12 matches found
USN-5426-1 needrestart vulnerability
Jakub Wilk discovered that needrestart incorrectly used some regular expressions. A local attacker could possibly use this issue to execute arbitrary code...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Tex Live vulnerabilities (USN-3788-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3788-1 advisory. Jakub Wilk discovered that Tex Live incorrectly handled certain files. An attacker could possibly use this issue to execute...
Ubuntu 14.04 LTS / 16.04 LTS : procmail vulnerability (USN-3483-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3483-1 advisory. Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to...
Debian DSA-3555-1 : imlib2 - security update
Several vulnerabilities were discovered in imlib2, an image manipulation library. - CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads a...
USN-2627-1 t1utils vulnerability
Jakub Wilk discovered that t1utils incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially crafted font, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...
Fedora 22 : t1utils-1.39-1.fc22 (2015-7616)
t1utils Version 1.39 2015-02-26 ================================= - t1disasm: Security fixes for buffer overrun reported by Jakub Wilk and Niels Thykier. t1utils Version 1.38 2013-09-29 ================================= - t1disasm: Fix an infinite loop on some fonts reported by Niels Thykier. Not...
DLA-164-1 unace - security update
Bulletin has no description...
DLA-160-1 sudo - security update
Bulletin has no description...
Ubuntu 14.04 LTS : Mutt vulnerability (USN-2440-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2440-1 advisory. Jakub Wilk discovered that the writeoneheader function in mutt did not properly handle newline characters at the beginning of a header. An attacker could speciall...
DSA-2997-1 reportbug - security update
Bulletin has no description...
USN-2183-2: dpkg vulnerability
USN-2183-1 fixed a vulnerability in dpkg. Javier Serrano Polo discovered that the fix introduced a vulnerability in releases with an older version of the patch utility. This update fixes the problem. Original advisory details: Jakub Wilk discovered that dpkg incorrectly certain paths and symlinks...
CVE-2001-1593
Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spyuser. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps...