Custom Query (19854 matches)

New minor version

​https://www.mozilla.org/en-US/thunderbird/45.1.0/releasenotes/

Various security fixes

​https://www.mozilla.org/en-US/security/advisories/mfsa2016-39/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2807
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2806
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2805

MEMORY SAFETY PROBLEMS

High priority due to the amount of complaints / reports that I have received about it not working (I didn't realize how many people actually use this). I will update this on my workstation this weekend, before installing XFCE, so that I can have most of XFCE's deps already installed (gvfs).

Update List:

# GENERAL LIBRARIES

Appstream-Glib-0.5.16 (r17573)
libmbim-1.12.4 (r17553)
libqmi-1.14.2 (r17553)
gcab-0.7 (r17406)

# SYSTEM UTILITIES

ModemManager-1.4.14 (r17553)

# NETWORKING LIBRARIES

GeoClue-2.4.3 (r17553)

# X LIBRARIES

GtkSourceView-3.20.4

# ICONS

adwaita-icon-theme-3.20 (r17542)

# GNOME LIBRARIES AND UTILITIES

AccountsService-0.6.42 (r17560)
gcr-3.20.0 (r17552)
gsettings-desktop-schemas-3.20.0 (r17526)
libsecret-0.18.5 (r17552)
VTE-0.44.2 (r17560)
yelp-xsl-3.20.1 (r17560)
geocode-glib-3.20.1 (r17560)
gnome-desktop-3.20.2 (r17560)
gnome-online-accounts-3.20.1 (r17560)
grilo-0.3.1 (r17564)
GtkHTML-4.10.0 (r17564)
libchamplain-0.12.13 (r17564)
libgdata-0.17.5 (APPLYING DUE TO THE LACK OF UPSTREAM RELEASES - 2 YRS) (r17564)
libgtop-2.34.0 (r17564)
libgweather-3.20.1 (r17564)
libpeas-1.18.0 (r17564)
evolution-data-server-3.20.3 (r17567)
libwnck-3.20.1 (See Ticket #8014)

# GNOME DESKTOP COMPONENTS

caribou-0.4.20 (r17567)
DConf-0.26.0 (r17567)
DConf-Editor-3.20.3 (See Ticket #8017)
gnome-backgrounds-3.20 (r17567)
gnome-themes-standard-3.20.2 (r17570)
gvfs-1.28.2 (r17570)
nautilus-3.20.1 (r17570)
zenity-3.20.0 (r17570)
gnome-bluetooth-3.20.0 (r17570)
gnome-keyring-3.20.0 (r17552)
gnome-settings-daemon-3.20.1 (r17570)
gnome-control-center-3.20.1 (r17573)
mutter-3.20.3 (r17574)
gnome-shell-3.20.3 (r17574)
gnome-shell-extensions-3.20.1 (r17574)
gnome-session-3.20.1 (r17574)
gdm-3.20.1 (r17574)
gnome-user-docs-3.20.2 (r17574)
yelp-3.20.1 (r17574)

# GNOME APPLICATIONS

baobab-3.20.1 (r17574)
brasero-3.12.1 (r17574)
cheese-3.20.2 (r17573)
eog-3.20.2 (See Ticket #7985)
epiphany-3.20.3 (See Ticket #7986)
evince-3.20.0 (See Ticket #7997)
evolution-3.20.3
file-roller-3.20.2
gedit-3.20.2
gnome-calculator-3.20.1
gnome-color-manager-3.20.0 (r17573)
gnome-disk-utility-3.20.2
gnome-logs-3.20.1
gnome-maps-3.20.1
gnome-power-manager-3.20.0
gnome-system-monitor-3.20.1
gnome-terminal-3.20.2
gnome-tweak-tool-3.20.1
gnome-weather-3.20.1
gucharmap-9.0.0
seahorse-3.20.0 (r17582)
vinagre-3.20.2 (r17582)
vino-3.20.2 (r17573)

There may be security fixes in some of these updates as well. We are going from 3.14.x, 3.16.x, 3.18.x, and some 3.20.x to 3.20.2. This constant mismash of package versions is problematic.

New point version

We are releasing GIMP 2.8.18 to fix a vulnerability in the XCF loading code (CVE-2016-4994). With special XCF files, GIMP can be caused to crash, and possibly be made to execute arbitrary code provided by the attacker.

This release includes additional bug fixes since 2.8.16. An important change has happened to the initial startup experience on Microsoft Windows and OS X platforms - any “GIMP is not responding” errors encountered there should be gone.

The source code for GIMP 2.8.18 is available from our downloads page; pre-built packages for Microsoft Windows and OS X will follow shortly.

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file. 

Impact
CVSS Severity (version 3.0):
CVSS v3 Base Score: 7.8 High
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
CVSS Version 3 Metrics:
Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope (S): Unchanged
Confidentiality (C): High
Integrity (I): High
Availability (A): High