News: 0000831178

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Security updates for Thursday

([Security] Sep 10, 2020 13:33 UTC (Thu) (jake))


Dist.

ID

Release

Package

Date

Arch Linux

[1]ASA-202009-2

ark

2020-09-09

Arch Linux

[2]ASA-202009-5

gnupg

2020-09-09

Arch Linux

[3]ASA-202009-3

go

2020-09-09

Arch Linux

[4]ASA-202009-1

opendmarc

2020-09-09

Arch Linux

[5]ASA-202009-4

python-django

2020-09-09

Debian

[6]DLA-2369-1

LTS

libxml2

2020-09-10

Gentoo

[7]202009-03

chromium

2020-09-10

Oracle

[8]ELSA-2020-3658

OL8

librepo

2020-09-09

Oracle

[9]ELSA-2020-3643

OL6

thunderbird

2020-09-09

Red Hat

[10]RHSA-2020:3713-01

EL8

dovecot

2020-09-10

Red Hat

[11]RHSA-2020:3714-01

EL8

httpd:2.4

2020-09-10

SUSE

[12]SUSE-SU-2020:2583-1

SLE15

avahi

2020-09-09

SUSE

[13]SUSE-SU-2020:2582-1

OS8 SLE12 SES5

kernel

2020-09-09

SUSE

[14]SUSE-SU-2020:2581-1

SLE15

openldap2

2020-09-09

Ubuntu

[15]USN-4488-2

14.04

xorg-server

2020-09-09



[1] https://lwn.net/Articles/831165/

[2] https://lwn.net/Articles/831166/

[3] https://lwn.net/Articles/831167/

[4] https://lwn.net/Articles/831168/

[5] https://lwn.net/Articles/831169/

[6] https://lwn.net/Articles/831170/

[7] https://lwn.net/Articles/831171/

[8] https://lwn.net/Articles/831172/

[9] https://lwn.net/Articles/831173/

[10] https://lwn.net/Articles/831163/

[11] https://lwn.net/Articles/831164/

[12] https://lwn.net/Articles/831174/

[13] https://lwn.net/Articles/831175/

[14] https://lwn.net/Articles/831176/

[15] https://lwn.net/Articles/831177/

Look Out! It's Microsoft Outlook

An old maxim in the Unix community states, "All programs expand until they
can read mail... except Microsoft Outlook." Well, that's no longer true.
By taking advantage of loopholes in several undocumented APIs, a team of
geeks were able to transform Outlook from a virus-delivery system into an
actual mail client.

"It was quite a feat to accomplish this," said one of the geeks. "I mean,
the rat's nest that is the Windows API can be used to frighten small
children... or adults. And the frequency by which Outlook exploits are
discovered is directly proportional to the number of times Bill Gates uses
the word 'innovation'. But this is the first time somebody has discovered
a beneficial exploit."

Microsoft has vowed to release a patch to fix the uncovered security
flaws. "We simply cannot tolerate unauthorized reverse engineering and
hacking of our innovative solutions. Our Security Response Team will pull
an all-nighter to eliminate these known issues."