpm
x86_64:
bind-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux HPC Node (v. 6):
Source:
bind-9.8.2-0.37.rc1.el6_7.2.src.rpm
x86_64:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux HPC Node Optional (v. 6):
x86_64:
bind-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source:
bind-9.8.2-0.37.rc1.el6_7.2.src.rpm
i386:
bind-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.i686.rpm
ppc64:
bind-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.ppc.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.ppc.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
s390x:
bind-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.s390.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.s390.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
x86_64:
bind-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 6):
i386:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.i686.rpm
ppc64:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.ppc.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.ppc.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.ppc64.rpm
s390x:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.s390.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.s390.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.s390x.rpm
x86_64:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source:
bind-9.8.2-0.37.rc1.el6_7.2.src.rpm
i386:
bind-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.i686.rpm
x86_64:
bind-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-chroot-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-libs-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-utils-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 6):
i386:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.i686.rpm
x86_64:
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-debuginfo-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.i686.rpm
bind-devel-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
bind-sdb-9.8.2-0.37.rc1.el6_7.2.x86_64.rpm
Red Hat Enterprise Linux Client (v. 7):
Source:
bind-9.9.4-18.el7_1.3.src.rpm
noarch:
bind-license-9.9.4-18.el7_1.3.noarch.rpm
x86_64:
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-9.9.4-18.el7_1.3.i686.rpm
bind-libs-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-lite-9.9.4-18.el7_1.3.i686.rpm
bind-libs-lite-9.9.4-18.el7_1.3.x86_64.rpm
bind-utils-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux Client Optional (v. 7):
x86_64:
bind-9.9.4-18.el7_1.3.x86_64.rpm
bind-chroot-9.9.4-18.el7_1.3.x86_64.rpm
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-devel-9.9.4-18.el7_1.3.i686.rpm
bind-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-lite-devel-9.9.4-18.el7_1.3.i686.rpm
bind-lite-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-chroot-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux ComputeNode (v. 7):
Source:
bind-9.9.4-18.el7_1.3.src.rpm
noarch:
bind-license-9.9.4-18.el7_1.3.noarch.rpm
x86_64:
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-9.9.4-18.el7_1.3.i686.rpm
bind-libs-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-lite-9.9.4-18.el7_1.3.i686.rpm
bind-libs-lite-9.9.4-18.el7_1.3.x86_64.rpm
bind-utils-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux ComputeNode Optional (v. 7):
x86_64:
bind-9.9.4-18.el7_1.3.x86_64.rpm
bind-chroot-9.9.4-18.el7_1.3.x86_64.rpm
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-devel-9.9.4-18.el7_1.3.i686.rpm
bind-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-lite-devel-9.9.4-18.el7_1.3.i686.rpm
bind-lite-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-chroot-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source:
bind-9.9.4-18.el7_1.3.src.rpm
noarch:
bind-license-9.9.4-18.el7_1.3.noarch.rpm
ppc64:
bind-9.9.4-18.el7_1.3.ppc64.rpm
bind-chroot-9.9.4-18.el7_1.3.ppc64.rpm
bind-debuginfo-9.9.4-18.el7_1.3.ppc.rpm
bind-debuginfo-9.9.4-18.el7_1.3.ppc64.rpm
bind-libs-9.9.4-18.el7_1.3.ppc.rpm
bind-libs-9.9.4-18.el7_1.3.ppc64.rpm
bind-libs-lite-9.9.4-18.el7_1.3.ppc.rpm
bind-libs-lite-9.9.4-18.el7_1.3.ppc64.rpm
bind-utils-9.9.4-18.el7_1.3.ppc64.rpm
s390x:
bind-9.9.4-18.el7_1.3.s390x.rpm
bind-chroot-9.9.4-18.el7_1.3.s390x.rpm
bind-debuginfo-9.9.4-18.el7_1.3.s390.rpm
bind-debuginfo-9.9.4-18.el7_1.3.s390x.rpm
bind-libs-9.9.4-18.el7_1.3.s390.rpm
bind-libs-9.9.4-18.el7_1.3.s390x.rpm
bind-libs-lite-9.9.4-18.el7_1.3.s390.rpm
bind-libs-lite-9.9.4-18.el7_1.3.s390x.rpm
bind-utils-9.9.4-18.el7_1.3.s390x.rpm
x86_64:
bind-9.9.4-18.el7_1.3.x86_64.rpm
bind-chroot-9.9.4-18.el7_1.3.x86_64.rpm
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-9.9.4-18.el7_1.3.i686.rpm
bind-libs-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-lite-9.9.4-18.el7_1.3.i686.rpm
bind-libs-lite-9.9.4-18.el7_1.3.x86_64.rpm
bind-utils-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source:
bind-9.9.4-18.ael7b_1.3.src.rpm
noarch:
bind-license-9.9.4-18.ael7b_1.3.noarch.rpm
ppc64le:
bind-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-chroot-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-debuginfo-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-libs-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-libs-lite-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-utils-9.9.4-18.ael7b_1.3.ppc64le.rpm
Red Hat Enterprise Linux Server Optional (v. 7):
ppc64:
bind-debuginfo-9.9.4-18.el7_1.3.ppc.rpm
bind-debuginfo-9.9.4-18.el7_1.3.ppc64.rpm
bind-devel-9.9.4-18.el7_1.3.ppc.rpm
bind-devel-9.9.4-18.el7_1.3.ppc64.rpm
bind-lite-devel-9.9.4-18.el7_1.3.ppc.rpm
bind-lite-devel-9.9.4-18.el7_1.3.ppc64.rpm
bind-sdb-9.9.4-18.el7_1.3.ppc64.rpm
bind-sdb-chroot-9.9.4-18.el7_1.3.ppc64.rpm
s390x:
bind-debuginfo-9.9.4-18.el7_1.3.s390.rpm
bind-debuginfo-9.9.4-18.el7_1.3.s390x.rpm
bind-devel-9.9.4-18.el7_1.3.s390.rpm
bind-devel-9.9.4-18.el7_1.3.s390x.rpm
bind-lite-devel-9.9.4-18.el7_1.3.s390.rpm
bind-lite-devel-9.9.4-18.el7_1.3.s390x.rpm
bind-sdb-9.9.4-18.el7_1.3.s390x.rpm
bind-sdb-chroot-9.9.4-18.el7_1.3.s390x.rpm
x86_64:
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-devel-9.9.4-18.el7_1.3.i686.rpm
bind-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-lite-devel-9.9.4-18.el7_1.3.i686.rpm
bind-lite-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-chroot-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 7):
ppc64le:
bind-debuginfo-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-devel-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-lite-devel-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-sdb-9.9.4-18.ael7b_1.3.ppc64le.rpm
bind-sdb-chroot-9.9.4-18.ael7b_1.3.ppc64le.rpm
Red Hat Enterprise Linux Workstation (v. 7):
Source:
bind-9.9.4-18.el7_1.3.src.rpm
noarch:
bind-license-9.9.4-18.el7_1.3.noarch.rpm
x86_64:
bind-9.9.4-18.el7_1.3.x86_64.rpm
bind-chroot-9.9.4-18.el7_1.3.x86_64.rpm
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-9.9.4-18.el7_1.3.i686.rpm
bind-libs-9.9.4-18.el7_1.3.x86_64.rpm
bind-libs-lite-9.9.4-18.el7_1.3.i686.rpm
bind-libs-lite-9.9.4-18.el7_1.3.x86_64.rpm
bind-utils-9.9.4-18.el7_1.3.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 7):
x86_64:
bind-debuginfo-9.9.4-18.el7_1.3.i686.rpm
bind-debuginfo-9.9.4-18.el7_1.3.x86_64.rpm
bind-devel-9.9.4-18.el7_1.3.i686.rpm
bind-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-lite-devel-9.9.4-18.el7_1.3.i686.rpm
bind-lite-devel-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-9.9.4-18.el7_1.3.x86_64.rpm
bind-sdb-chroot-9.9.4-18.el7_1.3.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-5477
https://access.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFVuCBAXlSAg2UNWIIRApEkAJ9P0OHgik/kkBRgXJ4YnHQ+twrw1wCgpWRM
77IQ31eFv/9qlY2vcXleBMA=
=Jhz9
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
.
Release Date: 2015-08-18
Last Updated: 2015-08-18
Potential Security Impact: Remote Denial of Service (DoS)
Source: Hewlett-Packard Company, HP Software Security Response Team
VULNERABILITY SUMMARY
A potential security vulnerability has been identified with HP-UX running
BIND. This vulnerability could be exploited remotely to create a Denial of
Service (DoS).
