CVE-2017-18266: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The openenvvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment...

[SECURITY] Fedora 26 Update: perl-5.24.4-397.fc26

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Medium: stunnel, amazon-efs-utils

Issue Overview: This update adds the checkHost option to stunnel, which verifies the host of the peer certificate subject. Certificates are accepted if no checkHost option was specified, or the host name of the peer certificate matches any of the hosts specified with checkHost. This update adds t...

zsh utils.c:checkmailpath function stack buffer overflow vulnerability

Z Shell Zsh is a Unix shell that can be used as an interactive login shell and a shell script command interpreter. A stack buffer overflow vulnerability exists in the utils.c:checkmailpath function in zsh. A local attacker can exploit this vulnerability to execute arbitrary code in the context of...

SUSE-RU-2018:0821-1 Recommended update for drbd, drbd-utils

This update for drbd and drbd-utils provides the following fixes: Changes in drbd-utils: - Make sure the full bitmap gets properly propagated in drbdmeta. Also make sure the ID is kept when downgrading from v9 to v8. bsc1037109 - Support passing '--force' to drbdadm dump-md. bsc1077176 - Fix a...

SUSE-RU-2018:0779-1 Recommended update for drbd and drbd-utils

This update for drbd and drbd-utils provides the following fixes: Changes in drbd: - Fix a possible kernel trace while starting the initial syncing of a stacked drbd. bsc1058770 - Fix auto promotion after split-brain. bsc1074228 - Support passing '--force' to drbdadm dump-md. bsc1077176 - Many...

Debian DSA-4146-1 : plexus-utils - security update

Charles Duffy discovered that the Commandline class in the utilities for the Plexus framework performs insufficient quoting of double-encoded strings, which could result in the execution of arbitrary shell commands. C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 4146-1] plexus-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4146-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] Fedora 26 Update: net-snmp-5.7.3-27.fc26

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

DSA-4146-1 plexus-utils - security update

Bulletin has no description...

MGASA-2018-0177 Updated shadow-utils packages fix security vulnerability

Privilege escalation in newgidmap, which allowed an unprivileged user to be placed in a user namespace where setgroups2 is allowed CVE-2018-7169...

Updated shadow-utils packages fix security vulnerability

Privilege escalation in newgidmap, which allowed an unprivileged user to be placed in a user namespace where setgroups2 is allowed CVE-2018-7169...

Debian: Security Advisory (DSA-4146-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

zsh buffer overflow vulnerability (CNVD-2018-06434)

zsh is an interactive command interpreter and command programming language used on Linux systems. A buffer overflow vulnerability exists in the utils.c file in versions of zsh prior to 5.0.6. An attacker could exploit this vulnerability to execute code or cause a denial of service...

Ubuntu 14.04 LTS / 16.04 LTS : sensible-utils vulnerability (USN-3584-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3584-1 advisory. Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker...

Ubuntu: Security Advisory (USN-3584-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2017-18206

In utils.c in zsh before 5.4, symlink expansion had a buffer overflow...

USN-3584-1 sensible-utils vulnerability

Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker could possibly use this issue with a specially crafted URL to conduct an argument injection attack and execute arbitrary code...

USN-3584-1: sensible-utils vulnerability

Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker could possibly use this issue with a specially crafted URL to conduct an argument injection attack and execute arbitrary code...

openSUSE Security Update : libdb-4_8 (openSUSE-2018-199)

This update for libdb-48 fixes the following issues : - A DBCONFIG file in the current working directory allowed local users to obtain sensitive information via a symlink attack involving a setgid or setuid application using libdb-48. bsc1043886 This update was imported from the SUSE:SLE-12:Updat...