DELTA 435959 0 21417 SVN=fUv_?$;X x^Rn0 <7_A.˯M5,NȒ+QIKyu#5!V#]݊Eעؠطs{xwOQ= A2# 6N/8 Ӥ ;&  BTrc8U\\ݓzŸJOԞ!QU[4'wHp҉KqQy9`9߈t~Rx֏A&49ZZn6^CSbsMLYcCNnH?p#!n~ўWJX+ @N!xOQ;¸">nm(k ʚNt+g׽vJn=ܝMԯ?3;,%$CJ˂rYd}L6Qu|ˀ8bDo5p3I3qWQDS*ġ Ӊd+u*_J޲/}[ ~mmx^1 0{_4 6ERjbR60W=NDIc1ѱ_160 L2ÄaL2*ӫ=XeU0VXC\5gq6gq6 ^Ԍ"]!E~Yz'E~X{h2x^N0 h{`qd4a`i4uW4⤣oOڎmKSO<5x}q R6i!O'v֝M td==>ngKa3 2{b]բ+( 4Bd0%C6."=IRbl׷RHoHCA,r-X<]F, o G@=U$ɫ͑u-\{dtZ\PqҹRfa[Q'X g. z k)%!{Gr:n5l7#ncAz'NxWQab;S8ǔ12B:!514:eQ@vnwx^[o0FW _حm%hHdx/-˯ Ej+>ٲ<|cOɳ0I-s+63J hY[s"TdIghN˫ZvkFQ'e/"cNbPuB)ka1hX5vv'^I +_>)MfkPIWjC:'$%(}<0ɏ2$#Y-,Ft54[-뽇(BY=1 ؙfNY?U@pIvx^eRKo@>ïHVJ{-5B083BǑmAuցP !&8;6G Ta[0w/ǻ_'5\q1BAd\ :M!`sQ)X jI@,@đo{ U6O?>D`E^גҥmk䝊F2f^խFllu+}(vQTe7VtMtVW0~V'7MdF>Nu4;K/|ŬHcxGON^EHuGY,16u&R(~Wa-/ʟ&H| MukIʵ%{R??RC&Q#z5dY9P& Sޓ'ؽ >GpZ/t7nPN:Y@hc3nv;x^Er0 EW`L7Ψ^ME'I"!D$dW_Hr\< 6G `P3N@ؠ!]UB+2̡%…_߾m*O<dʗ%ڄh[A8b_xj1 TG"*+,F S  _58+дrCN" t{ "x7 XbUL8ĺ8c\.]O3*J@)mŚ]H$]%yPm'0M|R8dKmX.t)tz}s[H^~]lIiָN6B'ixؤ2/, mE9$`{I2pB_=TdjL]f%N2kuԐvNγ_Cw2yz㇫! E-kz uYKS}Apache Tomcat CSRF token leak

  • CVE-2016-07637B.1010901B2.9030605@apache.org%3e CVE-2015-5346 CVE-2015-5351 CVE-2016-0763 tomcatomcat6 6.0.45 :QX9$r+оqJYYRNq3,ۇbVê}Xkva)F!BzzrF0 &θ~.$ C(#S,a-|JH钯$ c!V()ds{d(4kz*Ҭ2cƠ]TXт6M7ToVp^''5<~ZnB'iR@QsS/c<_b&V0y% ѾOJND_x^R_1O1 Vg(`z>HdNq fH2[@Ne}{.L_ ӟjԣp 쬱>';S0DDe~{bGK YXx9 - _.H&|= )M<π%zoIH9d3Tu^ pժCX٦P6]7Y-8hJpH,gy-6~p&wEK!fi}#c*RO؉1s躾g"׫FWKXp2>9U(=*kv5D¾s4LŪ,7\X}k 9$GK >sfA7:[PVߠ9g%نJY\Wi͎M(FU5 xCD  HVx^1O0g'VT QuC/9E%K܂@Bd-'ʛ̞t }OkI |%A!US2TG*IN*aȎ8o\ưHI\0AOP,ia`)5 NMwL&){%tLvT #LungARUzy"c7ﶋyھ]l;k˄J(*piI*GWhV3 T >.K.7Wqk/ax]Dc+ OJNۍpuLܚ;Cnd&$r?NM}`x^e;o0gW\xDQm iѡKѩkAQW!_r{ 5ϯ.=i'Fi~ǢSϔE[ڹ0nAf4cW%n<ۖ-73Q]rEWсy)*=iI/ijЌ **sh Q^ B|DR wba}! ^Ҳ8#Id&W}G0&&7Ǖ )3D,Ra2g\d6 k_3jJ`:iYC&r| 1J..H>ZtyQj'.1DyէЉArb?PdˀqvP?WvZ'x^mRMs0=ۿBSrlBQhӯδ"YcTI฿<޲=޽tw2jxLBA.A Z 9HZpIdpx+@KgqP=Z^ֲʬ,rM=tX}5ɷ>y VUG9OQ:m%::36ۦG)FÉQ-Z9+Ҁ_%#K5QdYb.}He딿u,cEFFz|D/]0oN>ўId[Re'$x"n "?f~xw[c%,iW췏lMq{ЯN<8x$(  = BfL߻;#A1 cz=ضd;hQsWF^G z_ԔT]nlNqKp%KKOA F!]ˌr%~B~BF])gŜN"Fa"4Ӭc4܂ń/Akݠ E$dѲމd$cg77!!U_d鿹̬ij[izW@^mCRpN  ?