References:
CVE-2015-5477
CVE-2014-8500
SSRT102211
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
HP-UX B.11.11 running BIND 9.3.2 prior to C.9.3.2.14.0
HP-UX B.11.23 running BIND 9.3.2 prior to C.9.3.2.14.0
BACKGROUND
CVSS 2.0 Base Metrics
===========================================================
Reference Base Vector Base Score
CVE-2015-5477 (AV:N/AC:L/Au:N/C:N/I:N/A:C) 7.8
CVE-2014-8500 (AV:N/AC:L/Au:N/C:N/I:N/A:C) 7.8
===========================================================
Information on CVSS is documented
in HP Customer Notice: HPSN-2008-002
RESOLUTION
HP has provided updated versions of the BIND service to resolve this
vulnerability.
BIND 9.3.2 for HP-UX Release
Depot Name
Download location
B.11.11 (PA and IA)
HP_UX_11.11_DNSUPGRADE_C.9.3.2.14.0_HP-UX_B.11.11_32_64.depot
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumbe
r=BIND
BIND 9.3.2 for HP-UX Release
Depot Name
Download location
B.11.23 (PA and IA)
HP_UX_11.23_DNSUPGRADE_C.9.3.2.14.0_HP-UX_B.11.23_IA_PA.depot
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumbe
r=BIND
MANUAL ACTIONS: Yes - Update
Download and install the software update
PRODUCT SPECIFIC INFORMATION
HP-UX Software Assistant: HP-UX Software Assistant is an enhanced application
that replaces HP-UX Security Patch Check. It analyzes all Security Bulletins
issued by HP and lists recommended actions that may apply to a specific HP-UX
system. It can also download patches and create a depot automatically. For
more information see: https://www.hp.com/go/swa
The following text is for use by the HP-UX Software Assistant.
AFFECTED VERSIONS
HP-UX B.11.11
==================
BindUpgrade.BIND-UPGRADE
action: install revision C.9.3.2.14.0 or subsequent
HP-UX B.11.23
==================
BindUpgrade.BIND-UPGRADE
BindUpgrade.BIND2-UPGRADE
action: install revision C.9.3.2.14.0 or subsequent
END AFFECTED VERSIONS
HISTORY
Version:1 (rev.1) - 18 August 2015 Initial release
Third Party Security Patches: Third party security patches that are to be
installed on systems running HP software products should be applied in
accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security
Bulletin, contact normal HP Services support channel. For other issues about
the content of this Security Bulletin, send e-mail to security-alert@hp.com.
Report: To report a potential security vulnerability with any HP supported
product, send Email to: security-alert@hp.com
Subscribe: To initiate a subscription to receive future HP Security Bulletin
alerts via Email:
http://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins
Security Bulletin Archive: A list of recently released Security Bulletins is
available here:
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/
Software Product Category: The Software Product Category is represented in
the title by the two characters following HPSB.
3C = 3COM
3P = 3rd Party Software
GN = HP General Software
HF = HP Hardware and Firmware
MP = MPE/iX
MU = Multi-Platform Software
NS = NonStop Servers
OV = OpenVMS
PI = Printing and Imaging
PV = ProCurve
ST = Storage Software
TU = Tru64 UNIX
UX = HP-UX
Copyright 2015 Hewlett-Packard Development Company, L.P.
Hewlett-Packard Company shall not be liable for technical or editorial errors
or omissions contained herein. The information provided is provided "as is"
without warranty of any kind. To the extent permitted by law, neither HP or
its affiliates, subcontractors or suppliers will be liable for
incidental,special or consequential damages including downtime cost; lost
profits; damages relating to the procurement of substitute products or
services; or damages for loss of data, or software restoration. The
information in this document is subject to change without notice.
Hewlett-Packard Company and the names of Hewlett-Packard products referenced
herein are trademarks of Hewlett-Packard Company in the United States and
other countries. Other product and company names mentioned herein may be
trademarks of their respective owners. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-15:17.bind Security Advisory
The FreeBSD Project
Topic: BIND remote denial of service vulnerability
Category: contrib
Module: bind
Announced: 2015-07-28
Credits: ISC
Affects: FreeBSD 8.x and FreeBSD 9.x.
Corrected: 2015-07-28 19:58:54 UTC (stable/9, 9.3-STABLE)
2015-07-28 19:59:22 UTC (releng/9.3, 9.3-RELEASE-p21)
2015-07-28 19:58:54 UTC (stable/8, 8.4-STABLE)
2015-07-28 19:59:22 UTC (releng/8.4, 8.4-RELEASE-p35)
CVE Name: CVE-2015-5477
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
II.
III. Impact
A remote attacker can trigger a crash of a name server. Both recursive and
authoritative servers are affected, and the exposure can not be mitigated
by either ACLs or configuration options limiting or denying service because
the exploitable code occurs early in the packet handling, before checks
enforcing those boundaries.
IV. Workaround
No workaround is available, but systems that are not running BIND are not
vulnerable.
V. Solution
Perform one of the following:
1) Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date. A reboot is
recommended but not required.
2) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
The named service has to be restarted after the update. A reboot is
recommended but not required.
3) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/SA-15:17/bind.patch
# fetch https://security.FreeBSD.org/patches/SA-15:17/bind.patch.asc
# gpg --verify bind.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
Restart the applicable daemons, or reboot the system.
VI. Correction details
The following list contains the correction revision numbers for each
affected branch.
Branch/path Revision
- -------------------------------------------------------------------------
stable/8/ r285977
releng/8.4/ r285980
stable/9/ r285977
releng/9.3/ r285980
- -------------------------------------------------------------------------
To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. This issue was addressed by updating BIND to version
9.9.7-P2.
CVE-ID
CVE-2015-5477
OS X Server v4.1.5 may be obtained from the Mac App Store. 5 client) - i386, x86_64
3.
VCX prior to 9.8.18 with OpenSSH or ISC BIND.
+ VCX 9.8.18 for the following Products/SKUs:
- J9672A HP VCX V7205 Platform w/ DL360 G7 Srvr
- J9668A HP VCX IPC V7005 Pltfrm w/ DL120 G6 Srvr
- JC517A HP VCX V7205 Platform w/DL 360 G6 Server
- JE355A HP VCX V6000 Branch Platform 9.0
- JC516A HP VCX V7005 Platform w/DL 120 G6 Server
- JC518A HP VCX Connect 200 Primry 120 G6 Server
- J9669A HP VCX IPC V7310 Pltfrm w/ DL360 G7 Srvr
- JE341A HP VCX Connect 100 Secondary
- JE252A HP VCX Connect Primary MIM Module
- JE253A HP VCX Connect Secondary MIM Module
- JE254A HP VCX Branch MIM Module
- JE355A HP VCX V6000 Branch Platform 9.0
- JD028A HP MS30-40 RTR w/VCX + T1/FXO/FXS/Mod
- JD023A HP MSR30-40 Router with VCX MIM Module
- JD024A HP MSR30-16 RTR w/VCX Ent Br Com MIM
- JD025A HP MSR30-16 RTR w/VCX + 4FXO/2FXS Mod
- JD026A HP MSR30-16 RTR w/VCX + 8FXO/4FXS Mod
- JD027A HP MSR30-16 RTR w/VCX + 8BRI/4FXS Mod
- JD029A HP MSR30-16 RTR w/VCX + E1/4BRI/4FXS
- JE340A HP VCX Connect 100 Pri Server 9.0
- JE342A HP VCX Connect 100 Sec Server 9.0
HISTORY
Version:1 (rev.1) - 28 January 2016 Initial release
Third Party Security Patches: Third party security patches that are to be
installed on systems running Hewlett Packard Enterprise (HPE) software
products should be applied in accordance with the customer's patch management
policy.
Platform
Patch Kit Name
Alpha OpenVMS V8.4
QXCM1001434254_4652022589_2015-08-28.BCK
ITANIUM OpenVMS V8.4
QXCM1001434254_4652022589_2015-08-28.BCK
NOTE: Please contact OpenVMS Technical Support to request these patch kits.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-dns/bind < 9.10.2_p4 >= 9.10.2_p4
Description
===========
A vulnerability has been discovered in BIND's named utility leading to
a Denial of Service condition.
