[ASA-202107-19] ruby-addressable: denial of service

Arch Linux Security Advisory ASA-202107-19 ========================================== Severity: Medium Date : 2021-07-06 CVE-ID : CVE-2021-32740 Package : ruby-addressable Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2136 Summary ======= The package...

CVE-2021-31684 vulnerabilities

Vulnerabilities for packages: thingsboard, celeborn, druid...

Security fix for the ALT Linux 9 package postgresql11 version 11.12-alt0.M90P.1

11.12-alt0.M90P.1 built May 24, 2021 Alexei Takaseev in task 272061 --- May 18, 2021 Alexei Takaseev - 11.12 Fixes CVE-2021-32027, CVE-2021-32028, CVE-2021-32029...

CVE-2019-20633 vulnerabilities

Vulnerabilities for packages: patch...

Important Photon OS Security Update - PHSA-2020-0203

Updates of 'openssl', 'libxml2' packages of Photon OS have been released...

CVE-2018-17847 vulnerabilities

Vulnerabilities for packages: hey...

Updated shadow-utils packages fix security vulnerability

It was found that shadow-utils had a buffer overflow where if a buffer was left NULL for a cycle the next cycle would happily write past the entries buffer CVE-2017-12424...

[SECURITY] Fedora 25 Update: kernel-4.9.7-201.fc25

The kernel meta package...

Updated libebml packages fix security vulnerability

In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...

Updated libidn packages fix CVE-2015-2059

Updated libidn packages fix security vulnerability: In libidn before 1.31, stringpreputf8toucs4 did not validate that the input UTF-8 string was actually valid UTF-8, which could lead to out-of-bounds reads CVE-2015-2059...

Updated quassel packages fix CVE-2015-3427

Updated quassel packages fix security vulnerability: Quassel is vulnerable to SQL injection through its use of Qt's postgres driver. If the PostgreSQL server is restarted or the connection is lost at any point, other IRC users may be able to trick the Quassel core into executing SQL queries upon...

tiff security update

Package : tiff Version : 3.9.4-5+squeeze11 CVE ID : CVE-2013-4243 Debian Bug : 742917 Murray McAllister discovered a heap-based buffer overflow in the gif2tiff command line tool. Executing gif2tiff on a malicious tiff image could result in arbitrary code execution...

udisks security update

1.0.1-7.el65 - Make sure doc subpackage is noarch 1.0.1-6.el65 - Put devel-docs in a separate package related: rhbz1070145 . 1.0.1-5.el65 - Related: rhbz1070145...