254 matches found
CVE-2007-2768 affecting package openssh 8.9p1-3
CVE-2007-2768 affecting package openssh 8.9p1-3. A patched version of the package is available...
[ASA-202107-19] ruby-addressable: denial of service
Arch Linux Security Advisory ASA-202107-19 ========================================== Severity: Medium Date : 2021-07-06 CVE-ID : CVE-2021-32740 Package : ruby-addressable Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2136 Summary ======= The package...
CVE-2021-31684 vulnerabilities
Vulnerabilities for packages: druid, thingsboard, celeborn...
Security fix for the ALT Linux 9 package postgresql11 version 11.12-alt0.M90P.1
11.12-alt0.M90P.1 built May 24, 2021 Alexei Takaseev in task 272061 --- May 18, 2021 Alexei Takaseev - 11.12 Fixes CVE-2021-32027, CVE-2021-32028, CVE-2021-32029...
CVE-2019-20633 vulnerabilities
Vulnerabilities for packages: patch...
Important Photon OS Security Update - PHSA-2020-0203
Updates of 'openssl', 'libxml2' packages of Photon OS have been released...
CVE-2018-17847 vulnerabilities
Vulnerabilities for packages: hey...
Updated shadow-utils packages fix security vulnerability
It was found that shadow-utils had a buffer overflow where if a buffer was left NULL for a cycle the next cycle would happily write past the entries buffer CVE-2017-12424...
[SECURITY] Fedora 25 Update: kernel-4.9.7-201.fc25
The kernel meta package...
Updated libebml packages fix security vulnerability
In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...
Updated libidn packages fix CVE-2015-2059
Updated libidn packages fix security vulnerability: In libidn before 1.31, stringpreputf8toucs4 did not validate that the input UTF-8 string was actually valid UTF-8, which could lead to out-of-bounds reads CVE-2015-2059...
Updated quassel packages fix CVE-2015-3427
Updated quassel packages fix security vulnerability: Quassel is vulnerable to SQL injection through its use of Qt's postgres driver. If the PostgreSQL server is restarted or the connection is lost at any point, other IRC users may be able to trick the Quassel core into executing SQL queries upon...
tiff security update
Package : tiff Version : 3.9.4-5+squeeze11 CVE ID : CVE-2013-4243 Debian Bug : 742917 Murray McAllister discovered a heap-based buffer overflow in the gif2tiff command line tool. Executing gif2tiff on a malicious tiff image could result in arbitrary code execution...
