[SECURITY] [DLA 2422-1] qtsvg-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2422-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

DLA-2422-1 qtsvg-opensource-src - security update

Bulletin has no description...

PT-2023-29792

Name of the Vulnerable Software and Affected Versions gifsicle version 1.94 Description A floating point exception FPE issue was discovered in gifsicle through the resize stream function at src/xform.c. This issue can cause problems when processing certain inputs. Recommendations For gifsicle...

PT-2023-25475 · Gifsicle +2 · Gifsicle +2

Name of the Vulnerable Software and Affected Versions: Gifsicle version 1.9.3 Description: A heap buffer overflow issue was discovered in Gifsicle via the ambiguity error component at /src/clp.c. Recommendations: For Gifsicle version 1.9.3, at the moment, there is no information about a newer...

WS-2020-0383

Fluent Bit before v1.6.4 is vulnerable to heap-buffer-overflow in flbutilstimetoseconds, related to src/flbutils.c...

PT-2020-16756

Name of the Vulnerable Software and Affected Versions Strapi versions prior to 3.2.5 Description The issue concerns unwanted /proxy?url= functionality in the admin/src/containers/InputModalStepperProvider/index.js file. This functionality can be exploited, but details about real-world incidents o...

WS-2020-0349

mruby in versions 1.1.0 to 3.0.0-preview is vulnerable to UNKNOWN READ in presymsym2name, related to src/symbol.c...

WS-2020-0389

Fluent-bit in versions v0.12.0 to v1.6.3 is vulnerable to Heap-buffer-overflow in flbparsertypecast, related to src/flbparser.c...

WS-2020-0386

fluent-bit in versions 1.5.3-win32 to 1.6.3 is vulnerable to Heap-buffer-overflow in flbstrptime, related to src/flbparser.c...

WS-2020-0314

Fluent Bit in versions v1.3.0 to v1.6.6 is vulnerable to stack buffer overflow in flbsdscat on src/flbpackgelf.c...

Fedora 32 : 1:libuv (2020-77b758d6dc)

2020.09.26, Version 1.40.0 Stable Changes since version 1.39.0 : - udp: add UVUDPMMSGFREE recvcb flag Ryan Liptak - include: re-map UVEPROTO from 4046 to -4046 YuMeiJie - doc: correct UVUDPMMSGFREE version added cjihrig - doc: add uvmetricsidletime version metadata Ryan Liptak - win,tty: pass...

Debian: Security Advisory (DLA-2376-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WS-2020-0390

OpenSC in versions 0.16.0 to 0.20.0 is vulnerable to Heap-buffer-overflow in scoberthurparsepublicinfo, related to src/libopensc/pkcs15-oberthur.c...

WS-2020-0397

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable to Heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0363

libavif in versions 0.3.9 to 0.8.1 is vulnerable to Heap-buffer-overflow in avifROStreamRead , related to src/stream.c...

WS-2020-0380

OpenSC before 0.21.0-rc1 is vulnerable to heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

DLA-2376-1 qtbase-opensource-src - security update

Bulletin has no description...

WS-2020-0360

fluent-bit in versions 1.3.0 to 1.5.6 is vulnerable to Heap-buffer-overflow in flbmsgpacktogelf, related to src/flbpackgelf.c...

CVE-2020-24889: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

CVE-2020-24925

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure...