|
Elders/PU_IAS security updates: flac, firefox, kernel, openssl, thunderbird, seamonkey |
|
|
|
firefox security update for 1WS, 2/2WS, 5 Client/Server and seamonkey security update for 1/1WS, 2/2WS fix various security issues including improper processing of certain web content that could be used to execute arbitrary code as the user viewing a specially crafted website. firefox advisory seamonkey advisory
thunderbird security update for 1WS, 2/2WS and 5 Client/Server fixes various security issues including improper processing of html e-mails that, if javascript (off by default) were to be unabled, could be used to run arbitrary code as the user viewing specially crafted html e-mails. thunderbird advisory
openssl security update for 1/1WS fixes a
one byte overflow in SSL_get_shared_ciphers functions (rarely used).
Other fixed issues involve possible side-channel attacks that in
unlikely scenario might be used to obtain private RSA keys. openssl advisory
flac security update for 2/2WS and 5 Client/Server fixes a flaw in the way flac library processes audio data. This flaw could be used to execute arbitrary code if an application linked against flac were to open a specially crafted flac audio file. flac advisory
kernel security update for 5 Client/Server fixes various issues ranging from denial of service, sensitive information leak to possible privilege escalation. kernel advisory |