cucumber-linux-security Mailing List for Cucumber Linux (Page 13)
A general purpose desktop and server Linux distribution.
Brought to you by:
z5t1
You can subscribe to this list here.
| 2017 |
Jan
|
Feb
|
Mar
|
Apr
(4) |
May
(5) |
Jun
(6) |
Jul
(12) |
Aug
(10) |
Sep
(18) |
Oct
(26) |
Nov
(20) |
Dec
(13) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2018 |
Jan
(17) |
Feb
(18) |
Mar
(18) |
Apr
(13) |
May
(19) |
Jun
(17) |
Jul
(17) |
Aug
(13) |
Sep
(13) |
Oct
(11) |
Nov
(10) |
Dec
(10) |
| 2019 |
Jan
(4) |
Feb
(2) |
Mar
|
Apr
(15) |
May
(3) |
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Z5T1 <z5...@z5...> - 2017-06-15 22:19:15
|
Update Information A security update is available for thunderbird for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ xapps-general/thunderbird upgraded from 52.1.0 to 52.5.0 to fix some security vulnerabilities. For more information see: https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/ * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure thunderbird is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/xapps-general/thunderbird-52.2.0-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/xapps-general/thunderbird-52.2.0-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg thunderbird-52.2.0-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-06-15 17:35:44
|
Update Information A security update is available for firefox for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Thu Jun 15 12:59:26 EDT 2017 xapps-general/firefox upgraded from 52.1.0esr to 52.2.0esr to fix several security vulnerabilities. For more information see: https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/ * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure firefox is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/xapps-general/firefox-52.2.0esr-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/xapps-general/firefox-52.2.0esr-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg firefox-52.2.0esr-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-06-02 19:46:56
|
Update Information A security update is available for screen for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Fri Jun 2 15:17:32 EDT 2017 apps-base/screen upgraded from 4.4.0 to 4.5.1 to fix a security vulnerability which allows users to modify arbitrary files via an improper checking of log file permissions. This could allow a local, unprivileged user to gain root access. For more information see: https://nvd.nist.gov/vuln/detail/CVE-2017-5618 * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure screen is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/apps-base/screen-4.5.1-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/apps-base/screen-4.5.1-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg screen-4.5.1-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-05-30 22:02:23
|
Update Information A security update is available for sudo for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Tue May 30 17:27:43 EDT 2017 apps-base/sudo upgraded from 1.8.17p1 to 1.8.20p1 to fix CVE-2017-1000367, a security vulnerability in which a user with sudo access could trick sudo into using an arbitrary device number (i.e. an arbitrary tty instead of the one the user is actually using) via a specially crafted symbolic link. For more information see: https://www.sudo.ws/alerts/linux_tty.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000367 * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure sudo is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/apps-base/sudo-1.8.20p1-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/apps-base/sudo-1.8.20p1-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg sudo-1.8.20p1-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-05-25 02:49:25
|
Update Information A security update is available for libtiff for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Wed May 24 22:13:14 EDT 2017 lib-base/libtiff upgraded from 4.0.7 to 4.0.8 to fix several security issues and other bugs. For more details see: http://www.simplesystems.org/libtiff/v4.0.8.html * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure libtiff is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/lib-base/libtiff-4.0.8-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/lib-base/libtiff-4.0.8-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg libtiff-4.0.8-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-05-24 21:22:13
|
Update Information A security update is available for vlc for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Wed May 24 16:49:51 EDT 2017 xapps-base/vlc upgraded from 2.2.4 to 2.2.6 to fix a few security vulnerabilities which, amongst other things, allowed arbitrary code execution and denial of service via a specially crafted subtitles file. For more information see: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8313 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8311 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8310 * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure vlc is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/xapps-base/vlc-2.2.6-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/xapps-base/vlc-2.2.6-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg vlc-2.2.6-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-05-17 14:39:56
|
Update Information A security update is available for thunderbird for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Wed May 17 10:10:37 EDT 2017 xapps-general/thunderbird upgraded from 52.0 to 52.1.0 to fix some security issues. For more details see: https://www.mozilla.org/en-US/thunderbird/52.1.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/ * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure thunderbird is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/xapps-general/thunderbird-52.1.0-i686-1.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/xapps-general/thunderbird-52.1.0-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg thunderbird-52.1.0-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-05-17 02:14:26
