September 13, 2016 — KB3185611 (OS Build 10240.17113)

September 13, 2016 — KB3185611 OS Build 10240.17113 Applies To Windows 10 This update includes quality improvements and security fixes. No new operating system features are being introduced in this update. Key changes include: Improved reliability of Internet Explorer 11, .NET Framework, and...

August 9, 2016 — KB3176492 (OS Build 10240.17071)

August 9, 2016 — KB3176492 OS Build 10240.17071 Applies To Windows 10 This update includes quality improvements and security fixes. No new operating system features are being introduced in this update. Key changes include: Improved reliability for Internet Explorer 11 and WebDAV shares. Addressed...

November 14, 2016 — KB3198586 (OS Build 10586.682)

November 14, 2016 — KB3198586 OS Build 10586.682 Applies To Windows 10, version 1511, all editions Windows 10 Mobile This update is published for Windows 10 Mobile. It includes the same improvements and fixes from the update listed as November 8, 2016 — KB3198586 OS Build 10586.679 that was...

November 9, 2016 — KB3200970 (OS Build 14393.448)

November 9, 2016 — KB3200970 OS Build 14393.448 Applies To Windows 10, version 1607, all editions Windows 10 Mobile This update is published for Windows 10 Mobile. It includes the same improvements and fixes from the update listed as November 8, 2016 — KB3200970 OS Build 14393.447 that was...

January 10, 2017—KB3213986 (OS Build 14393.693)

January 10, 2017—KB3213986 OS Build 14393.693 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Improved t...

OPENSUSE-SU-2024:14234-1 klp-build-0~20240731.edfe0bf-1.1 on GA media

These are all security issues fixed in the klp-build-020240731.edfe0bf-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-6569

Name of the Vulnerable Software and Affected Versions: openshift/builder affected versions not specified Description: A flaw was found in openshift/builder, allowing command injection via path traversal. This enables a malicious user to execute arbitrary commands on the OpenShift node running the...

CVE-2024-42160 f2fs: check validation of fault attrs in f2fs_build_fault_attr()

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in f2fsbuildfaultattr. - Use f2fsbuildfaultattr in sbistore to clean up...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the f2fs module in f2fsbuildfaultattr, which does not check the validity of the fault attrs...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

AZL-47122 CVE-2024-40897 affecting package orc for versions less than 0.4.39-2

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

A stack-based buffer overflow vulnerability exists in orcparse.c of the ORC compiler in versions prior to 0.4.39 . An attacker could trick a developer into processing a specially crafted file, potentially leading to arbitrary code execution on the developer's machine or within a CI build environm...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

ORC vulnerable to stack-based buffer overflow

Overview ORC provided by GStreamer is typically used when developing GStreamer plugins. Stack-based buffer overflow vulnerability CWE-121 exists in orcparse.c of ORC. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

quarkus-core: Leak of local configuration properties into Quarkus applications

A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namespace during the application's build, therefore, running the resulting application inherits the values captured at build time. Some local environment variables may have been...