|'8I=*O> egGMgϲuT$]^|;RU  F>J;TL@ K@dj pM$s1᠐Bh: 3pTqƲ`t 0ȁ"D?J=+4ޓ`{GX"C8Z/'gL]5씮zx7mR;p*ҽS-ѥZ\j~:zʡΗ'?~# P{_א-|sʡ\qYFU#;:~ )bԗ`{+sS÷0p~03"b,ڜ=!Ȋ([e`R~XL3&oWg>aۖtVe*dj@y^ 1T tbPɀ9Q$Ŧ,{vN)x^Ko ɯ@t1v󪨥݌ZU5k(`G#T^].hJ}@,Hw$v/;$ҕf5u6Gc?I#c4ƈ 4)밒V1ubPFqw90w HM6eP'z%<.xM6Rżktݖ"rJKqHGXVv29}Do^ ;\}|N1B͘ghR@GyAd"BG}O he᧼Vb*HH9}GpFHRCS+^ ;i`}p,Hu!iQVCڦ.W(^+?6PӼEȍث+ k.0û\M&6'? e5foi>57+h$x^j0EW ]vc i4B d#[TikpEV{tw2*f@j`L4(H4v]!6e" Ygp2'ذ,7Gް?pjPyT!VqWmR2 Sfj;#a)9w= 85YZVIZ[ -QIޅ 9dQ*@D N)rš$x-d?Al5 R  pV%QiK1/h(*x?0gYԀMC )ٓ1 pmǝsM6M6/ǹ1e$Wҍn?sR_|}ǥ"5!Qu|JFJ?N\qZ93e> 11.2r202.3364-047 http://www.adobe.com/support/security/bulletins/apsb14-04.html 2014-02-04 2014-02-04 2014-02-05 mozillafirefox 25.0,127.0,1 24.3YXJ?J?J?J?J?J?J?K>J?J?J?J?J?J?Z97778798081828848586878889*K)WrD~S]>q> dIn disclosure otrs 3.2.73/"> ticket split mechanism to see contents of tickets and they are not permitted to se13-35513-03/ otrs -- XSS vulnerability otrs (<'N@@u=9I~YGyN@:ufficientfreebsdsa>SA-13:02.libc CVE-2010-2632 2016-08-09 FreeBSD -- BIND remote DoS with deliberately crafted DNS64 query9.09.0_6 9.19.1_13:01.bind.asc">

    Due to a software defect a crafted query can cause named(8) to crash with an assertion failurefreV?Am,x^n08Y TUڢUk4E c`Y fBiᶁ'ϟ %p- VAPB^)kE&YB<{5װT|2w)FVG{ 2ٻ 1?I-2\:6ٔ/QU(FAtEA jA(U6~Kف$3# 5`q 7d/1510.txt">

    A flaw in the OpenSSL handling of CBC mode ciphersuites in TLS 1.1, 1.2 and DTLS can be exploited in a denial of service attack on both clients and servers333 http://www.openssl.org/news/secadv_20120510.txt 2012-05-10 2012-05-10 ΥȸpwPRxړ'(\"9qP'Rܣ:2cR1rͷVIKVR܂/7i)E&Oг~hzŒb>y7cUk4hM[HH6o#f~sp@gvab_ .WAm ;}Fr!Fx^M NC UZAcO_n&%/_%ԘXN$h_~UUCq޿oW,J89&E|(C-iq٤=[F֢Kw0h8*IlD}?Iђg@S`dF}5c QVʌ<){U)paq@6p5E :LnqDQ-8c!+I? !rX_{'7b)}.#y-u4.oUU_7" 7R!y]+fkՑcwGZ)jQ=?ש3h8DdFkHAa!xJny!p>CYHVU{JmaL!JIJc)ď{NףC xiEheќ$wϫ7q~ĵX0t1fI>Uq,zjkؖO_WgJ Vh F/uC&rjںDe0#Lz mҗ/ )\v4`wqy9uATi@R bn5*7V 2iB-hQK|{V}<4I:N?uT9PNa.iVt$M-;c}fǖ5!2my>CjȀ]?` D=Ix^R]0 }fOs!?