Impact
======
A remote attacker may be able to cause Denial of Service condition via
specially constructed zone data.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All BIND users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dns/bind-9.10.2_p4"
References
==========
[ 1 ] CVE-2015-1349
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-1349
[ 2 ] CVE-2015-4620
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4620
[ 3 ] CVE-2015-5477
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5477
[ 4 ] CVE-2015-5722
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5722
[ 5 ] CVE-2015-5986
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5986
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201510-01
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2015 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
| VAR-201603-0003 | CVE-2015-7551 | Apple OS X Distributed by such products Ruby of ext/fiddle/handle.c of Fiddle::Handle Vulnerabilities in arbitrary code execution |
CVSS V2: 4.6 CVSS V3: 8.4 Severity: HIGH |
The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library. NOTE: this vulnerability exists because of a CVE-2009-5147 regression. Ruby is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Apple OS X is a dedicated operating system developed by Apple for Mac computers. The following products and versions are affected: Ruby prior to 2.0.0-p648, 2.1 prior to 2.1.8, 2.2 prior to 2.2.4, and Apple OS X prior to 10.11.4. (Note: This issue was originally fixed in the CNNVD-201508-060 patch, but reappeared after DL was implemented using Fiddle and libffi). -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Important: rh-ruby22-ruby security, bug fix, and enhancement update
Advisory ID: RHSA-2018:0583-01
Product: Red Hat Software Collections
Advisory URL: https://access.redhat.com/errata/RHSA-2018:0583
Issue date: 2018-03-26
CVE Names: CVE-2009-5147 CVE-2015-7551 CVE-2017-0898
CVE-2017-0899 CVE-2017-0900 CVE-2017-0901
CVE-2017-0902 CVE-2017-0903 CVE-2017-10784
CVE-2017-14033 CVE-2017-14064 CVE-2017-17405
CVE-2017-17790
=====================================================================
1. Summary:
An update for rh-ruby22-ruby is now available for Red Hat Software
Collections.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64
3. Description:
Ruby is an extensible, interpreted, object-oriented, scripting language. It
has features to process text files and to perform system management tasks.
The following packages have been upgraded to a later upstream version:
rh-ruby22-ruby (2.2.9), rh-ruby22-rubygems (2.4.5.4),
rh-ruby22-rubygem-psych (2.0.8.1), rh-ruby22-rubygem-json (1.8.1.1).
(BZ#1549646)
Security Fix(es):
* ruby: Command injection vulnerability in Net::FTP (CVE-2017-17405)
* ruby: Buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898)
* rubygems: Arbitrary file overwrite due to incorrect validation of
specification name (CVE-2017-0901)
* rubygems: DNS hijacking vulnerability (CVE-2017-0902)
* rubygems: Unsafe object deserialization through YAML formatted gem
specifications (CVE-2017-0903)
* ruby: Escape sequence injection vulnerability in the Basic authentication
of WEBrick (CVE-2017-10784)
* ruby: Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033)
* ruby: DL::dlopen could open a library with tainted library name
(CVE-2009-5147, CVE-2015-7551)
* rubygems: Escape sequence in the "summary" field of gemspec
(CVE-2017-0899)
* rubygems: No size limit in summary length of gem spec (CVE-2017-0900)
* ruby: Arbitrary heap exposure during a JSON.generate call
(CVE-2017-14064)
* ruby: Command injection in lib/resolv.rb:lazy_initialize() allows
arbitrary code execution (CVE-2017-17790)
For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.
4. Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1248935 - CVE-2009-5147 CVE-2015-7551 ruby: DL::dlopen could open a library with tainted library name
1487552 - CVE-2017-14064 ruby: Arbitrary heap exposure during a JSON.generate call
1487587 - CVE-2017-0901 rubygems: Arbitrary file overwrite due to incorrect validation of specification name
1487588 - CVE-2017-0900 rubygems: No size limit in summary length of gem spec
1487589 - CVE-2017-0902 rubygems: DNS hijacking vulnerability
1487590 - CVE-2017-0899 rubygems: Escape sequence in the "summary" field of gemspec
1491866 - CVE-2017-14033 ruby: Buffer underrun in OpenSSL ASN1 decode
1492012 - CVE-2017-10784 ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick
1492015 - CVE-2017-0898 ruby: Buffer underrun vulnerability in Kernel.sprintf
1500488 - CVE-2017-0903 rubygems: Unsafe object deserialization through YAML formatted gem specifications
1526189 - CVE-2017-17405 ruby: Command injection vulnerability in Net::FTP
1528218 - CVE-2017-17790 ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
1549646 - Rebase to the latest Ruby 2.2 point release
6. Package List:
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6):
Source:
rh-ruby22-ruby-2.2.9-19.el6.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el6.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el6.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el6.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el6.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el6.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el6.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el6.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el6.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el6.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el6.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el6.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el6.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el6.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el6.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7):
Source:
rh-ruby22-ruby-2.2.9-19.el6.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el6.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el6.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el6.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el6.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el6.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el6.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el6.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el6.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el6.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el6.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el6.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el6.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el6.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el6.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6):
Source:
rh-ruby22-ruby-2.2.9-19.el6.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el6.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el6.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el6.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el6.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el6.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el6.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el6.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el6.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el6.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el6.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el6.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el6.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el6.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el6.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el6.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):
Source:
rh-ruby22-ruby-2.2.9-19.el7.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el7.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el7.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el7.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el7.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el7.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el7.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el7.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el7.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el7.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el7.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el7.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el7.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3):
Source:
rh-ruby22-ruby-2.2.9-19.el7.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el7.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el7.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el7.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el7.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el7.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el7.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el7.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el7.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el7.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el7.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el7.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el7.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4):
Source:
rh-ruby22-ruby-2.2.9-19.el7.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el7.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el7.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el7.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el7.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el7.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el7.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el7.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el7.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el7.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el7.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el7.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el7.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):
Source:
rh-ruby22-ruby-2.2.9-19.el7.src.rpm
noarch:
rh-ruby22-ruby-doc-2.2.9-19.el7.noarch.rpm
rh-ruby22-ruby-irb-2.2.9-19.el7.noarch.rpm
rh-ruby22-rubygem-minitest-5.4.3-19.el7.noarch.rpm
rh-ruby22-rubygem-power_assert-0.2.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rake-10.4.2-19.el7.noarch.rpm
rh-ruby22-rubygem-rdoc-4.2.0-19.el7.noarch.rpm
rh-ruby22-rubygem-test-unit-3.0.8-19.el7.noarch.rpm
rh-ruby22-rubygems-devel-2.4.5.4-19.el7.noarch.rpm
x86_64:
rh-ruby22-ruby-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-debuginfo-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-devel-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-libs-2.2.9-19.el7.x86_64.rpm
rh-ruby22-ruby-tcltk-2.2.9-19.el7.x86_64.rpm
rh-ruby22-rubygem-bigdecimal-1.2.6-19.el7.x86_64.rpm
rh-ruby22-rubygem-io-console-0.4.3-19.el7.x86_64.rpm
rh-ruby22-rubygem-json-1.8.1.1-19.el7.x86_64.rpm
rh-ruby22-rubygem-psych-2.0.8.1-19.el7.x86_64.rpm
rh-ruby22-rubygems-2.4.5.4-19.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2009-5147
https://access.redhat.com/security/cve/CVE-2015-7551
https://access.redhat.com/security/cve/CVE-2017-0898
https://access.redhat.com/security/cve/CVE-2017-0899
https://access.redhat.com/security/cve/CVE-2017-0900
https://access.redhat.com/security/cve/CVE-2017-0901
https://access.redhat.com/security/cve/CVE-2017-0902
https://access.redhat.com/security/cve/CVE-2017-0903
https://access.redhat.com/security/cve/CVE-2017-10784
https://access.redhat.com/security/cve/CVE-2017-14033
https://access.redhat.com/security/cve/CVE-2017-14064
https://access.redhat.com/security/cve/CVE-2017-17405
https://access.redhat.com/security/cve/CVE-2017-17790
https://access.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2018 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFauMCwXlSAg2UNWIIRAt7+AKCI6oUS1rfveUw8jicxIi6EpIyH4wCgqBO0
GhFJ0ZG9kuNetqyols+muU4=
=ZJq+
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update
2016-002
OS X El Capitan 10.11.4 and Security Update 2016-002 is now available
and addresses the following:
apache_mod_php
Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,
and OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted .png file may lead to
arbitrary code execution
Description: Multiple vulnerabilities existed in libpng versions
prior to 1.6.20. These were addressed by updating libpng to version
1.6.20.
