The security updates of spip, tomcat8, jython, flatpak, apache2 and expat. Vulnerability Information DSA-3890-1 spip — Security Updates Security database details: Emeric Boit of ANSSI reported that SPIP, a website engine for publishing, insufficiently sanitises the value from the X-Forwarded-Host HTTP header field. An unauthenticated attacker can take advantage of this flaw to cause remote code execution. DSA-3891-1 tomcat8 — Security Updates Security database details: Aniket Nandkishor Kulkarni discovered that in tomcat8, a servlet and JSP engine, static error pages used the original request's HTTP method to serve content, instead of systematically using the GET method. This could under certain ...Read more
Deepin Screenshot V4.0 is released——Easy screenshot with continuous happy
Deepin Screenshot is an elegant screenshot application developed by Deepin Technology, it has features like smart window detection, many shortcut keys, image editing, delay capture, smart saving, adjusting image resolution and so on. As the preinstalled screenshot tool for deepin, Deepin Screenshot V4.0 has most of functions from its previous versions and has refactored code with optimization that can be opened within a second. It also has new designed toolbar, selection box and can capture the right context menu interface directly. Refactored Code with Optimization to Open within a Second The program has refactored code with C++ to boost its launching and to optimize ...Read more
Security Updates（DSA 3786-1 &DSA 3799-1 &DSA 3808-1... &DSA 3885-1）
The security updates of vim, imagemagick, imagemagick, icu, firefox-esr, weechat, ghostscript, libxstream-java, tomcat7, tomcat8, tiff, libtirpc, libytnef, xen, git, kde4libs, rtmpdump, bitlbee, bind9, jbig2dec, deluge, mysql-connector-java, puppet, imagemagick, fop, mosquitto, strongswan, sudo, openldap, tnef, wordpress, perl, ettercap, libmwaw, otrs2, tor, zziplib, libosip2, libgcrypt20, firefox-esr, request-tracker4, gnutls28, irssi. Vulnerability Information DSA-3786-1 vim —Security Updates Security database details: Editor spell files passed to the vim (Vi IMproved) editor may result in an integer overflow in memory allocation and a resulting buffer overflow which potentially could result in the execution of arbitrary code or denial of service. DSA-3799-1 imagemagick —Security Updates Security database details: This ...Read more
Security Updates (DSA 3761-1 &DSA 3762-1 &DSA 3764-1... &DSA 3840-1)
The security updates of rabbitmq-server, tiff, pdns, mapserver, libphp-swiftmailer, libxpm, openssl, lcms2, tcpdump, libgd2, wordpress, ntfs-3g, svgsalamander, viewvc, libevent, spice, libreoffice, munin, bind9, apache2, mupdf, libquicktime, ruby-zip, zabbix, texlive-base, icoutils, chromium-browser, wireshark, ioquake3, r-base, audiofile, wordpress, jbig2dec, gst-plugins-bad1.0, gst-plugins-base1.0, gst-plugins-good1.0, gst-plugins-ugly1.0, gstreamer1.0, eject, jhead, tryton-server, libreoffice, mysql-connector-java. Vulnerability Information DSA-3761-1 rabbitmq-server —Security Updates Security database details: It was discovered that RabbitMQ, an implementation of the AMQP protocol, didn't correctly validate MQTT (MQ Telemetry Transport) connection authentication. This allowed anyone to login to an existing user account without having to provide a password. DSA-3762-1 tiff —Security Updates Security database details: Multiple vulnerabilities have been discovered in the libtiff library and the included tools tiff2rgba, rgb2ycbcr, tiffcp, tiffcrop, tiff2pdf and tiffsplit, which may result in denial of service, memory disclosure or the execution of arbitrary code. DSA-3764-1 pdns —Security Updates Security ...Read more
Update Record of Applications in deepin Store (2017.06)
Update Details of June 14 Application Updated: BCloud, DBeaver, Edraw Max, Opera, GIMP, Synergy, Wiznote Update Details of June 2 Application Added: Harmony, Splashtop, Gbyzanz, Iris Mini, RStudio, Etcher, Vuze