19141 matches found
openSUSE Security Update : perl-XML-LibXML (openSUSE-2018-60)
This update for perl-XML-LibXML fixes the following issues : Security issue fixed : - CVE-2017-10672: Fix use-after-free that allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call bsc1046848. This update was imported from the SUSE:SLE-12:Update upda...
SUSE SLED12 / SLES12 Security Update : perl-XML-LibXML (SUSE-SU-2018:0123-1)
This update for perl-XML-LibXML fixes the following issues: Security issue fixed : - CVE-2017-10672: Fix use-after-free that allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call bsc1046848. Note that Tenable Network Security has extracted the...
The vulnerability of the PCRE library in the Mac OS X operating system allows a hacker to cause a service failure or exert other effects.
Vulnerability of the PCRE library in the Mac OS X operating system. Exploiting this vulnerability can allow a malicious actor to cause service failure application termination or have other adverse effects...
[ASA-201801-15] perl-xml-libxml: arbitrary code execution
Arch Linux Security Advisory ASA-201801-15 ========================================== Severity: High Date : 2018-01-18 CVE-ID : CVE-2017-10672 Package : perl-xml-libxml Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-501 Summary ======= The package...
[SECURITY] Fedora 26 Update: irssi-1.0.6-1.fc26
Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...
SUSE-SU-2018:0123-1 Security update for perl-XML-LibXML
This update for perl-XML-LibXML fixes the following issues: Security issue fixed: - CVE-2017-10672: Fix use-after-free that allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call bsc1046848...
Debian LTS: Security Advisory for libdatetime-timezone-perl (DLA-887-1)
This update includes the changes in tzdata 2017b for the Perl bindings. For the list of changes, see DLA-886-1. This VT has been deprecated as it doesn SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora 27 : git (2017-655f0d38c3)
These releases are about hardening git shell that is used on servers against an unsafe user input, which git cvsserver copes with poorly. From the release notes : - 'git cvsserver' no longer is invoked by 'git shell' by default, as it is old and largely unmaintained. - Various Perl scripts did no...
Debian LTS: Security Advisory for libdatetime-timezone-perl (DLA-857-1)
This update includes the changes in tzdata 2017a for the Perl bindings. For the list of changes, see DLA-856-1. This VT has been deprecated as it doesn SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora 27 : perl-DBD-MySQL (2017-874bd165c0)
Security fix for CVE-2017-10789 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora 27 : 4:perl (2017-7ae07e9f1f)
Update perl:MODULECOMPAT ---- Security fix for CVE-2017-12837 CVE-2017-12883 see Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 27 : perl-Net-Ping-External (2017-5adf087854)
Fixes a command injection vulnerability CVE-2008-7319 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
The vulnerability of the rmtree and remove_tree functions in the Perl File-Path interpreter allows a hacker to compromise data integrity.
The vulnerabilities of the rmtree and removetree functions in the Perl File-Path interpreter are caused by synchronization errors when using a shared resource due to race conditions between the check time and the use time. Exploiting these vulnerabilities can allow a remote attacker to compromise...
CVE-2014-5509
clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$...
Code injection
clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$...
CVE-2014-5509
clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$...
CVE-2014-5509
clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$...
CVE-2014-5509
CVE-2014-5509 affects the Perl Clipboard module: clipedit allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$. The issue targets a local-privilege/impact vector with a partial integrity impact and partial availability impact per CVSS data. Exploitation details or ...
MGASA-2018-0047 Updated perl packages fix security vulnerability
John Lightsey and Todd Rinaldo reported that the opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory which might be changed to another directory without the user realising and potentially leading to privilege escalation...
MGASA-2018-0048 Updated libxml2 & perl-XML-LibXML packages fix security vulnerabilities
Use-after-free error could lead to crash CVE-2016-4658. Use-after-free vulnerability in libxml2 through 2.9.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function CVE-2016-5131. libxml2 2.9.4 and earli...