@,VfI-8vA+qE ZBq /!np@uma(R"8z )5RNrR\; 9ZI?QLL$@G-Ah1 t}\EJ !qz ѓL<:^4Sz@rX&RQg#HBsu@4!;_1 P7NhY P# BCwvcřَy;P@U17Xj*CnFc׳4ҿ6U\SFLUκ$S(/4Y?ٯ5’,,&KsU`y9!8:nn~mOKk"^|:Kdͥ³jx 7񬸝=", Pcc :_?BS):%aul5MLƕOw6 zi>7ǻR1!ķ ׂŷs2$US@ x^ERn =7_16M+WW1p7fq~n`r\̨n\ n|>w~:s6mkLT={U+`NAt@B=GKO(XW9UD8(.(O©+nI{ F跠 /o~S#6= &GAi!/%ujaw t]Ш2kLJJӏpʔ82\,mVnƪ<-`SQ{:S9Ch'+gVU]:zL߰n'9>[]<ToO}8`Dq},/PE6iO,nksZ=w N}x^}Rn0 =/_Auh ^+zV)vhɢ'鲯e']|"[k,El Ufo~"a-ب@ )`mMGxϭmf&߽c>BjCwA;D1Q7xlh! F"o0B6ODIHк8}W@3x,Q`$|9"'? ϲ,[MCr&QP`4Q${;DT?}rwbɃ' ?% ' ;ޡ>`7MΆ7NK|jZSCc0DdFPr ]i" kA&N)H" ϏkDjؔRgxW ڔJws++ǮJg!/s|=>F\.*=בO5JMccK&lr x"]Y>lXԫͲnKܮE/G-H[zVMmz@x^uRMo0 =7]-TðNR -OOb0H=Q>Xr_'Ql3X/Vr |ǎ߾+\'O bNFכ&kSe-nghNc-p|Jr8o?F2=oÓF^p'*ܹ]~M_/3'۴ =0.[0^]DM€z@Q@0F 0MfaHZmoށ_TJ?YC=`x^uSM0=bv&)ePTZ JEpDNf ϝu J00E pE U֌>/ C7 W=4uj-7h@2}كL 0-IQ$TX>"&m&}C!18 http://www.openssl.org/news/secadv_20060905.txt60.html 2006-09-18 2006-09-22 @\l^E'X'OD=Ad~p6[`T<:? $GH*t6x M .2ngAuKL8c@RJ?u5Gj۔yρgb@E>Fx^URM@ =oHl TZp93N3dxcts~~4r%p?~<օᶍ!ښ@-䡙@˻{a<V{-&FWGE?'< b<B20B b;`D xʣȇÈNzɈq<4;4P]8g(lDe&#8N>ndu.*A(Ӡ ?kҕh'SE6TT.t"~~\S xZL͹5[|BPN{.aؓq\SHN;7lX/NJvMM͂3-EJG3J8K+338\(I1j#<Щ==')d4LےS/& gNdrf{n ʂRv]M@{vPCwx^mRr0 <_zZkZ͵~@ IgS^Vǃ޼p+kn|=gpA+ `E؀BH ΁0!`F%@B ~4P%h`z!]xtvo0ϖԁvgL苾͊g<܌h"!?WSΟBmU\Bs9'!L2a ViHU-3P[\09G=I|{i&G- UAr'azG0\`+3 Gg懌zb\bӸo9s0 (PJw|)" F8m*=hd9={],qZ\#qAYK SUC? B,]2:mv'RtFl/.(ẁMb%J.JaJUɹ-lp9_wsj)i}l1LD.-(VΠWi}D=$KS4ܖ|=+Nstx^]Sn0<7_ȥH˱\!9=H@Rv]ʖc˙ݙZ)-𫇁9jӃU bЀC.#GgtDOeoMhG :p |A[ j{K-fgzI{ &cp<.މ,3W]?m &9% pG2'Ju rcFJN5 sR,.:)JQ}J:m>kXgrkD/cbגC qctZy q+#>aWRd.UްQqY':eUe+]r߰c/nloN4k8u=/[T˺nX^}~vHJ=;#Uꆣ,1e.W+(o"#C[q|ݰ2ROp\#*we³$}]'Yk`g-ٺ̽QIBiB)=_fu$k#s=kd2 VY@Qgx^e0 Dϛ mAᢷV DeIiRVEQ(>{{m7_#!iL=v| r -pt$B~fsP"h~5u/RxZ#\Nzځm7/z8bk&8iա:^X͘l+F6A;G<-I ֜90{y'> 8 y-:hoPSCvڴ⸢S<*}">:Y$SԱ۳>P4T.ʗ'׶#y sUN5!Z'MnτݧqzN7s=/u,K[V! u7\V_͗&IPVZv.Xx^Rr0 <_ɥ'Y8 /{&! C:$e_PrV(ⱋoߧ ,'.qP vpGv&ח$`o\rpf/|CURL’p%-%tQ4>+^Zz%n#zy.n]˖ ad-ذ f$`yDy >#"~w;] c=ab,9rAI=%QȂN` x^eAo1W8R $MEPKs!B֣x=_߱H;~{o־%ǒev=zz[x#0-qy~X,o͏ݗk7!O 6Q=Lq&T?Lv=~vx^Kn0E* $PYH] 2LNʈ=b,8iq'm @*Գ%Z7(KH|"{j|Wg'K/6dLi{#7ҫ8Ķ,)I4,'_C]Hʤql]A[›ˁ(^ 1K!0A=%q oterdEirgk\Y+9|Oh~ E