openSUSE 15 Security Update : yaml-cpp (openSUSE-SU-2022:1073-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1073-1 advisory. - The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack...

SUSE: Security Advisory (SUSE-SU-2022:1073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for yaml-cpp (openSUSE-SU-2022:1073-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2022:1073-1 Security update for yaml-cpp

This update for yaml-cpp fixes the following issues: - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue bsc1121227. - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap bsc1121230. - CVE-2019-6285: Fix...

SUSE-SU-2022:1072-1 Security update for yaml-cpp

This update for yaml-cpp fixes the following issues: - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue bsc1121227. - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap bsc1121230. - CVE-2019-6285: Fix...

The vulnerability of the printIFDStructure function in the image.cpp component of the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the printIFDStructure function in the image.cpp component of the Exiv2 media metadata management library is related to the recursive call to a function. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created file...

Security update for yaml-cpp (moderate)

openSUSE Security Update: Security update for yaml-cpp Announcement ID: openSUSE-SU-2022:1073-1 Rating: moderate References: 1121227 1121230 1122004 1122021 Cross-References: CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 CVSS scores: CVE-2018-20573 NVD : 6.5...

GitHub Security Lab: CPP: Add query for CWE-266 Incorrect Privilege Assignment

This bug was reported directly to GitHub Security Lab...

openSUSE: Security Advisory for zxing-cpp (openSUSE-SU-2022:0157-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2018-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : zxing-cpp (SUSE-SU-2022:0163-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0163-1 advisory. - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafte...

SUSE SLED15 / SLES15 Security Update : zxing-cpp (SUSE-SU-2022:0157-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0157-1 advisory. - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafte...

SUSE: Security Advisory (SUSE-SU-2022:0157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:0163-1 Security update for zxing-cpp

This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafted JPEG file. bsc1191743. - CVE-2021-42715: Fixed buffer overflow in stbimage PNM loader bsc1191942. - CVE-2021-42716: Fixed denial of...

OPENSUSE-SU-2022:0157-1 Security update for zxing-cpp

This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafted JPEG file. bsc1191743. - CVE-2021-42715: Fixed buffer overflow in stbimage PNM loader bsc1191942. - CVE-2021-42716: Fixed denial of...

SUSE-SU-2022:0157-1 Security update for zxing-cpp

This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafted JPEG file. bsc1191743. - CVE-2021-42715: Fixed buffer overflow in stbimage PNM loader bsc1191942. - CVE-2021-42716: Fixed denial of...

Security update for zxing-cpp (important)

openSUSE Security Update: Security update for zxing-cpp Announcement ID: openSUSE-SU-2022:0157-1 Rating: important References: 1191743 1191942 1191944 Cross-References: CVE-2021-28021 CVE-2021-42715 CVE-2021-42716 CVSS scores: CVE-2021-28021 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...

GitHub Security Lab: ihsinme: CPP Add a query to find incorrectly used exceptions.

This bug was reported directly to GitHub Security Lab...

The vulnerability of the url.cpp component in the Libproxy configuration management library, due to a lack of mechanism for checking the size of copied data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the url.cpp component in the Libproxy configuration management library is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its...

SUSE-FU-2022:0039-1 Feature update for zxing-cpp libreoffice

This feature update for zxing-cpp and libreoffice fixes the following issues: Update LibreOffice from version 7.1.3.2 to 7.2.3.2 jscSLE-18213: - Fix external URL connections issues when WebDav is built using libserf. bsc1187173, bsc1186871 - Fix an issue with PPTX where one column becomes two...