CVE-ID
CVE-2015-8126 : Adam Mariš
CVE-2015-8472 : Adam Mariš
AppleRAID
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory corruption issue was addressed through
improved input validation.
CVE-ID
CVE-2016-1733 : Proteas of Qihoo 360 Nirvan Team
AppleRAID
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: A local user may be able to determine kernel memory layout
Description: An out-of-bounds read issue existed that led to the
disclosure of kernel memory. This was addressed through improved
input validation.
CVE-ID
CVE-2016-1732 : Proteas of Qihoo 360 Nirvan Team
AppleUSBNetworking
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory corruption issue existed in the parsing of
data from USB devices. This issue was addressed through improved
input validation.
CVE-ID
CVE-2016-1734 : Andrea Barisani and Andrej Rosano of Inverse Path
Bluetooth
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1735 : Jeonghoon Shin@A.D.D
CVE-2016-1736 : beist and ABH of BoB
Carbon
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted .dfont file may lead to
arbitrary code execution
Description: Multiple memory corruption issues existed in the
handling of font files. These issues were addressed through improved
bounds checking.
CVE-ID
CVE-2016-1737 : an anonymous researcher
dyld
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An attacker may tamper with code-signed applications to
execute arbitrary code in the application's context
Description: A code signing verification issue existed in dyld. This
issue was addressed with improved validation.
CVE-ID
CVE-2016-1738 : beist and ABH of BoB
FontParser
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Opening a maliciously crafted PDF file may lead to an
unexpected application termination or arbitrary code execution
Description: A memory corruption issue was addressed through
improved memory handling.
CVE-ID
CVE-2016-1740 : HappilyCoded (ant4g0nist and r3dsm0k3) working with
Trend Micro's Zero Day Initiative (ZDI)
HTTPProtocol
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: A remote attacker may be able to execute arbitrary code
Description: Multiple vulnerabilities existed in nghttp2 versions
prior to 1.6.0, the most serious of which may have led to remote code
execution. These were addressed by updating nghttp2 to version 1.6.0.
CVE-ID
CVE-2015-8659
Intel Graphics Driver
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1743 : Piotr Bania of Cisco Talos
CVE-2016-1744 : Ian Beer of Google Project Zero
IOFireWireFamily
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: A local user may be able to cause a denial of service
Description: A null pointer dereference was addressed through
improved validation.
CVE-ID
CVE-2016-1745 : sweetchip of Grayhash
IOGraphics
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory corruption issue was addressed through
improved input validation.
CVE-ID
CVE-2016-1746 : Peter Pi of Trend Micro working with Trend Micro's
Zero Day Initiative (ZDI)
CVE-2016-1747 : Juwei Lin of Trend Micro working with Trend Micro's
Zero Day Initiative (ZDI)
IOHIDFamily
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to determine kernel memory layout
Description: A memory corruption issue was addressed through
improved memory handling.
CVE-ID
CVE-2016-1748 : Brandon Azad
IOUSBFamily
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1749 : Ian Beer of Google Project Zero and Juwei Lin of
Trend Micro working with Trend Micro's Zero Day Initiative (ZDI)
Kernel
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A use after free issue was addressed through improved
memory management. This was addressed through improved state handling.
CVE-ID
CVE-2016-1757 : Ian Beer of Google Project Zero and Pedro Vilaca
Kernel
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A null pointer dereference was addressed through
improved input validation.
CVE-ID
CVE-2016-1756 : Lufeng Li of Qihoo 360 Vulcan Team
Kernel
Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,
and OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1754 : Lufeng Li of Qihoo 360 Vulcan Team
CVE-2016-1755 : Ian Beer of Google Project Zero
CVE-2016-1759 : lokihardt
Kernel
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to determine kernel memory layout
Description: An out-of-bounds read issue existed that led to the
disclosure of kernel memory. This was addressed through improved
input validation.
CVE-ID
CVE-2016-1758 : Brandon Azad
Kernel
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: Multiple integer overflows were addressed through
improved input validation.
CVE-ID
CVE-2016-1753 : Juwei Lin Trend Micro working with Trend Micro's Zero
Day Initiative (ZDI)
Kernel
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to cause a denial of service
Description: A denial of service issue was addressed through
improved validation.
CVE-ID
CVE-2016-1752 : CESG
libxml2
Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,
and OS X El Capitan v10.11 to v10.11.3
Impact: Processing maliciously crafted XML may lead to unexpected
application termination or arbitrary code execution
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2015-1819
CVE-2015-5312 : David Drysdale of Google
CVE-2015-7499
CVE-2015-7500 : Kostya Serebryany of Google
CVE-2015-7942 : Kostya Serebryany of Google
CVE-2015-8035 : gustavo.grieco
CVE-2015-8242 : Hugh Davenport
CVE-2016-1761 : wol0xff working with Trend Micro's Zero Day
Initiative (ZDI)
CVE-2016-1762
Messages
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An attacker who is able to bypass Apple's certificate
pinning, intercept TLS connections, inject messages, and record
encrypted attachment-type messages may be able to read attachments
Description: A cryptographic issue was addressed by rejecting
duplicate messages on the client.
CVE-ID
CVE-2016-1788 : Christina Garman, Matthew Green, Gabriel Kaptchuk,
Ian Miers, and Michael Rushanan of Johns Hopkins University
Messages
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Clicking a JavaScript link can reveal sensitive user
information
Description: An issue existed in the processing of JavaScript links.
This issue was addressed through improved content security policy
checks.
CVE-ID
CVE-2016-1764 : Matthew Bryan of the Uber Security Team (formerly of
Bishop Fox), Joe DeMesy and Shubham Shah of Bishop Fox
NVIDIA Graphics Drivers
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1741 : Ian Beer of Google Project Zero
OpenSSH
Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,
and OS X El Capitan v10.11 to v10.11.3
Impact: Connecting to a server may leak sensitive user information,
such as a client's private keys
Description: Roaming, which was on by default in the OpenSSH client,
exposed an information leak and a buffer overflow. These issues were
addressed by disabling roaming in the client.
CVE-ID
CVE-2016-0777 : Qualys
CVE-2016-0778 : Qualys
OpenSSH
Available for: OS X Mavericks v10.9.5 and OS X Yosemite v10.10.5
Impact: Multiple vulnerabilities in LibreSSL
Description: Multiple vulnerabilities existed in LibreSSL versions
prior to 2.1.8. These were addressed by updating LibreSSL to version
2.1.8.
CVE-ID
CVE-2015-5333 : Qualys
CVE-2015-5334 : Qualys
OpenSSL
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: A remote attacker may be able to cause a denial of service
Description: A memory leak existed in OpenSSL versions prior to
0.9.8zh. This issue was addressed by updating OpenSSL to version
0.9.8zh.
CVE-ID
CVE-2015-3195
Python
Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5,
and OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted .png file may lead to
arbitrary code execution
Description: Multiple vulnerabilities existed in libpng versions
prior to 1.6.20. These were addressed by updating libpng to version
1.6.20.
CVE-ID
CVE-2014-9495
CVE-2015-0973
CVE-2015-8126 : Adam Mariš
CVE-2015-8472 : Adam Mariš
QuickTime
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted FlashPix Bitmap Image may
lead to unexpected application termination or arbitrary code
execution
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1767 : Francis Provencher from COSIG
CVE-2016-1768 : Francis Provencher from COSIG
QuickTime
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted Photoshop document may lead
to unexpected application termination or arbitrary code execution
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1769 : Francis Provencher from COSIG
Reminders
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Clicking a tel link can make a call without prompting the
user
Description: A user was not prompted before invoking a call. This
was addressed through improved entitlement checks. This issue was addressed by updating to
version 2.0.0-p648.
CVE-ID
CVE-2015-7551
Security
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: A local user may be able to check for the existence of
arbitrary files
Description: A permissions issue existed in code signing tools. This
was addressed though additional ownership checks.
CVE-ID
CVE-2016-1773 : Mark Mentovai of Google Inc.
Security
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted certificate may lead to
arbitrary code execution
Description: A memory corruption issue existed in the ASN.1 decoder.
This issue was addressed through improved input validation.
CVE-ID
CVE-2016-1950 : Francis Gabriel of Quarkslab
Tcl
Available for:
OS X Yosemite v10.10.5 and OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted .png file may lead to
arbitrary code execution
Description: Multiple vulnerabilities existed in libpng versions
prior to 1.6.20. These were addressed by removing libpng.
CVE-ID
CVE-2015-8126 : Adam Mariš
TrueTypeScaler
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: Processing a maliciously crafted font file may lead to
arbitrary code execution
Description: A memory corruption issue existed in the processing of
font files. This issue was addressed through improved input
validation.
