SUSE-SU-2023:4451-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-31122: Fixed an out of bounds read in modmacro bsc1216424. Non-security fixes: - Fixed the content type handling in modproxyhttp2 bsc1214357. - Fixed a floating point exception crash bsc1207399...

SUSE-SU-2023:4431-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-31122: Fixed an out of bounds read in modmacro bsc1216424. Non-security fixes: - Fixed the content type handling in modproxyhttp2 bsc1214357. - Fixed a floating point exception crash bsc1207399...

SUSE-SU-2023:4430-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2023-31122: Fixed an out of bounds read in modmacro bsc1216424. Non-security fixes: - Fixed the content type handling in modproxyhttp2 bsc1214357. - Fixed a floating point exception crash bsc1207399...

Low: Red Hat Security Advisory: gmp security and enhancement update

An update for gmp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

Low: gmp security and enhancement update

The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers. Security Fixes: gmp: Integer overflow and resultant buffer overflow via crafted input CVE-2021-43618 For more details about the security issues...

[SECURITY] Fedora 39 Update: libclc-17.0.2-1.fc39

libclc is an open source, BSD licensed implementation of the library requirements of the OpenCL C programming language, as specified by the OpenCL 1.1 Specification. The following sections of the specification impose library requirements: 6.1: Supported Data Types 6.2.3: Explicit Conversions...

openSUSE 15 Security Update : sox (openSUSE-SU-2023:0329-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0329-1 advisory. - An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer...

OPENSUSE-SU-2023:0329-1 Security update for sox

This update for sox fixes the following issues: - Apply various fix patches taken from Debian package; it fixes also other entries CVE-2022-31650 boo1212060 CVE-2023-34318 boo1212062 CVE-2023-34432 boo1212063 - Fix floating point exception in src/voc.c CVE-2023-32627 boo1212061...

OPENSUSE-SU-2023:0328-1 Security update for sox

This update for sox fixes the following issues: - Apply various fix patches taken from Debian package; it fixes also other entries CVE-2022-31650 boo1212060 CVE-2023-34318 boo1212062 CVE-2023-34432 boo1212063 - Fix floating point exception in src/voc.c CVE-2023-32627 boo1212061...

SUSE CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

DEBIAN-CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

Code injection

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

UBUNTU-CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

gifsicle Security Breach

gifsicle is Gifsicle's handling of GIF image files. A security vulnerability exists in gifsicle version 1.94, which stems from a Floating Point Exception FPE in resizestream in src/xform.c. The vulnerability is caused by the presence of a floating point exception FPE in resizestream...

CVE-2023-46009

gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c...

Amazon Linux 2 : sox, --advisory ALAS2-2023-2231 (ALAS-2023-2231)

The version of sox installed on the remote host is prior to 14.4.1-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2231 advisory. A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsxreadwbuf in formatsi.c file. The...

Oracle Linux 7 : GStreamer (ELSA-2017-2060)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2060 advisory. clutter-gst2 2.0.18-1 - Update to 2.0.18 - Remove obsolete patches - Use license macro for COPYING - Resolves: 1386833 gnome-video-effects 0.4.3-1 -...

Floating Point Comparison With Incorrect Operator

gpac is vulnerable to Floating Point Comparison with Incorrect Operator. The vulnerability occurs due to manipulating an input which leads to denial of service issue...

Multiple soundness issues in lexical

lexical contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls MaybeUninit::assumeinit ...

Denial Of Service (DoS)

nasm is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the ieeesegment function in the outieee.c file. The function is responsible for writing floating-point numbers to an output file. The vulnerability occurs when the function fails to properly check the size of the...