5656 matches found
Mandriva Linux Security Advisory : readline (MDVSA-2015:132)
Updated readline packages fix security vulnerability : Steve Kemp discovered the rltropen function in readline insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks CVE-2014-2524. Also, upstream patches have been added to fix an infinite loop in v...
CVE-2013-7437
Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service crash via large dimensions in a BMP image, which triggers a buffer overflow...
Debian DLA-126-1 : ettercap security update
Patches a bunch of security vulnerabilities : - CVE-2014-9380 Buffer over-read - CVE-2014-9381 Signedness error See: https://www.obrela.com/home/security-labs/advisories/osi -advisory-osi-1402/ Patches taken from upstream - 6b196e011fa456499ed4650a360961a2f1323818 pull/608 -...
Debian DLA-40-1 : cacti security update
Multiple security issues cross-site scripting, missing input sanitizing and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. Furthermore, the fix for CVE-2014-4002 in the previous security update has been brought in-line with the upstream fix as it...
Debian DLA-111-1 : cpio security update
Multiple issues have been identified in cpio, including a buffer overflow and multiple NULL pointer dereference, resulting at least in a denial of service and possibly also in an unwanted code execution. This has been fixed in Debian 6 Squeeze with version 2.11-4+deb6u1 by applying the upstream...
Debian DLA-179-1 : tzdata new upstream version
Upstream published version 2015b. Changes since 2014h-0squeeze1 currently in squeeze-lts are the following : - New leap second 2015-06-30 23:59:60 UTC. - New DST for Mongolia. - New DST for Palestine. - New DST for Cancun Mexico. - New DST for Chile. - New DST for Fiji. - Time zone change for Tur...
Debian DLA-74-1 : ppp security update
This updates fixes a potential integer overflow in option parsing. A user in the group 'dip' could provide a specially crafted configuration file of more than 2G and generate an integer overflow. This may enable an attacker to overwrite the heap and thereby corrupt security-relevant variables. Se...
Debian DLA-137-1 : libevent security update
The libevent library was vulnerable to a potential heap overflow in the buffer/bufferevent APIs. This update was prepared by Nguyen Cong who used the upstream-provided patch. Thanks to them! NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA securit...
Debian DLA-133-1 : unrtf security update
CVE-2014-9274 : check that accesses to color table stay within bounds Patches taken from upstream commits : - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a CVE-2014-9275 : various crashes . - CVE-2014-9275: 1df886f2e65f7c512a6217588ae8d94d4bcbc63d 3c7ff3f888de0f0d957fe67b6bd4bec9c0d475f...
Debian DLA-118-1 : linux-2.6 security update
Non-maintainer upload by the Squeeze LTS and Kernel Teams. New upstream stable release 2.6.32.65, see http://lkml.org/lkml/2014/12/13/81 for more information. The stable release 2.6.32.65 includes the following new commits compared to the previous 2.6.32-48squeeze9 package : - USB: whiteheat: Add...
Fedora 22 : gnupg-1.4.19-1.fc22 (2015-2872)
New upstream v1.4.19 - Use ciphertext blinding for Elgamal decryption CVE-2014-3591 - Fixed data-dependent timing variations in modular exponentiation related to CVE-2015-0837 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
Oracle Linux 7 : GNOME / Shell (ELSA-2015-0535)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0535 advisory. clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-1...
openSUSE Security Update : putty (openSUSE-2015-218)
The SSH Terminal emulator putty was updated to the new upstream release 0.64, fixing security issues and bugs : Security fix: PuTTY no longer retains the private half of users' keys in memory by mistake after authenticating with them. bsc920167 CVE-2015-2157 New feature: Support for SSH connectio...
libreoffice security, bug fix, and enhancement update
libabw 0.0.2-1 - new upstream release 0.0.2 - generate man pages for the tools 0.0.1-1 - new upstream release libcmis 0.4.1-5 - Related: rhbz1132065 coverity: fix mismatching exceptions 0.4.1-4 - a few use-after-free fixes for the C wrapper 0.4.1-3 - Resolves: rhbz1132065 rebase to 0.4.1 libetony...
GNOME Shell security, bug fix, and enhancement update
clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-10 - Add patch for quadbuffer stereo suppport Resolves: rhbz1108891 cogl 1.14.1-6 - Add patches for quadbuffer stereo suppport Resolves:...
Moderate: Red Hat Security Advisory: hivex security, bug fix, and enhancement update
Updated hivex packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Updated kernel-rt packages fix security vulnerabilities
This kernel-rt update provides as upgrade to upstream 3.14 longterm branch, currently based on 3.14.32 and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types,...
Updated kernel-vserver packages fix security vulnerabilities
This kernel-vserver update is based on upstream -longterm 3.14.32 and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a...
Updated php packages fix security vulnerabilities
Updated php and libgd packages fix security vulnerabilities: Double free vulnerability in the zendtshashgracefuldestroy function in zendtshash.c in the Zend Engine in PHP before 5.5.21 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vecto...