CVE-ID
CVE-2016-1775 : 0x1byte working with Trend Micro's Zero Day
Initiative (ZDI)
Wi-Fi
Available for: OS X El Capitan v10.11 to v10.11.3
Impact: An attacker with a privileged network position may be able
to execute arbitrary code
Description: A frame validation and memory corruption issue existed
for a given ethertype. This issue was addressed through additional
ethertype validation and improved memory handling.
CVE-ID
CVE-2016-0801 : an anonymous researcher
CVE-2016-0802 : an anonymous researcher
OS X El Capitan 10.11.4 includes the security content of Safari 9.1.
https://support.apple.com/kb/HT206171
OS X El Capitan v10.11.4 and Security Update 2016-002 may be obtained
from the Mac App Store or Apple's Software Downloads web site:
http://www.apple.com/support/downloads/
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org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=mZR+
-----END PGP SIGNATURE-----
.
===========================================================================
Ubuntu Security Notice USN-3365-1
July 25, 2017
ruby1.9.1, ruby2.0, ruby2.3 vulnerabilities
===========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.04
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in Ruby. An attacker could possibly use this issue to open libraries with
tainted names. This issue only applied to Ubuntu 14.04 LTS. (CVE-2009-5147)
Tony Arcieri, Jeffrey Walton, and Steffan Ullrich discovered that the Ruby
OpenSSL extension incorrectly handled hostname wildcard matching. This
issue only applied to Ubuntu 14.04 LTS. (CVE-2015-1855)
Christian Hofstaedtler discovered that Ruby Fiddle::Handle incorrectly
handled certain crafted strings. This issue only
applied to Ubuntu 14.04 LTS. (CVE-2015-7551)
It was discovered that Ruby Net::SMTP incorrectly handled CRLF sequences. A
remote attacker could possibly use this issue to inject SMTP commands.
(CVE-2015-9096)
Marcin Noga discovered that Ruby incorrectly handled certain arguments in
a TclTkIp class method. An attacker could possibly use this issue to
execute arbitrary code. This issue only affected Ubuntu 14.04 LTS.
(CVE-2016-2337)
It was discovered that Ruby Fiddle::Function.new incorrectly handled
certain arguments. An attacker could possibly use this issue to execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2016-2339)
It was discovered that Ruby incorrectly handled the initialization vector
(IV) in GCM mode. (CVE-2016-7798)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.04:
libruby2.3 2.3.3-1ubuntu0.1
ruby2.3 2.3.3-1ubuntu0.1
Ubuntu 16.04 LTS:
libruby2.3 2.3.1-2~16.04.2
ruby2.3 2.3.1-2~16.04.2
Ubuntu 14.04 LTS:
libruby1.9.1 1.9.3.484-2ubuntu1.3
libruby2.0 2.0.0.484-1ubuntu2.4
ruby1.9.1 1.9.3.484-2ubuntu1.3
ruby2.0 2.0.0.484-1ubuntu2.4
In general, a standard system update will make all the necessary changes
| VAR-201507-0242 | CVE-2015-0732 | plural Cisco Security Runs on the appliance AsyncOS Vulnerable to cross-site scripting |
CVSS V2: 4.3 CVSS V3: - Severity: MEDIUM |
Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167. Vendors have confirmed this vulnerability Bug ID CSCuu37430 , CSCuu37420 , CSCut71981 and CSCuv50167 It is released as.By any third party through unspecified parameters Web Script or HTML May be inserted. ESA is a set of email security devices. Content SMA is a set of content security management devices. A cross-site scripting vulnerability exists in multiple Cisco product web management interfaces. The program failed to fully validate the parameters. A remote attacker can exploit this vulnerability to inject arbitrary web scripts or HTML.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
This issue is being tracked by Cisco Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167. The vulnerability is caused by the program's insufficient validation of parameters
| VAR-201507-0515 | CVE-2015-4287 | Cisco Firepower 9000 Run on device Firepower Extensible Operating System Vulnerable to access restrictions |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230. Cisco Firepower 9000 Series devices are prone to an information-disclosure vulnerability.
An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks.
This issue being tracked by Cisco Bug ID CSCuu82230
| VAR-201508-0172 | CVE-2015-3187 | Apache Subversion of svn_repos_trace_node_locations Vulnerability in obtaining important path information in functions |
CVSS V2: 4.0 CVSS V3: - Severity: MEDIUM |
The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path. Apache Subversion is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
Apache Subversion 1.8.0 through 1.8.13 and 1.7.0 through 1.7.20 are vulnerable. The system is compatible with the Concurrent Versions System (CVS). ============================================================================
Ubuntu Security Notice USN-2721-1
August 20, 2015
subversion vulnerabilities
============================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.04
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in Subversion.
Software Description:
- subversion: Advanced version control system
Details:
It was discovered that the Subversion mod_dav_svn module incorrectly
handled REPORT requests for a resource that does not exist. This issue only affected Ubuntu 12.04 LTS and Ubuntu
14.04 LTS. (CVE-2014-3580)
It was discovered that the Subversion mod_dav_svn module incorrectly
handled requests requiring a lookup for a virtual transaction name that
does not exist. This issue only affected Ubuntu
14.04 LTS. (CVE-2014-8108)
Evgeny Kotkov discovered that the Subversion mod_dav_svn module incorrectly
handled large numbers of REPORT requests. This
issue only affected Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-0202)
Evgeny Kotkov discovered that the Subversion mod_dav_svn and svnserve
modules incorrectly certain crafted parameter combinations. (CVE-2015-0248)
Ivan Zhakov discovered that the Subversion mod_dav_svn module incorrectly
handled crafted v1 HTTP protocol request sequences. (CVE-2015-0251)
C. A remote attacker could use this
issue to read hidden files via the path name. This issue only affected
Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-3184)
C. Michael Pilato discovered that Subversion incorrectly handled path-based
authorization. (CVE-2015-3187)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 15.04:
libapache2-svn 1.8.10-5ubuntu1.1
libsvn1 1.8.10-5ubuntu1.1
subversion 1.8.10-5ubuntu1.1
Ubuntu 14.04 LTS:
libapache2-svn 1.8.8-1ubuntu3.2
libsvn1 1.8.8-1ubuntu3.2
subversion 1.8.8-1ubuntu3.2
Ubuntu 12.04 LTS:
libapache2-svn 1.6.17dfsg-3ubuntu3.5
libsvn1 1.6.17dfsg-3ubuntu3.5
subversion 1.6.17dfsg-3ubuntu3.5
In general, a standard system update will make all the necessary changes. 6) - i386, noarch, x86_64
3. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
APPLE-SA-2016-03-21-4 Xcode 7.3
Xcode 7.3 is now available and addresses the following:
otool
Available for: OS X El Capitan v10.11 and later
Impact: A local attacker may be able to cause unexpected application
termination or arbitrary code execution
Description: Multiple memory corruption issues were addressed
through improved memory handling.
CVE-ID
CVE-2016-1765 : Proteas of Qihoo 360 Nirvan Team and Will Estes
(@squiffy)
subversion
Available for: OS X El Capitan v10.11 and later
Impact: A malicious server may be able to execute arbitrary code
Description: Multiple vulnerabilities existed in subversion versions
prior to 1.7.21, the most serious of which may have led to remote
code execution. These were addressed by updating subversion to
version 1.7.22. Michael Pilato, CollabNet
Xcode 7.0 may be obtained from:
https://developer.apple.com/xcode/downloads/
To check that the Xcode has been updated:
* Select Xcode in the menu bar
* Select About Xcode
* The version after applying this update will be "7.3".
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org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=9aiD
-----END PGP SIGNATURE-----
.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 201610-05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Normal
Title: Subversion, Serf: Multiple Vulnerabilities
Date: October 11, 2016
Bugs: #500482, #518716, #519202, #545348, #556076, #567810,
#581448, #586046
ID: 201610-05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis
========
Multiple vulnerabilities have been found in Subversion and Serf, the
worst of which could lead to execution of arbitrary code.
Background
==========
Subversion is a version control system intended to eventually replace
CVS. Like CVS, it has an optional client-server architecture (where the
server can be an Apache server running mod_svn, or an ssh program as in
CVS's :ext: method). In addition to supporting the features found in
CVS, Subversion also provides support for moving and copying files and
directories.
The serf library is a high performance C-based HTTP client library
built upon the Apache Portable Runtime (APR) library.
