New gdk-pixbuf2 packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue.

The Mozilla Project reports :

MFSA 2015-79 Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)

MFSA 2015-80 Out-of-bounds read with malformed MP3 file

MFSA 2015-81 Use-after-free in MediaStream playback

MFSA 2015-82 Redefinition of non-configurable JavaScript object properties

MFSA 2015-83 Overflow issues in libstagefright

MFSA 2015-84 Arbitrary file overwriting through Mozilla Maintenance Service with hard links

MFSA 2015-85 Out-of-bounds write with Updater and malicious MAR file

MFSA 2015-86 Feed protocol with POST bypasses mixed content protections

MFSA 2015-87 Crash when using shared memory in JavaScript

MFSA 2015-88 Heap overflow in gdk-pixbuf when scaling bitmap images

MFSA 2015-90 Vulnerabilities found through code inspection

MFSA 2015-91 Mozilla Content Security Policy allows for asterisk wildcards in violation of CSP specification

MFSA 2015-92 Use-after-free in XMLHttpRequest with shared workers

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2015-4473, CVE-2015-4475, CVE-2015-4478, CVE-2015-4479, CVE-2015-4480, CVE-2015-4493, CVE-2015-4484, CVE-2015-4491, CVE-2015-4485, CVE-2015-4486, CVE-2015-4487, CVE-2015-4488, CVE-2015-4489, CVE-2015-4492)

After installing the update, Firefox must be restarted for the changes to take effect.

- update to Firefox 40.0 (bnc#940806)

  - Added protection against unwanted software downloads

  - Suggested Tiles show sites of interest, based on     categories from your recent browsing history

  - Hello allows adding a link to conversations to provide     context on what the conversation will be about

  - New style for add-on manager based on the in-content     preferences style

  - Improved scrolling, graphics, and video playback     performance with off main thread compositing (GNU/Linux     only)

  - Graphic blocklist mechanism improved: Firefox version     ranges can be specified, limiting the number of devices     blocked security fixes :

  - MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 Miscellaneous     memory safety hazards

  - MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds     read with malformed MP3 file

  - MFSA 2015-81/CVE-2015-4477 (bmo#1179484) Use-after-free     in MediaStream playback

  - MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of     non-configurable JavaScript object properties

  - MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493     Overflow issues in libstagefright

  - MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file     overwriting through Mozilla Maintenance Service with     hard links (only affected Windows)

  - MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds     write with Updater and malicious MAR file (does not     affect openSUSE RPM packages which do not ship the     updater)

  - MFSA 2015-86/CVE-2015-4483 (bmo#1148732) Feed protocol     with POST bypasses mixed content protections

  - MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when     using shared memory in JavaScript

  - MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow     in gdk-pixbuf when scaling bitmap images

  - MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948,     bmo#1178148) Buffer overflows on Libvpx when decoding     WebM video

  - MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489     Vulnerabilities found through code inspection

  - MFSA 2015-91/CVE-2015-4490 (bmo#1086999) Mozilla Content     Security Policy allows for asterisk wildcards in     violation of CSP specification

  - MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free     in XMLHttpRequest with shared workers

  - added mozilla-no-stdcxx-check.patch

  - removed obsolete patches

  - mozilla-add-glibcxx_use_cxx11_abi.patch

  - firefox-multilocale-chrome.patch

  - rebased patches

  - requires version 40 of the branding package

  - removed browser/searchplugins/ location as it's not     valid anymore

  - includes security update to Firefox 39.0.3 (bnc#940918)

  - MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)     Same origin violation and local file stealing via PDF     reader

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2015-4473, CVE-2015-4491, CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

Note: All of the above issues cannot be exploited by a specially crafted HTML mail message because JavaScript is disabled by default for mail messages. However, they could be exploited in other ways in Thunderbird (for example, by viewing the full remote content of an RSS feed).

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Gary Kwong, Christian Holler, Byron Campen, Gustavo Grieco, and Ronald Crane as the original reporters of these issues.

For technical details regarding these flaws, refer to the Mozilla security advisories for Thunderbird 38.2. You can find a link to the Mozilla advisories in the References section of this erratum.

All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 38.2, which corrects these issues. After installing the update, Thunderbird must be restarted for the changes to take effect.

