RHSA-2017:2459-1: Important: libsoup security update

Red Hat Enterprise Linux: An update for libsoup is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2017-2885

Read More

RHSA-2017:2457-1: Critical: flash-plugin security update

Red Hat Enterprise Linux: An update for flash-plugin is now available for Red Hat Enterprise Linux 6
Supplementary.

Red Hat Product Security has rated this update as having a security impact of
Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2017-3085, CVE-2017-3106

Read More

RHSA-2017:2456-1: Critical: firefox security update

Red Hat Enterprise Linux: An update for firefox is now available for Red Hat Enterprise Linux 6 and Red
Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of
Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2017-7753, CVE-2017-7779, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7791, CVE-2017-7792, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7802, CVE-2017-7803, CVE-2017-7807, CVE-2017-7809

Read More

USN-3382-1: PHP vulnerabilities

Ubuntu Security Notice USN-3382-1

10th August, 2017

php5, php7.0 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

  • Ubuntu 17.04
  • Ubuntu 16.04 LTS
  • Ubuntu 14.04 LTS

Summary

Several security issues were fixed in PHP.

Software description

  • php5
    – HTML-embedded scripting language interpreter

  • php7.0
    – HTML-embedded scripting language interpreter

Details

It was discovered that the PHP opcache created keys for files it cached
based on their filepath. A local attacker could possibly use this issue in
a shared hosting environment to obtain sensitive information. This issue
only affected Ubuntu 14.04 LTS. (CVE-2015-8994)

It was discovered that the PHP URL parser incorrectly handled certain URI
components. A remote attacker could possibly use this issue to bypass
hostname-specific URL checks. This issue only affected Ubuntu 14.04 LTS.
(CVE-2016-10397)

It was discovered that PHP incorrectly handled certain boolean parameters
when unserializing data. A remote attacker could possibly use this issue to
cause PHP to crash, resulting in a denial of service. This issue only
affected Ubuntu 14.04 LTS. (CVE-2017-11143)

Sebastian Li, Wei Lei, Xie Xiaofei, and Liu Yang discovered that PHP
incorrectly handled the OpenSSL sealing function. A remote attacker could
possibly use this issue to cause PHP to crash, resulting in a denial of
service. (CVE-2017-11144)

Wei Lei and Liu Yang discovered that the PHP date extension incorrectly
handled memory. A remote attacker could possibly use this issue to disclose
sensitive information from the server. (CVE-2017-11145)

It was discovered that PHP incorrectly handled certain PHAR archives. A
remote attacker could use this issue to cause PHP to crash or disclose
sensitive information. This issue only affected Ubuntu 14.04 LTS.
(CVE-2017-11147)

It was discovered that PHP incorrectly handled locale length. A remote
attacker could possibly use this issue to cause PHP to crash, resulting in
a denial of service. (CVE-2017-11362)

Wei Lei and Liu Yang discovered that PHP incorrectly handled parsing ini
files. An attacker could possibly use this issue to cause PHP to crash,
resulting in a denial of service. (CVE-2017-11628)

It was discovered that PHP mbstring incorrectly handled certain regular
expressions. A remote attacker could use this issue to cause PHP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 17.04:
php7.0-fpm

7.0.22-0ubuntu0.17.04.1
libapache2-mod-php7.0

7.0.22-0ubuntu0.17.04.1
php7.0-cli

7.0.22-0ubuntu0.17.04.1
php7.0-cgi

7.0.22-0ubuntu0.17.04.1
Ubuntu 16.04 LTS:
php7.0-fpm

7.0.22-0ubuntu0.16.04.1
libapache2-mod-php7.0

7.0.22-0ubuntu0.16.04.1
php7.0-cli

7.0.22-0ubuntu0.16.04.1
php7.0-cgi

7.0.22-0ubuntu0.16.04.1
Ubuntu 14.04 LTS:
php5-cli

5.5.9+dfsg-1ubuntu4.22
php5-cgi

5.5.9+dfsg-1ubuntu4.22
libapache2-mod-php5

5.5.9+dfsg-1ubuntu4.22
php5-fpm

5.5.9+dfsg-1ubuntu4.22

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In Ubuntu 16.04 LTS and Ubuntu 17.04, this update uses a new upstream
release, which includes additional bug fixes.

In general, a standard system update will make all the necessary changes.

References

CVE-2015-8994,

CVE-2016-10397,

CVE-2017-11143,

CVE-2017-11144,

CVE-2017-11145,

CVE-2017-11147,

CVE-2017-11362,

CVE-2017-11628,

CVE-2017-9224,

CVE-2017-9226,

CVE-2017-9227,

CVE-2017-9228,

CVE-2017-9229

Read More

USN-3383-1: libsoup vulnerability

Ubuntu Security Notice USN-3383-1

10th August, 2017

libsoup2.4 vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

  • Ubuntu 17.04
  • Ubuntu 16.04 LTS
  • Ubuntu 14.04 LTS

Summary

Applications using libsoup could be made to crash or run programs
as your login if it received specially crafted network traffic.

Software description

  • libsoup2.4
    – HTTP client/server library for GNOME

Details

Aleksandar Nikolic discovered a stack based buffer overflow when
handling chunked encoding. An attacker could use this to cause a
denial of service or possibly execute arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 17.04:
libsoup2.4-1

2.56.0-2ubuntu0.1
gir1.2-soup-2.4

2.56.0-2ubuntu0.1
libsoup-gnome2.4-1

2.56.0-2ubuntu0.1
Ubuntu 16.04 LTS:
libsoup2.4-1

2.52.2-1ubuntu0.2
gir1.2-soup-2.4

2.52.2-1ubuntu0.2
libsoup-gnome2.4-1

2.52.2-1ubuntu0.2
Ubuntu 14.04 LTS:
libsoup2.4-1

2.44.2-1ubuntu2.2
gir1.2-soup-2.4

2.44.2-1ubuntu2.2
libsoup-gnome2.4-1

2.44.2-1ubuntu2.2

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References

CVE-2017-2885

Read More

Debian: New courier-authlib packages fix SQL injection

(Dec 20) Two SQL injection vulnerabilities have beein found in courier-authlib, the courier authentification library. The MySQL database interface used insufficient escaping mechanisms when constructing SQL statements, leading to SQL injection vulnerabilities if certain charsets are used (CVE-2008-2380). A similar issue affects the PostgreSQL database interface (CVE-2008-2667).

Read More