Weekly Patch and Update Summary for Week of June 10, 2016

For all patches and updates listed below please use the appropriate updating methods for your system.  It is advised that you patch and update your system as soon as possible.

Android
The June 2016 Android Security bulletin has been released and contains details on many patched security vulnerabilities.  Eight of these vulnerabilities were listed as critical, the most severe being a vulnerability that could enable remote code execution of an affected device.  For more information please see: Android Security Bulletin June 2016.

WordPress

WordPress plugin, WP Mobile Detector, contains a vulnerability in versions prior to 3.6.  This vulnerability may allow a remote attacker to gain control of a system.  Users and Administrators are advised to disable the configuration option allow_url_fopen unless it is necessary.  They should also review and apply the necessary update.

Mozilla Firefox

The Mozilla Foundation released security updates for vulnerabilities found in Firefox, Firefox ESR and Network Security Services (NSS).  These vulnerabilities may allow a remote attacker to gain control of a system.  

List of Updates:

• Firefox 4.7
• Firefox ESR 45.2
• NSS 3.23

Symantec

Symantec released security updates to address vulnerabilities in multiple products.  These vulnerabilities may allow an attacker to gain control of a system.  For more information, please see the Symantec Advisory: SYM16-009.

Ubuntu

Canonical has released many security updates for their operating system Ubuntu.  For more information please see Ubuntu Security Notices.
List of Updates:

• USN-2995-1: Squid vulnerabilities
• USN-2993-1: Firefox vulnerabilities
• USN-2994-1: libxml2 vulnerabilities
• USN-2992-1: Oxide vulnerabilities