This update to Thunderbird 38.2.0 fixes the following issues (bnc#940806) :

  - MFSA 2015-79/CVE-2015-4473 Miscellaneous memory safety     hazards

  - MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds     read with malformed MP3 file

  - MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of     non-configurable JavaScript object properties

  - MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493     Overflow issues in libstagefright

  - MFSA 2015-84/CVE-2015-4481 (bmo1171518) Arbitrary file     overwriting through Mozilla Maintenance Service with     hard links (only affected Windows)

  - MFSA 2015-85/CVE-2015-4482 (bmo#1184500) Out-of-bounds     write with Updater and malicious MAR file (does not     affect openSUSE RPM packages which do not ship the     updater)

  - MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when     using shared memory in JavaScript

  - MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow     in gdk-pixbuf when scaling bitmap images

  - MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948,     bmo#1178148) Buffer overflows on Libvpx when decoding     WebM video

  - MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489     Vulnerabilities found through code inspection

  - MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free     in XMLHttpRequest with shared workers

The gdk pixbuf library was updated to fix three security issues.

These security issues were fixed :

  - CVE-2015-7673: Fix some more overflows scaling a gif     (bsc#948791)

  - CVE-2015-4491: Check for overflow before allocating     memory when scaling (bsc#942801)

  - CVE-2015-7673: Fix an overflow and DoS when scaling TGA     files (bsc#948790).

  - CVE-2015-7674: Fix overflow when scaling GIF     files(bsc#948791).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2015-4491

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

gdk-pixbuf was updated to version 2.31.6 to fix a secuirty vulnerability and several bugs.

  - Update to version 2.31.6 (boo#942801) :

  + Really fix bgo#752297. This is CVE-2015-4491.

  + Updated translations.

  - Update to version 2.31.5 :

  + Add support for g_autoptr for all object types     (bgo#750497).

  + Avoid a possible divide-by-zero in the pixbuf loader     (bgo#750440).

  + Remove gettext .pot file hack (bgo#743574).

  + Be more careful about integer overflow (bgo#752297).

  + Updated translations.

  - Drop README from docs as it is now empty.

  - Add generic www.gnome.org URL to silence a few lint     warnings.

  - Update to version 2.31.4 :

  + SVGZ icons in notification GNOME3 (bgo#648815).

  + gdk_pixbuf_apply_embedded_orientation is not working     (bgo#725582).

  + Updated translations.

  - Update to version 2.31.3 :

  + API changes: Revert an annotation change that broke     bindings.

  + Build fixes :

  - Clean up configure

  - Fix Visual Studio build

  - Define MAP_ANONYMOUS when needed

  - Include gi18n-lib.h where needed

  + Updated translations.

  - Update to version 2.31.2 :

  + API changes :

  - Deprecate GdkPixdata.

  - Add gdk_pixbuf_get_options() helper to list set options.

  - Annotations fixes for various functions.

  - Remove incorrect info about area-prepared signal.

  + Image format support changes :

  - Flag multi-page TIFF files.

  - Fix memory usage for GIF animations, add note about     minimum frame length.

  - Return an error for truncated PNG files.

  - Add density (DPI) support for JPEG, PNG and TIFF.

  - Fix reading CMYK JPEG files generated by Photoshop.

  - Allow saving 1-bit mono TIFF files as used in faxes.

  - Simplify loader names.

  - Fix loading GIF files when the first write is short.

  - Add progressive loading to ICNS files.

  - Add support for 256x256 ICO files.

  - Fix reading MS AMCap2 BMP files.

  + Other :

  - Honour requested depth in Xlib.

  - Special-case compositing/copying with no scaling.

  - Add relocation support to OSX and Linux.

  - Prefer gdk-pixbuf's loaders to the GDI+ ones on Windows.

  - fix bashism in post script

The remote host is affected by the vulnerability described in GLSA-201512-05 (gdk-pixbuf: Multiple Vulnerabilities)

    Three heap-based buffer overflow vulnerabilities have been discovered in       gdk-pixbuf. Please review the CVE identifiers referenced below for       details.
  Impact :

    A remote attacker could entice a user to open a specially crafted image       file with an application linked against gdk-pixbuf, possibly resulting in       execution of arbitrary code with the privileges of the process or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2712-1 advisory.

    Gary Kwong, Christian Holler, and Byron Campen discovered multiple memory safety issues in Thunderbird. If     a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these     to cause a denial of service via application crash, or execute arbitrary code with the privileges ofthe     user invoking Thunderbird. (CVE-2015-4473)

    Ronald Crane reported 3 security issues. If a user were tricked in to opening a specially crafted message,     an attacker could potentially exploit these, in combination with another security vulnerability, to cause     a denial of service via application crash, or execute arbitrary code with the privileges of the user     invoking Thunderbird. (CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

    Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If a user were tricked in to opening a specially     crafted message, an attacker could potentially exploit this to cause a denial of service via application     crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2015-4491)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities.

