Thank you for reading the Linux Advisory Watch Security Newsletter. The purpose of this document is to provide our readers with a quick summary of each week's vendor security bulletins and pointers on methods to improve the security posture of your open source system. Vulnerabilities affect nearly every vendor virtually every week, so be sure to read through to find the updates your distributor have made available.

LinuxSecurity.com Feature Extras:

Peter Smith Releases Linux Network Security Online - Thanks so much to Peter Smith for announcing on linuxsecurity.com the release of his Linux Network Security book available free online. "In 2005 I wrote a book on Linux security. 8 years later and the publisher has gone out of business. Now that I'm free from restrictions on reproducing material from the book, I have decided to make the entire book available online."

Securing a Linux Web Server - With the significant prevalence of Linux web servers globally, security is often touted as a strength of the platform for such a purpose. However, a Linux based web server is only as secure as its configuration and very often many are quite vulnerable to compromise. While specific configurations vary wildly due to environments or specific use, there are various general steps that can be taken to insure basic security considerations are in place.

(May 23)

Security Report Summary
(May 21)

Security Report Summary
(May 19)

Security Report Summary
(May 19)

Security Report Summary
(May 19)

Security Report Summary
(May 18)

Security Report Summary
(May 17)

Security Report Summary
(May 16)

Security Report Summary
(May 23)

A vulnerability in LibYAML could allow an attacker to execute arbitrary code or cause a Denial of Service condition.
(May 19)

A local privilege escalation vulnerability has been discovered in X2Go Server.
(May 18)

A vulnerability in Symfony may allow remote attackers to read arbitrary files.
(May 18)

Memory consumption errors in Apache Portable Runtime and APR Utility Library could result in Denial of Service.
(May 18)

A vulnerability in lib3ds might allow a remote attacker to execute arbitrary code.
(May 18)

Multiple vulnerabilities in Pidgin may allow execution of arbitrary code.
(May 18)

A vulnerability has been found in Charybdis and ShadowIRCd, possibly resulting in remote Denial of Service.
(May 18)

A stack-based buffer overflow in JBIG-KIT might allow remote attackers to cause a Denial of Service.
(May 18)

Multiple vulnerabilities have been found in MCrypt, allowing attackers to execute arbitrary code or cause Denial of Service.
(May 18)

A buffer overflow in OpenConnect could result in execution of arbitrary code or Denial of Service.
(May 18)

Multiple vulnerabilities have been discovered in Munin which may lead to symlink attacks, file creation, or bypass of security restrictions.
(May 18)

A hash collision vulnerability in Mono allows remote attackers to cause a Denial of Service condition.
(May 18)

Multiple vulnerabilities have been found in util-linux, the worst of which may lead to Denial of Service.
(May 17)

A vulnerability in Ruby OpenID may lead to Denial of Service.
(May 17)

Multiple vulnerabilities have been found in Pango, the worst of which allow execution of arbitrary code or Denial of Service.
(May 17)

Multiple vulnerabilities have been found in Ettercap, the worst of which may allow execution of arbitrary code.
(May 17)

A vulnerability in Bacula may allow remote attackers to obtain sensitive information.
(May 17)

Multiple vulnerabilities have been found in Rack, the worst of which allow execution of arbitrary code.
(May 17)

Multiple vulnerabilities have been discovered in ImageMagick, the worst of which could lead to arbitrary code execution.
(May 16)

Multiple vulnerabilities have been found in ClamAV, the worst of which could lead to arbitrary code execution.
(May 15)

Multiple vulnerabilities have been found in X.Org X Server, allowing attackers to execute arbitrary code or cause a Denial of Service condition.
Mandriva: 2014:104: egroupware (May 16)

Updated egroupware packages fix security vulnerabilities: eGroupWare before 1.8.007 allows logged in users with administrative priviledges to remotely execute arbitrary commands on the server. It is also vulnerable to a cross site request forgery vulnerability [More...]
Mandriva: 2014:103: wordpress (May 16)

Multiple vulnerabilities has been discovered and corrected in wordpress: WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the [More...]
Mandriva: 2014:102: mariadb (May 16)

Multiple vulnerabilities has been discovered and corrected in mariadb: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML [More...]
Mandriva: 2014:101: owncloud (May 16)

Updated owncloud packages fix security vulnerabilities: Owncloud versions 5.0.16 and 6.0.3 fix several unspecified security vulnerabilities, as well as many other bugs. [More...]
Mandriva: 2014:100: java-1.7.0-openjdk (May 16)

Updated java-1.7.0-openjdk packages fix security vulnerabilities: An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when processed. A remote attacker, or an [More...]
Mandriva: 2014:099: dovecot (May 16)

A vulnerability has been discovered and corrected in dovecot: Dovecot 1.1 before 2.2.13 and dovecot-ee before 2.1.7.7 and 2.2.x before 2.2.12.12 does not properly close old connections, which allows remote attackers to cause a denial of service (resource consumption) [More...]
Mandriva: 2014:098: rawtherapee (May 16)

