CLSA-2021-1632262236 Fix of CVE: CVE-2021-22924

fix connection reuse checks for issuer cert and case sensitivity CVE-2021-22924...

CLSA-2021-1632261872 Fix of CVE: CVE-2021-22898

check sscanf for correct number of matches CVE-2021-22898...

CLSA-2021-1624372464 Fix of CVE: CVE-2021-3504

Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950500...

CLSA-2021-1614885634 Fix of CVE:CVE-2021-23841

Fix Null pointer deref in X509issuerandserialhash CVE-2021-23841...

SUSE-SU-2019:2521-1 Security update for SUSE Manager Server 3.2

This update fixes the following issues: cobbler: - Jinja2 template library fix bsc1141661 pgjdbc-ng: - Allow dots in database name bsc1146416 py26-compat-salt: - Get tornado dependency from the system on SLE12 bsc1149409 - Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 bsc1147126...

CVE-2018-4424

A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1...

CVE-2018-4255

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation...

ALPINE-CVE-2018-0734

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a Affected 1.1.1. Fixed in OpenSSL 1.1.0j Affected 1.1.0-1.1.0i. Fixed in OpenSSL 1.0.2q...

WebRTC - H264 NAL Packet Processing Type Confusion Exploit

Exploit for multiple platform in category dos / poc Type confusion can occur when processing a H264 packet. In the method PacketBuffer::FindFrames in modules/videocoding/packetbuffer.cc there is a loop on line 296 that goes through the databuffer vector backwards. The flag ish264 is set before th...

SUSE-SU-2015:1680-1 Security update for MozillaFirefox, mozilla-nspr

Mozilla Firefox was updated to version 38.3.0 ESR bsc947003, fixing bugs and security issues. MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous memory safety hazards rv:41.0 / rv:38.3 MFSA 2015-101/CVE-2015-4506 Buffer overflow in libvpx while parsing vp9 format video MFSA...

Important: Red Hat Security Advisory: : Updated bind packages fix buffer overflow in resolver library

Various versions of the ISC BIND resolver libraries are vulnerable to a buffer overflow attack. Updated BIND packages are now available to fix this issue. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which...