Affected packages
=================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 dev-vcs/subversion < 1.9.4 >= 1.9.4
*> 1.8.16
2 net-libs/serf < 1.3.7 >= 1.3.7
-------------------------------------------------------------------
2 affected packages
Description
===========
Multiple vulnerabilities have been discovered in Subversion and Serf.
Please review the CVE identifiers referenced below for details
Impact
======
A remote attacker could possibly execute arbitrary code with the
privileges of the process, conduct a man-in-the-middle attack, obtain
sensitive information, or cause a Denial of Service Condition.
Workaround
==========
There is no known workaround at this time.
Resolution
==========
All Subversion users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-vcs/subversion-1.9.4"
All Serf users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/serf-1.3.7"
References
==========
[ 1 ] CVE-2014-0032
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0032
[ 2 ] CVE-2014-3504
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3504
[ 3 ] CVE-2014-3522
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3522
[ 4 ] CVE-2014-3528
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3528
[ 5 ] CVE-2015-0202
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0202
[ 6 ] CVE-2015-0248
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0248
[ 7 ] CVE-2015-0251
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0251
[ 8 ] CVE-2015-3184
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3184
[ 9 ] CVE-2015-3187
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3187
[ 10 ] CVE-2015-5259
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5259
[ 11 ] CVE-2016-2167
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2167
[ 12 ] CVE-2016-2168
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2168
Availability
============
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:
https://security.gentoo.org/glsa/201610-05
Concerns?
=========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.
License
=======
Copyright 2016 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).
The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Moderate: subversion security update
Advisory ID: RHSA-2015:1742-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1742.html
Issue date: 2015-09-08
CVE Names: CVE-2015-0248 CVE-2015-0251 CVE-2015-3184
CVE-2015-3187
=====================================================================
1. Summary:
Updated subversion packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64
3. Description:
Subversion (SVN) is a concurrent version control system which enables one
or more users to collaborate in developing and maintaining a hierarchy of
files and directories while keeping a history of all changes. The
mod_dav_svn module is used with the Apache HTTP Server to allow access
to Subversion repositories via HTTP.
An assertion failure flaw was found in the way the SVN server processed
certain requests with dynamically evaluated revision numbers. A remote
attacker could use this flaw to cause the SVN server (both svnserve and
httpd with the mod_dav_svn module) to crash. (CVE-2015-0248)
It was found that the mod_authz_svn module did not properly restrict
anonymous access to Subversion repositories under certain configurations
when used with Apache httpd 2.4.x. This could allow a user to anonymously
access files in a Subversion repository, which should only be accessible to
authenticated users. (CVE-2015-3184)
It was found that the mod_dav_svn module did not properly validate the
svn:author property of certain requests. An attacker able to create new
revisions could use this flaw to spoof the svn:author property.
(CVE-2015-0251)
It was found that when an SVN server (both svnserve and httpd with the
mod_dav_svn module) searched the history of a file or a directory, it would
disclose its location in the repository if that file or directory was not
readable (for example, if it had been moved). (CVE-2015-3187)
Red Hat would like to thank the Apache Software Foundation for reporting
these issues. Upstream acknowledges Evgeny Kotkov of VisualSVN as the
original reporter of CVE-2015-0248 and CVE-2015-0251, and C. Michael
Pilato of CollabNet as the original reporter of CVE-2015-3184 and
CVE-2015-3187 flaws.
All subversion users should upgrade to these updated packages, which
contain backported patches to correct these issues. After installing the
updated packages, for the update to take effect, you must restart the httpd
daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are
serving Subversion repositories via the svn:// protocol.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1205138 - CVE-2015-0248 subversion: (mod_dav_svn) remote denial of service with certain requests with dynamically evaluated revision numbers
1205140 - CVE-2015-0251 subversion: (mod_dav_svn) spoofing svn:author property values for new revisions
1247249 - CVE-2015-3184 subversion: Mixed anonymous/authenticated path-based authz with httpd 2.4
1247252 - CVE-2015-3187 subversion: svn_repos_trace_node_locations() reveals paths hidden by authz
6. Package List:
Red Hat Enterprise Linux Client Optional (v. 7):
Source:
subversion-1.7.14-7.el7_1.1.src.rpm
x86_64:
mod_dav_svn-1.7.14-7.el7_1.1.x86_64.rpm
subversion-1.7.14-7.el7_1.1.i686.rpm
subversion-1.7.14-7.el7_1.1.x86_64.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.x86_64.rpm
subversion-devel-1.7.14-7.el7_1.1.i686.rpm
subversion-devel-1.7.14-7.el7_1.1.x86_64.rpm
subversion-gnome-1.7.14-7.el7_1.1.i686.rpm
subversion-gnome-1.7.14-7.el7_1.1.x86_64.rpm
subversion-javahl-1.7.14-7.el7_1.1.i686.rpm
subversion-javahl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-kde-1.7.14-7.el7_1.1.i686.rpm
subversion-kde-1.7.14-7.el7_1.1.x86_64.rpm
subversion-libs-1.7.14-7.el7_1.1.i686.rpm
subversion-libs-1.7.14-7.el7_1.1.x86_64.rpm
subversion-perl-1.7.14-7.el7_1.1.i686.rpm
subversion-perl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-python-1.7.14-7.el7_1.1.x86_64.rpm
subversion-ruby-1.7.14-7.el7_1.1.i686.rpm
subversion-ruby-1.7.14-7.el7_1.1.x86_64.rpm
subversion-tools-1.7.14-7.el7_1.1.x86_64.rpm
Red Hat Enterprise Linux ComputeNode Optional (v. 7):
Source:
subversion-1.7.14-7.el7_1.1.src.rpm
x86_64:
mod_dav_svn-1.7.14-7.el7_1.1.x86_64.rpm
subversion-1.7.14-7.el7_1.1.i686.rpm
subversion-1.7.14-7.el7_1.1.x86_64.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.x86_64.rpm
subversion-devel-1.7.14-7.el7_1.1.i686.rpm
subversion-devel-1.7.14-7.el7_1.1.x86_64.rpm
subversion-gnome-1.7.14-7.el7_1.1.i686.rpm
subversion-gnome-1.7.14-7.el7_1.1.x86_64.rpm
subversion-javahl-1.7.14-7.el7_1.1.i686.rpm
subversion-javahl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-kde-1.7.14-7.el7_1.1.i686.rpm
subversion-kde-1.7.14-7.el7_1.1.x86_64.rpm
subversion-libs-1.7.14-7.el7_1.1.i686.rpm
subversion-libs-1.7.14-7.el7_1.1.x86_64.rpm
subversion-perl-1.7.14-7.el7_1.1.i686.rpm
subversion-perl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-python-1.7.14-7.el7_1.1.x86_64.rpm
subversion-ruby-1.7.14-7.el7_1.1.i686.rpm
subversion-ruby-1.7.14-7.el7_1.1.x86_64.rpm
subversion-tools-1.7.14-7.el7_1.1.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source:
subversion-1.7.14-7.el7_1.1.src.rpm
ppc64:
mod_dav_svn-1.7.14-7.el7_1.1.ppc64.rpm
subversion-1.7.14-7.el7_1.1.ppc64.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.ppc.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.ppc64.rpm
subversion-libs-1.7.14-7.el7_1.1.ppc.rpm
subversion-libs-1.7.14-7.el7_1.1.ppc64.rpm
s390x:
mod_dav_svn-1.7.14-7.el7_1.1.s390x.rpm
subversion-1.7.14-7.el7_1.1.s390x.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.s390.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.s390x.rpm
subversion-libs-1.7.14-7.el7_1.1.s390.rpm
subversion-libs-1.7.14-7.el7_1.1.s390x.rpm
x86_64:
mod_dav_svn-1.7.14-7.el7_1.1.x86_64.rpm
subversion-1.7.14-7.el7_1.1.x86_64.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.x86_64.rpm
subversion-libs-1.7.14-7.el7_1.1.i686.rpm
subversion-libs-1.7.14-7.el7_1.1.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source:
