Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0825-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...

`aes-ctr` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: The aes crate now has an optional ctr feature which autodetects SIMD features on i686/x86-64 targets and uses them if available, or otherwise falls back to the implementation in the ctr crate. If you would prefer not to ha...

UBUNTU-CVE-2021-3481

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelperp.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics SVG file this flaw may lead to an unauthorized memory access. The highest threat...

CVE-2019-15550

An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary...

Design/Logic Flaw

An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary...

CVE-2019-15550

An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary...

CVE-2019-15550

The CVE-2019-15550 issue affects the simd-json crate for Rust (before 0.1.15). The root cause is an out-of-bounds read caused by memory access that can cross a page boundary during string parsing, risking segmentation faults and service crashes. Several sources (OSV, GHSA/GitHub advisories, Red H...

CVE-2018-12362

An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 SSSE3 scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...

SUSE-SU-2018:2426-1 Security update for kernel-livepatch-tools

This update for kernel-livepatch-tools fixes the following issues: Add script for disabling SMT to help with the mitigation of the 'L1 Terminal Fault' issue CVE-2018-3646 bsc1099306 The script is called 'klp-kvm-l1tf-ctrl-smt' and is used for enabling or disabling SMT to mitigate the issue when...

Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018

Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018 Summary Microsoft is aware of a new publicly disclosed class of vulnerabilities referred to as "speculative execution side-channel attacks" that affect many modern...

Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018

Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018 Summary An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout...

QuarkslaB Dynamic binary Instrumentation: QBDI

QuarkslaB Dynamic binary Instrumentation QBDI is a modular, cross-platform and cross-architecture DBI framework. It aims to support Linux, macOS, Android, iOS and Windows operating systems running on x86, x86-64, ARM and AArch64 architectures. Information about what is a DBI framework and how QBD...

libjpeg-turbo null pointer dereference vulnerability

libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON, AltiVec to accelerate baseline JPEG compression and decompression on x86, x86-64, ARM and PowerPC systems. A null pointer dereference vulnerability exists in libjpeg-turbo, which can be exploited to cause a nul...

libjpeg-turbo 1.5.1 - Denial of Service

libjpeg-turbo 1.5.1 - Denial of Service libjpeg-turbo denial of service vulnerability ====================== Author : qflb.wu CVE : CVE-2017-9614 ====================== Introduction: ============= libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON, AltiVec to...

libjpeg-turbo 1.5.1 - Denial of Service

libjpeg-turbo denial of service vulnerability ====================== Author : qflb.wu CVE : CVE-2017-9614 ====================== Introduction: ============= libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON, AltiVec to accelerate baseline JPEG compression and...

libjpeg-turbo 1.5.1 - Denial of Service Vulnerability

Exploit for linux platform in category dos / poc libjpeg-turbo denial of service vulnerability ====================== Author : qflb.wu CVE : CVE-2017-9614 ====================== Introduction: ============= libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON,...

Microsoft Edge - SIMD.toLocaleString Uninitialized Memory (MS16-145)

Microsoft Edge - SIMD.toLocaleString Uninitialized Memory MS16-145 try var v = SIMD.Int32x41, 2, 3, 4; alertv.toLocaleString1, 2, 3, 4, 5, 6, 7; catche alerte.message;...

Microsoft Edge - SIMD.toLocaleString Uninitialized Memory (MS16-145) Exploit

Exploit for windows platform in category dos / poc try var v = SIMD.Int32x41, 2, 3, 4; alertv.toLocaleString1, 2, 3, 4, 5, 6, 7; catche alerte.message; 0day.today 2018-04-01...

Microsoft Edge - SIMD.toLocaleString Uninitialized Memory (MS16-145)

try var v = SIMD.Int32x41, 2, 3, 4; alertv.toLocaleString1, 2, 3, 4, 5, 6, 7; catche alerte.message;...

RHEL 7 : binutils (RHSA-2015:2079)

Updated binutils packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...