  - Firefox was updated to 38.2.1 ESR (bsc#943608)

  - MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free     when resizing canvas element during restyling

  - MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on     notification bypass through data URLs

  - Firefox was updated to 38.2.0 ESR (bsc#940806)

  - MFSA 2015-78/CVE-2015-4495 (bmo#1178058, bmo#1179262)     Same origin violation and local file stealing via PDF     reader

  - MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 (bmo#1143130,     bmo#1161719, bmo#1177501, bmo#1181204, bmo#1184068,     bmo#1188590, bmo#1146213, bmo#1178890, bmo#1182711)     Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)

  - MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds     read with malformed MP3 file

  - MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of     non-configurable JavaScript object properties

  - MFSA 2015-83/CVE-2015-4479 (bmo#1185115, bmo#1144107,     bmo#1170344, bmo#1186718) Overflow issues in     libstagefright

  - MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when     using shared memory in JavaScript

  - MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow     in gdk-pixbuf when scaling bitmap images

  - MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948,     bmo#1178148) Buffer overflows on Libvpx when decoding     WebM video

  - MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489     (bmo#1176270, bmo#1182723, bmo#1171603) Vulnerabilities     found through code inspection

  - MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free     in XMLHttpRequest with shared workers

Mozilla NSS switched the CKBI ABI from 1.98 to 2.4, which is what Firefox 38ESR uses.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

gtk2 was updated to fix two security issues.

These security issues were fixed :

  - CVE-2015-4491: Integer overflow in the make_filter_table     function in pixops/pixops.c in gdk-pixbuf before 2.31.5,     allowed remote attackers to execute arbitrary code or     cause a denial of service (heap-based buffer overflow     and application crash) via crafted bitmap dimensions     that were mishandled during scaling (bsc#942801).

  - CVE-2015-7674: Fix overflow when scaling GIF files     (bsc#948791).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Gustavo Grieco discovered different security issues in Gtk+2.0's gdk-pixbuf.

CVE-2015-4491

Heap overflow when processing BMP images which may allow to execute of arbitrary code via malformed images.

CVE-2015-7673

Heap overflow when processing TGA images which may allow execute arbitrary code or denial of service (process crash) via malformed images.

CVE-2015-7674

Integer overflow when processing GIF images which may allow to execute arbitrary code or denial of service (process crash) via malformed image.

For Debian 6 'Squeeze', these issues have been fixed in gtk+2.0 version 2.20.1-2+deb6u2. We recommend you to upgrade your gtk+2.0 packages.

Learn more about the Debian Long Term Support (LTS) Project and how to apply these updates at: https://wiki.debian.org/LTS/

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
85725	Slackware 13.37 / 14.0 / 14.1 / current : gdk-pixbuf2 (SSA:2015-244-01)	Nessus	Slackware Local Security Checks	2015/9/2	2021/1/14	medium
85338	FreeBSD : mozilla -- multiple vulnerabilities (c66a5632-708a-4727-8236-d65b2d5b2739)	Nessus	FreeBSD Local Security Checks	2015/8/12	2021/1/6	critical
85343	Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20150811)	Nessus	Scientific Linux Local Security Checks	2015/8/12	2021/1/14	critical
85436	openSUSE Security Update : MozillaFirefox (openSUSE-2015-547)	Nessus	SuSE Local Security Checks	2015/8/17	2022/5/25	critical
85645	RHEL 5 / 6 / 7 : thunderbird (RHSA-2015:1682)	Nessus	Red Hat Local Security Checks	2015/8/26	2020/5/29	critical
85702	openSUSE Security Update : MozillaThunderbird (openSUSE-2015-558)	Nessus	SuSE Local Security Checks	2015/8/31	2021/1/19	critical
87646	SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2015:2195-2)	Nessus	SuSE Local Security Checks	2015/12/29	2021/1/6	medium
85818	Fedora 21 : mingw-gdk-pixbuf-2.31.6-1.fc21 (2015-14010)	Nessus	Fedora Local Security Checks	2015/9/8	2021/1/11	medium
85839	openSUSE Security Update : gdk-pixbuf (openSUSE-2015-570)	Nessus	SuSE Local Security Checks	2015/9/8	2021/1/19	medium
87546	GLSA-201512-05 : gdk-pixbuf: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2015/12/22	2021/1/11	medium
85648	Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2712-1)	Nessus	Ubuntu Local Security Checks	2015/8/26	2024/8/28	critical
85763	SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2015:1476-1)	Nessus	SuSE Local Security Checks	2015/9/3	2022/5/25	critical
86536	SUSE SLED11 / SLES11 Security Update : gtk2 (SUSE-SU-2015:1787-1)	Nessus	SuSE Local Security Checks	2015/10/22	2021/1/6	medium
88995	Debian DLA-434-1 : gtk+2.0 security update	Nessus	Debian Local Security Checks	2016/2/29	2021/1/11	medium

检测

插件搜索

medium

critical

critical

critical

critical

critical

medium

medium

medium

medium

critical

critical

medium

medium