subversion-1.7.14-7.ael7b_1.1.src.rpm
ppc64le:
mod_dav_svn-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-debuginfo-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-libs-1.7.14-7.ael7b_1.1.ppc64le.rpm
Red Hat Enterprise Linux Server Optional (v. 7):
ppc64:
subversion-1.7.14-7.el7_1.1.ppc.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.ppc.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.ppc64.rpm
subversion-devel-1.7.14-7.el7_1.1.ppc.rpm
subversion-devel-1.7.14-7.el7_1.1.ppc64.rpm
subversion-gnome-1.7.14-7.el7_1.1.ppc.rpm
subversion-gnome-1.7.14-7.el7_1.1.ppc64.rpm
subversion-javahl-1.7.14-7.el7_1.1.ppc.rpm
subversion-javahl-1.7.14-7.el7_1.1.ppc64.rpm
subversion-kde-1.7.14-7.el7_1.1.ppc.rpm
subversion-kde-1.7.14-7.el7_1.1.ppc64.rpm
subversion-perl-1.7.14-7.el7_1.1.ppc.rpm
subversion-perl-1.7.14-7.el7_1.1.ppc64.rpm
subversion-python-1.7.14-7.el7_1.1.ppc64.rpm
subversion-ruby-1.7.14-7.el7_1.1.ppc.rpm
subversion-ruby-1.7.14-7.el7_1.1.ppc64.rpm
subversion-tools-1.7.14-7.el7_1.1.ppc64.rpm
s390x:
subversion-1.7.14-7.el7_1.1.s390.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.s390.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.s390x.rpm
subversion-devel-1.7.14-7.el7_1.1.s390.rpm
subversion-devel-1.7.14-7.el7_1.1.s390x.rpm
subversion-gnome-1.7.14-7.el7_1.1.s390.rpm
subversion-gnome-1.7.14-7.el7_1.1.s390x.rpm
subversion-javahl-1.7.14-7.el7_1.1.s390.rpm
subversion-javahl-1.7.14-7.el7_1.1.s390x.rpm
subversion-kde-1.7.14-7.el7_1.1.s390.rpm
subversion-kde-1.7.14-7.el7_1.1.s390x.rpm
subversion-perl-1.7.14-7.el7_1.1.s390.rpm
subversion-perl-1.7.14-7.el7_1.1.s390x.rpm
subversion-python-1.7.14-7.el7_1.1.s390x.rpm
subversion-ruby-1.7.14-7.el7_1.1.s390.rpm
subversion-ruby-1.7.14-7.el7_1.1.s390x.rpm
subversion-tools-1.7.14-7.el7_1.1.s390x.rpm
x86_64:
subversion-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.x86_64.rpm
subversion-devel-1.7.14-7.el7_1.1.i686.rpm
subversion-devel-1.7.14-7.el7_1.1.x86_64.rpm
subversion-gnome-1.7.14-7.el7_1.1.i686.rpm
subversion-gnome-1.7.14-7.el7_1.1.x86_64.rpm
subversion-javahl-1.7.14-7.el7_1.1.i686.rpm
subversion-javahl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-kde-1.7.14-7.el7_1.1.i686.rpm
subversion-kde-1.7.14-7.el7_1.1.x86_64.rpm
subversion-perl-1.7.14-7.el7_1.1.i686.rpm
subversion-perl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-python-1.7.14-7.el7_1.1.x86_64.rpm
subversion-ruby-1.7.14-7.el7_1.1.i686.rpm
subversion-ruby-1.7.14-7.el7_1.1.x86_64.rpm
subversion-tools-1.7.14-7.el7_1.1.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 7):
ppc64le:
subversion-debuginfo-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-devel-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-gnome-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-javahl-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-kde-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-perl-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-python-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-ruby-1.7.14-7.ael7b_1.1.ppc64le.rpm
subversion-tools-1.7.14-7.ael7b_1.1.ppc64le.rpm
Red Hat Enterprise Linux Workstation (v. 7):
Source:
subversion-1.7.14-7.el7_1.1.src.rpm
x86_64:
mod_dav_svn-1.7.14-7.el7_1.1.x86_64.rpm
subversion-1.7.14-7.el7_1.1.x86_64.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.x86_64.rpm
subversion-libs-1.7.14-7.el7_1.1.i686.rpm
subversion-libs-1.7.14-7.el7_1.1.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 7):
x86_64:
subversion-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.i686.rpm
subversion-debuginfo-1.7.14-7.el7_1.1.x86_64.rpm
subversion-devel-1.7.14-7.el7_1.1.i686.rpm
subversion-devel-1.7.14-7.el7_1.1.x86_64.rpm
subversion-gnome-1.7.14-7.el7_1.1.i686.rpm
subversion-gnome-1.7.14-7.el7_1.1.x86_64.rpm
subversion-javahl-1.7.14-7.el7_1.1.i686.rpm
subversion-javahl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-kde-1.7.14-7.el7_1.1.i686.rpm
subversion-kde-1.7.14-7.el7_1.1.x86_64.rpm
subversion-perl-1.7.14-7.el7_1.1.i686.rpm
subversion-perl-1.7.14-7.el7_1.1.x86_64.rpm
subversion-python-1.7.14-7.el7_1.1.x86_64.rpm
subversion-ruby-1.7.14-7.el7_1.1.i686.rpm
subversion-ruby-1.7.14-7.el7_1.1.x86_64.rpm
subversion-tools-1.7.14-7.el7_1.1.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2015-0248
https://access.redhat.com/security/cve/CVE-2015-0251
https://access.redhat.com/security/cve/CVE-2015-3184
https://access.redhat.com/security/cve/CVE-2015-3187
https://access.redhat.com/security/updates/classification/#moderate
https://subversion.apache.org/security/CVE-2015-0248-advisory.txt
https://subversion.apache.org/security/CVE-2015-3184-advisory.txt
https://subversion.apache.org/security/CVE-2015-0251-advisory.txt
https://subversion.apache.org/security/CVE-2015-3187-advisory.txt
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iD8DBQFV7t6+XlSAg2UNWIIRAivqAKCtV0lnW3RGFsCNsKIU9lBHeBk4UQCdE8/b
KVJwbobNcmPzKule+9U7RnM=
=F2J4
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
| VAR-201507-0142 | CVE-2015-2847 | Honeywell International Tuxedo Touch Security Bypass Vulnerability |
CVSS V2: 5.0 CVSS V3: - Severity: MEDIUM |
Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream. Supplementary information : CWE Vulnerability type by CWE-284: Improper Access Control ( Inappropriate access control ) Has been identified. http://cwe.mitre.org/data/definitions/284.htmlClient by a third party - From server data stream USERACCT By deleting the request, access restrictions may be avoided. Honeywell International Tuxedo Touch is Honeywell International's suite of automated touch controllers for businesses and homes that control cameras, thermostats, fixtures, smart locks, and shading via the Web or related apps. Curtains, etc.
An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks
| VAR-201605-0279 | CVE-2015-7360 | Fortinet FortiSandbox Cross-Site Scripting Vulnerability |
CVSS V2: 4.3 CVSS V3: 6.1 Severity: MEDIUM |
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) serial parameter to alerts/summary/profile/; the (2) urlForCreatingReport parameter to csearch/report/export/; the (3) id parameter to analysis/detail/download/screenshot; or vectors related to (4) "Fortiview threats by users search filtered by vdom" or (5) "PCAP file download generated by the VM scan feature.". Fortinet FortiSandbox of Web User interface (WebUI) Contains a cross-site scripting vulnerability.By any third party, via Web Script or HTML May be inserted. Fortinet FortiSandbox is an APT (Advanced Persistent Threat) protection device from Fortinet. The device provides dual sandbox technology, dynamic threat intelligence, real-time control panels and reporting. A cross-site scripting vulnerability exists in Fortinet FortiSandbox 2.0.3 and earlier that caused the program to not adequately filter user-submitted input. When a user browses an affected website, their browser will execute any script code provided by the attacker. This can lead to an attacker stealing cookie-based authentication and initiating other attacks.
FortiSandbox 2.0.3 and prior versions are vulnerable
| VAR-201507-0516 | CVE-2015-4288 | plural Cisco Security Appliance LDAP Vulnerability in server implementation |
CVSS V2: 4.3 CVSS V3: - Severity: MEDIUM |
The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470. Vendors have confirmed this vulnerability Bug ID CSCuo29561 , CSCuv40466 ,and CSCuv40470 It is released as.Man-in-the-middle attacks (man-in-the-middle attack) May masquerade as a server through a crafted certificate and retrieve important information. The Cisco WSA is a set of web security appliances. ESA is a set of email security devices. Content SMA is a set of content security management devices. A number of Cisco product LDAP servers have security vulnerabilities. The program failed to validate the X.509 certificate on the SSL server side. Multiple Cisco Products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to perform man-in-the-middle attacks and perform certain unauthorized actions, which will aid in further attacks.