|
Update Information A security update is available for freetype for the following versions of Cucumber Linux: * 1.0.beta Here are the details from the Cucumber 1.0.beta changelog: +----------------+ Tue May 16 21:05:43 EDT 2017 lib-base/freetype rebuilt (build 2) to patch CVE-2017-8287, a buffer overflow related attack. For more information see: https://nvd.nist.gov/vuln/detail/CVE-2017-8287 * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure freetype is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.beta i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/lib-base/freetype-2.7-i686-2.txz Cucumber 1.0.beta x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/lib-base/freetype-2.7-x86_64-2.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg freetype-2.7-i686-2.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-04-22 23:07:56
|
Update Information A security update is available for firefox for the following versions of Cucumber Linux: * 1.0.alpha Here are the details from the Cucumber 1.0.alpha changelog: +----------------+ Sat Apr 22 18:22:12 EDT 2017 xapps-general/firefox updated from 52.0.2 to 52.1 to fix some security issues. For more information see: https://www.mozilla.org/en-US/firefox/52.1.0/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/ * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure firefox is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0.alpha i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.alpha/cucumber-i686/xapps-general/firefox-52.1.0esr-i686-1.txz Cucumber 1.0.alpha x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.alpha/cucumber-x86_64/xapps-general/firefox-52.1.0esr-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg <insert_package_filename> ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-04-07 21:17:19
|
Update Information A security update is available for thunderbird for the following versions of Cucumber Linux: * Current Here are the details from the Cucumber Current changelog: +----------------+ Fri Apr 7 16:25:45 EDT 2017 xapps-base/thunderbird ugraded from 45.8.0 to 52.0. Support for Firefox/Thunder- bird 45 is ending next month, so this is a necessary change. * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure thunderbird is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber Current i686: http://cucumber.mirrors.z5t1.com/cucumber/cucumber-current/cucumber-i686/xapps-base/thunderbird-52.0-i686-1.txz Cucumber Current x86_64: http://cucumber.mirrors.z5t1.com/cucumber/cucumber-current/cucumber-x86_64/xapps-base/thunderbird-45.8.0-x86_64-2.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg thunderbird-52.0-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://z5t1.com/cucumber/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-04-07 15:48:44
|
Update Information A security update is available for firefox for the following versions of Cucumber Linux: * Current Here are the details from the Cucumber Current changelog: +----------------+ Thu Apr 6 15:39:34 EDT 2017 xapps-base/firefox upgraded from 45.8.0esr to 52.0.2esr. Support for Firefox 45 is ending next month so this is a necessary change. * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure firefox is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber Current i686: http://cucumber.mirrors.z5t1.com/cucumber/cucumber-current/cucumber-i686/xapps-base/firefox-52.0.2esr-i686-1.txz Cucumber Current x86_64: http://cucumber.mirrors.z5t1.com/cucumber/cucumber-current/cucumber-x86_64/xapps-base/firefox-52.0.2esr-x86_64-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg firefox-52.0.2esr-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://z5t1.com/cucumber/security.php |
|
From: Z5T1 <z5...@z5...> - 2017-04-07 14:23:43
|
Update Information
A security update is available for linux for the following versions of
Cucumber Linux:
* Current
Here are the details from the Cucumber Current changelog:
+----------------+
Thu Apr 6 07:53:31 EDT 2017
base/linux upgraded from 4.4.44 to 4.4.59 to fix a couple of security issues
with xfrm. These issues stem from a failure to verify certain size data
within the xfrm portion of the Linux kernel. Successful exploitation of
this bug could result in privilege escalation. For more information see:
https://nvd.nist.gov/vuln/detail/CVE-2017-7184
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.59
* SECURITY FIX *
+----------------+
------------------------------------------------------------------------
Installing the Update
The updated package can be installed via Pickle by running the following
commands (as root):
# pickle --update
# pickle
Make sure linux is selected on the update list, and then select Ok.
Pickle will then install the updated package.
If you prefer to download the updated package manually, it can be found
at the following location:
*Cucumber Version**
* *i686**
* *x86_64**
*
Current
http://cucumber.mirrors.z5t1.com/cucumber/cucumber-current/cucumber-i686/base/linux-4.4.59-i686-1.txz
http://cucumber.mirrors.z5t1.com/cucumber/cucumber-current/cucumber-x86_64/base/linux-4.4.59-x86_64-1.txz
To upgrade the package manually, download the new package and run the
following command (as root):
# upgradepkg linux-4.4.59-i686-1.txz
------------------------------------------------------------------------
The Cucumber Linux Security Team
cuc...@li...
http://z5t1.com/cucumber/security.php
|