RedHat Update for openjpeg RHSA-2017:0559-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openjpeg security update

1.3-16 - Revert previous changes in patch for CVE-2016-5159 - Fix double free in patch for CVE-2016-5139 - Fix memory leaks and invalid read in ciobytein Related: 1419775 1.3-15 - Add two more allocation checks to patch for CVE-2016-5159 Related: 1419775 1.3-14 - Add patches for CVE-2016-5139,...

CVE-2017-5139

CVE-2017-5139 affects Honeywell XL Web II controller family (XL1000C500 XLWebExe-2-01-00 and prior; XLWeb 500 XLWebExe-1-02-08 and prior). Root cause: plaintext storage of a password, enabling password disclosure via a specific URL. Impact per sources: remote exposure of passwords, with high-seve...

Honeywell XL Web Multiple Vulnerabilities

Honeywell XL Web is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian DSA-3645-1 : chromium-browser - security update

Several vulnerabilites have been discovered in the chromium web browser. - CVE-2016-5139 GiWan Go discovered a use-after-free issue in the pdfium library. - CVE-2016-5140 Ke Liu discovered a use-after-free issue in the pdfium library. - CVE-2016-5141 Sergey Glazunov discovered a URL spoofing issu...

Fedora Update for chromium FEDORA-2016-e9798eaaa3

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

[SECURITY] [DSA 3645-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3645-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 09, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3645-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5139 GiWan Go discovered a use-after-free issue in the pdfium library. CVE-2016-5140 Ke Liu discovered a use-after-free issue in the pdfium library. CVE-2016-5141 Sergey Glazunov discovered a URL spoofing issue...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1982-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5139

CVE-2016-5139 involves multiple integer overflows in the OpenJPEG library (opj_tcd_init_tile in tcd.c) used by PDFium within Google Chrome prior to 52.0.2743.116. The flaw can cause a heap-based buffer overflow and denial of service via crafted JPEG 2000 data; some reports also indicate possible ...

Apache Tomcat 7.0.x < 7.0.57 Multiple Vulnerabilities (POODLE)

According to its self-reported version number, the Apache Tomcat service listening on the remote host is 7.0.x prior to 7.0.57. It is, therefore, affected by the following vulnerabilities : - A memory double-free error exists in 'd1both.c' related to handling DTLS packets that allows denial of...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt0.M70P.1

1.0.1j-alt0.M70P.1 built Oct. 31, 2014 Gleb Fotengauer-Malinovskiy in task 133718 Oct. 31, 2014 Gleb Fotengauer-Malinovskiy - Backported to p7 branch security: CVE-2014-3512, CVE-2014-3511, CVE-2014-3510, CVE-2014-3507, CVE-2014-3506, CVE-2014-3505, CVE-2014-3509, CVE-2014-5139, CVE-2014-3508,...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1j-alt1

Oct. 30, 2014 Gleb Fotengauer-Malinovskiy 1.0.1j-alt1 - Updated to 1.0.1j fixes CVE-2014-3512, CVE-2014-3511, CVE-2014-3510, CVE-2014-3507, CVE-2014-3506, CVE-2014-3505, CVE-2014-3509, CVE-2014-5139, CVE-2014-3508, CVE-2014-3513, CVE-2014-3567, CVE-2014-3566, CVE-2014-3568. - Updated patches from...

Security fix for the ALT Linux 8 package openssl10 version 1.0.1j-alt1

Oct. 30, 2014 Gleb Fotengauer-Malinovskiy 1.0.1j-alt1 - Updated to 1.0.1j fixes CVE-2014-3512, CVE-2014-3511, CVE-2014-3510, CVE-2014-3507, CVE-2014-3506, CVE-2014-3505, CVE-2014-3509, CVE-2014-5139, CVE-2014-3508, CVE-2014-3513, CVE-2014-3567, CVE-2014-3566, CVE-2014-3568. - Updated patches from...

Security fix for the ALT Linux 7 package openssl10 version 1.0.1j-alt1

Oct. 30, 2014 Gleb Fotengauer-Malinovskiy 1.0.1j-alt1 - Updated to 1.0.1j fixes CVE-2014-3512, CVE-2014-3511, CVE-2014-3510, CVE-2014-3507, CVE-2014-3506, CVE-2014-3505, CVE-2014-3509, CVE-2014-5139, CVE-2014-3508, CVE-2014-3513, CVE-2014-3567, CVE-2014-3566, CVE-2014-3568. - Updated patches from...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10649)

According to its self-reported version number, the remote Junos device is affected by multiple vulnerabilities in the implementation of OpenSSL : - An error exists related to 'ec point format extension' handling and multithreaded clients that allows freed memory to be overwritten during a resumed...

Apple Mac OS X Multiple Vulnerabilities -08 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...