This issue is being tracked by Cisco Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470
| VAR-201507-0143 | CVE-2015-2848 | Honeywell International Tuxedo Touch Cross-Site Request Forgery Vulnerability |
CVSS V2: 6.8 CVSS V3: - Severity: MEDIUM |
Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command. Honeywell International Tuxedo Touch is Honeywell International's suite of automated touch controllers for businesses and homes that control cameras, thermostats, fixtures, smart locks, and shading via the Web or related apps. Curtains, etc. A remote attacker could exploit the vulnerability to perform actions with user privileges and send commands to a home automation device. This may lead to further attacks
| VAR-201601-0359 | CVE-2015-7362 | Fortinet FortiClient Linux SSLVPN Vulnerability gained in |
CVSS V2: 7.2 CVSS V3: 7.8 Severity: HIGH |
Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc setuid program. Fortinet FortiClient SSLVPN is prone to a local privilege-escalation vulnerability.
Local attackers may exploit this issue to execute arbitrary code with root privileges. Fortinet FortiClient Linux SSLVPN is a Linux-based VPN client from Fortinet for connecting to Fortinet devices. A security vulnerability exists in Fortinet FortiClient Linux SSLVPN builds prior to 2313
| VAR-201510-0212 | CVE-2015-7361 | FortiOS Vulnerable to shell access |
CVSS V2: 9.3 CVSS V3: - Severity: HIGH |
FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for access to the ZebOS shell on the HA dedicated management interface, which allows remote attackers to obtain shell access via unspecified vectors. Fortinet FortiGate running FortiOS is a set of security operating systems developed by Fortinet, a company dedicated to FortiGate network security platforms. The system provides users with multiple security functions such as firewall, antivirus, IPSec / SSL VPN, Web content filtering, and anti-spam.
A security bypass vulnerability exists in Fortinet FortiGate running FortiOS 5.2.3. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations. This may aid in further attacks.
FortiOS 5.2.3 is vulnerable. A remote attacker could exploit this vulnerability to gain shell access
| VAR-201508-0594 | CVE-2015-3626 | FortiGate Runs on the device FortiGate of DHCP Monitor of Web User interface (WebUI) Page cross-site scripting vulnerability |
CVSS V2: 4.3 CVSS V3: - Severity: MEDIUM |
Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on FortiGate devices allows remote attackers to inject arbitrary web script or HTML via a crafted hostname. FortiOS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.
Successful exploits will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application, potentially allowing the attacker to steal cookie-based authentication credentials or control how the page is rendered to the user. Other attacks are also possible. Fortinet FortiOS is a set of security operating systems developed by Fortinet Corporation for the FortiGate network security platform. The system provides users with various security functions such as firewall, anti-virus, IPSec/SSL VPN, Web content filtering and anti-spam
| VAR-201508-0529 | CVE-2015-2323 | FortiOS In TLS Content forgery vulnerability |
CVSS V2: 6.4 CVSS V3: - Severity: MEDIUM |
FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows man-in-the-middle attackers to spoof TLS content by modifying packets. Fortinet FortiOS is prone to a security-bypass weakness.
Successfully exploiting this issue may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks.
FortiOS 5.2.0 through 5.2.3 and 5.0.0 through 5.0.11 are vulnerable. Fortinet FortiOS is a set of security operating systems developed by Fortinet Corporation for the FortiGate network security platform. The system provides users with various security functions such as firewall, anti-virus, IPSec/SSL VPN, Web content filtering and anti-spam. Fortinet FortiOS versions 5.0.0 to 5.0.1 and 5.2.0 to 5.2.3 have a security vulnerability
| VAR-201507-0713 | No CVE | TOTOLINK Router Models Backdoor Vulnerability |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
TOTOLINK manufactures routers, wireless access points and network equipment. There is a backdoor vulnerability in TOTOLINK Router Models. An attacker can bypass the authentication system by using the hidden /boafrm/formSysCmd form and use a remote execution code on the HTTP remote management interface.
| VAR-201507-0710 | CVE-2025-34125 | D-Link Cookie Command Injection Vulnerability |
CVSS V2: 7.5 CVSS V3: - Severity: Critical |
An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the underlying Linux operating system. Successful exploitation enables full system compromise. The D-Link DSP-W110A1_FW105B01 is a socket that controls the power switch wirelessly. D-Link has a remote upload and code execution vulnerability. The D-Link DSP-W110A1 is a Wi-Fi smart router.
The D-Link DSP-W110A1 suffers from a command injection vulnerability due to improper input parameter filtering
| VAR-201508-0255 | CVE-2015-5537 | Rugged Operating System (ROS) SSL 3.0 Protocol downgrade SSL Decryption vulnerability |
CVSS V2: 4.3 CVSS V3: - Severity: MEDIUM |
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566. This vulnerability CVE-2014-3566 Is a different vulnerability.Man-in-the-middle attacks (man-in-the-middle attack) May get plain text data through padding oracle attacks. RuggedCom Inc. is the world's leading manufacturer of high performance networking and communications equipment for industrial environments. The Rugged Operating System (ROS) has a security vulnerability that allows an attacker to reduce the client to SSLv3 through a man-in-the-middle attack instead of the TLS v1.x protocol, and then use the BEAST type of attack to decrypt the communication. Siemens RuggedCom ROS and ROX devices are prone to an information disclosure vulnerability.
An attacker can exploit this issue to perform man-in-the-middle attacks and obtain sensitive information. Successful exploits will lead to other attacks. Siemens RuggedCom ROS and ROX II is a set of operating systems used in RuggedCom series switches from Siemens, Germany. The vulnerability stems from the fact that the program does not implement CBC padding correctly
| VAR-201507-0231 | CVE-2015-0681 | Cisco IOS and IOS XE of TFTP Service disruption at the server (DoS) Vulnerabilities |
CVSS V2: 7.1 CVSS V3: - Severity: HIGH |
The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733. Vendors have confirmed this vulnerability Bug ID CSCts66733 It is released as.Service disruption by a third party ( Device hang or reload ) There is a possibility of being put into a state. A remote attacker could exploit the vulnerability to cause a denial of service (device hangs or reloads).
This issue is being tracked by Cisco Bug ID CSCts66733. The following products and versions are affected: Cisco IOS 12.2(44)SQ1 release, 12.2(33)XN1 release, 12.4(25e)JAM1 release, 12.4(25e)JAO5m release, 12.4(23)JY release, 15.0(2)ED1 release , 15.0(2) EY3 version, 15.1(3) SVF4a version, 15.2(2) JB1 version; IOS XE 2.5.x version, 2.6.x version, 3.1.xS version, 3.2.xS version, 3.3.xS version, 3.4 .xS version, 3.5.xS version before 3.6.0S, 3.1.xSG version, 3.2.xSG version, 3.3.xSG version before 3.4.0SG, 3.2.xSE version before 3.3.0SE, 3.2.xXO version before 3.3.0XO, 3.2.xSQ version, 3.3.xSQ version, 3.4.xSQ version
| VAR-201507-0523 | CVE-2015-4235 | Cisco Application Policy Infrastructure Controller Device software and Nexus 9000 ACI In device software root Privileged vulnerability |
CVSS V2: 9.0 CVSS V3: - Severity: HIGH |
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j) and Nexus 9000 ACI devices with software before 11.0(4o) and 11.1 before 11.1(1j) do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain root privileges via unspecified use of the APIC cluster-management configuration feature, aka Bug IDs CSCuu72094 and CSCuv11991. Vendors have confirmed this vulnerability Bug IDs CSCuu72094 and CSCuv11991 It is released as.By a third party APIC Through unspecified use of the cluster management configuration feature of root You may get permission. The Cisco Application Policy Infrastructure is a controller that automates the management of application-centric infrastructure. The Cisco Nexus 9000 Series ACI Mode Switches is a 9000 Series switch for Application-Centric Infrastructure (ACI). This may aid in further attacks.
This issue is being tracked by Cisco Bug IDs CSCuu72094 and CSCuv11991
| VAR-201507-0546 | CVE-2015-4262 | Cisco Unified MeetingPlace Web Conferencing Password change function vulnerable to arbitrary password reset |
CVSS V2: 10.0 CVSS V3: - Severity: HIGH |
The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the session ID or require entry of the current password, which allows remote attackers to reset arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuu51839. Unified MeetingPlace Web Conferencing is prone to a security-bypass vulnerability.
Successful exploits may allow attackers to use the reset credentials to gain full control of the application. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCuu51839. The HTTP session function in does not validate the session ID in the HTTP request