libspectre:spectre_read_fuzzer: Heap-buffer-overflow in gc_mark_string

Project: https://gitlab.freedesktop.org/libspectre/libspectre.git Detailed Report: https://oss-fuzz.com/testcase?key=5703675452588032 Project: libspectre Fuzzing Engine: libFuzzer Fuzz Target: spectrereadfuzzer Job Type: libfuzzerasanlibspectre Platform Id: linux Crash Type: Heap-buffer-overflow...

Updated kernel packages fix security vulnerabilities

This update is based on upstream 5.4.6 and fixes various potential security issues related to buffer overflows, double frees, NUll pointer dereferences, improper / missing input validations and so on. It also adds other bugfixes all over the kernel. Other fixes added in this update: - x86/MCE/AMD...

CVE-2019-19956

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-oldNs...

openslp security update

CentOS Errata and Security Advisory CESA-2019:4240 An update for openslp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

EulerOS 2.0 SP5 : NetworkManager (EulerOS-SA-2019-2698)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in pgp_parse_algo_attr_blob

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6329203163398144 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...

Fedora 30 : nss (2019-8fbc65ef9e)

Fix intermittent SECERRORUNKNOWNISSUER 1752303, 1648617 ---- Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes -...

Virtuozzo Linux Errata and Enhancement Advisory 2019:4155

Upstream security update. Follow RHEA-2019:4155 for details...

Virtuozzo Linux Errata and Security Advisory 2019:4024 Important

Upstream security update. Follow RHSA-2019:4024 for details...

openSUSE Security Update : calamares (openSUSE-2019-2628)

This update for calamares fixes the following issues : - Launch with 'pkexec calamares' in openSUSE Tumbleweed, but launch with 'xdg-su -c calamares' in openSUSE Leap 15. Update to Calamares 3.2.15 : - 'displaymanager' module now treats 'sysconfig' as a regular entry in the 'displaymanagers' list...

Fedora 31 : nss (2019-3f6ab3b846)

Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.47.1releasenotes Note that Tenable Network Security has extracted...

Virtuozzo Linux Errata and Security Advisory 2019:3888 Important

Upstream security update. Follow RHSA-2019:3888 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3982

Upstream security update. Follow RHBA-2019:3982 for details...

Virtuozzo Linux Errata and Security Advisory 2019:3976 Low

Upstream security update. Follow RHSA-2019:3976 for details...

Virtuozzo Linux Errata and Security Advisory 2019:3981 Important

Upstream security update. Follow RHSA-2019:3981 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3971

Upstream security update. Follow RHBA-2019:3971 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3972

Upstream security update. Follow RHBA-2019:3972 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3977

Upstream security update. Follow RHBA-2019:3977 for details...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...