Updated rawtherapee package fixes security vulnerability: Due to flaws in the embedded copy of dcraw in rawtherapee, corrupt input files might trigger a division by zero, an infinite loop, or a null pointer dereference (CVE-2013-1438). [More...]
Mandriva: 2014:097: libvirt (May 16)

Multiple vulnerabilities has been discovered and corrected in libvirt: The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev [More...]
Mandriva: 2014:096: python-jinja2 (May 16)

Updated python-jinja2 packages fix security vulnerability: Jinja2, a template engine written in pure python, was found to use /tmp as a default directory for jinja2.bccache.FileSystemBytecodeCache, which is insecure because the /tmp directory is world-writable [More...]
Mandriva: 2014:095: struts (May 16)

Updated struts packages fix security vulnerability: It was found that the Struts 1 ActionForm object allowed access to the 'class' parameter, which is directly mapped to the getClass() method. A remote attacker could use this flaw to manipulate the ClassLoader [More...]
Mandriva: 2014:094: rxvt-unicode (May 16)

Updated rxvt-unicode package fixes security vulnerability: rxvt-unicode (aka urxvt) before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text [More...]
Mandriva: 2014:093: couchdb (May 16)

Updated couchdb packages fix security vulnerability: Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids (CVE-2014-2668). [More...]
Mandriva: 2014:092: cups (May 16)

Multiple vulnerabilities has been discovered and corrected in cups: lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving [More...]
Mandriva: 2014:091: cups (May 16)

Updated cups packages fix security vulnerability: Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, [More...]
Mandriva: 2014:090: openssl (May 16)

Updated openssl packages fix security vulnerability: A read buffer can be freed even when it still contains data that is used later on, leading to a use-after-free. Given a race condition in a multi-threaded application it may permit an attacker to inject [More...]
Mandriva: 2014:089: nagios (May 16)

Updated nagios packages fix security vulnerability: Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote attackers to [More...]
Mandriva: 2014:088: python-lxml (May 15)

Updated python-lxml packages fix security vulnerability: The clean_html() function, provided by the lxml.html.clean module, did not properly clean HTML input if it included non-printed characters (\x01-\x08). A remote attacker could use this flaw to serve malicious [More...]
Mandriva: 2014:087: php (May 15)

A vulnerability has been discovered and corrected in php: PHP FPM in PHP versions before 5.4.28 and 5.5.12 uses a UNIX domain socket with world-writable permissions by default, which allows any local user to connect to it and execute PHP scripts as the apache user [More...]
Red Hat: 2014:0537-01: mysql55-mysql: Moderate Advisory (May 22)

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Software Collections 1. The Red Hat Security Response Team has rated this update as having Moderate [More...]
Red Hat: 2014:0536-01: mysql55-mysql: Moderate Advisory (May 22)

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate [More...]
Red Hat: 2014:0529-01: rubygem-openshift-origin-node: Important Advisory (May 21)

An updated rubygem-openshift-origin-node package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0. The Red Hat Security Response Team has rated this update as having [More...]
Red Hat: 2014:0530-01: rubygem-openshift-origin-node: Important Advisory (May 21)

An updated rubygem-openshift-origin-node package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.1. The Red Hat Security Response Team has rated this update as having [More...]
Red Hat: 2014:0520-01: kernel: Important Advisory (May 20)

Updated kernel packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having [More...]
Red Hat: 2014:0522-01: mariadb55-mariadb: Moderate Advisory (May 20)

Updated mariadb55-mariadb packages that fix several security issues are now available for Red Hat Software Collections 1. The Red Hat Security Response Team has rated this update as having Moderate [More...]
Red Hat: 2014:0513-01: libxml2: Moderate Advisory (May 19)

Updated libxml2 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate [More...]
Red Hat: 2014:0512-01: kernel: Important Advisory (May 19)

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having [More...]
Red Hat: 2014:0508-01: java-1.6.0-ibm: Critical Advisory (May 15)

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical [More...]
Red Hat: 2014:0509-01: java-1.5.0-ibm: Important Advisory (May 15)

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having [More...]
Red Hat: 2014:0510-01: ruby193-rubygem-actionpack: Moderate Advisory (May 15)

Updated ruby193-rubygem-actionpack packages that fix one security issue are now available for Red Hat Software Collections 1. The Red Hat Security Response Team has rated this update as having Moderate [More...]
Ubuntu: 2218-1: Xalan-Java vulnerability (May 21)

Xalan-Java could be made to load arbitrary classes or access externalresources.
Ubuntu: 2217-1: lxml vulnerability (May 21)

lxml could allow cross-site scripting (XSS) attacks.
Ubuntu: 2215-1: libgadu vulnerability (May 21)

libgadu could be made to crash or run programs if it received speciallycrafted network traffic.
Ubuntu: 2216-1: Pidgin vulnerability (May 21)

Pidgin could be made to crash or run programs if it received speciallycrafted network traffic.
Ubuntu: 2214-1: libxml2 vulnerability (May 15)

libxml2 could be made to consume resources if it processed a speciallycrafted file.
Ubuntu: 2213-1: Dovecot vulnerability (May 15)

Dovecot could be made to stop responding if it received specially craftednetwork traffic.