cpp, gcc, libasan, libatomic, libgcc, libgfortran, libgnat, libgo, libgomp, libitm, libmudflap, libobjc, libquadmath, libstdc++, libtsan security update

CentOS Errata and Security Advisory CESA-2018:0849 An update for gcc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

@architect/data (1.0.0), @architect/workflows (>=1.0.11, <=2.8.2) +23 more potentially affected by CVE-2018-1000096 via tiny-json-http (>=1.0.3, <=6.2.0)

tiny-json-http NPM version =1.0.3, =1.0.11, =3.0.0, =0.0.1, =1.1.5, =0.0.1, =3.0.0-beta.1, =0.17.717, =0.4.1-alpha.1, =0.4.1, =1.0.0-alpha.2 and more Source cves: CVE-2018-1000096 Source advisory: OSV:GHSA-7H42-5VJ2-CQ39...

alchemy-embed-medias (>=0.4.0, <=0.5.0), globe-iframe-resizer (>=0.0.0, <=0.0.2) +4 more potentially affected by CVE-2018-1000086 via pym.js (0.4.5)

pym.js NPM version 0.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pym.js and may be impacted: - alchemy-embed-medias =0.4.0, =0.0.0, =0.2.1, =0.1.0, =0.3.0, =1.0.0, =4.0.0 Source cves: CVE-2018-1000086 Source advisory: OSV:GHSA-82GW-PQF7-Q3J2...

@genny-project/keycloak-react (>=1.0.3, <=1.0.8), angular-spa (>=0.3.3, <=1.0.0) +3 more potentially affected by CVE-2017-7474 via keycloak-js (2.5.5)

keycloak-js NPM version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on keycloak-js and may be impacted: - @genny-project/keycloak-react =1.0.3, =0.3.3, =0.0.1, =0.0.3, =0.0.11, =0.0.12 Source cves: CVE-2017-7474 Source advisory:...

poppler security update

CentOS Errata and Security Advisory CESA-2017:2551 An update for poppler is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Fedora 26 : 2:freerdp / remmina (2017-4bc09c2364)

Update to latest snapshot that contains fixes for the latest Talos discovered CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

Critical: java-1.8.0-openjdk

Issue Overview: No CVE associated with this advisory Affected Packages: java-1.8.0-openjdk Issue Correction: Run yum update java-1.8.0-openjdk or yum update --advisory ALAS-2017-860 to update your system. New Packages: i686: java-1.8.0-openjdk-debuginfo-1.8.0.141-1.b16.32.amzn1.i686 ...

firefox security update

CentOS Errata and Security Advisory CESA-2017:1106 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

b2b (0.1.0), crust (>=0.0.7, <=0.0.65) +16 more potentially affected by CVE-2017-1000168 via sodiumoxide (>=0.0.4, <=0.0.13)

sodiumoxide CARGO version =0.0.4, =0.0.7, =0.5.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.4, =0.5.1, =0.0.1, =0.1.0 and more Source cves: CVE-2017-1000168 Source advisory: OSV:RUSTSEC-2017-0001...

Ubuntu 12.04 LTS : linux vulnerability (USN-3144-1)

Marco Grassi discovered that the driver for Areca RAID Controllers in the Linux kernel did not properly validate control messages. A local attacker could use this to cause a denial of service system crash or possibly gain privileges. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2016:2397-1 Security update for flex, at, bogofilter, cyrus-imapd, kdelibs4, libQtWebKit4, libbonobo, mdbtools, netpbm, openslp, sgmltool, virtuoso, libqt5-qtwebkit

Various packages included vulnerable parsers generated by 'flex'. This update provides a fixed 'flex' package and also rebuilds of packages that might have security issues caused by the auto generated code. Flex itself was updated to fix a buffer overflow in the generated scanner bsc990856,...

spice security update

CentOS Errata and Security Advisory CESA-2016:1204 An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Gentoo Security Advisory GLSA 201603-02

Gentoo Linux Local Security Checks SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.121444";...

Gentoo Security Advisory GLSA 201408-06

Gentoo Linux Local Security Checks GLSA 201408-06 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201311-04

Gentoo Linux Local Security Checks GLSA 201311-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201404-01

Gentoo Linux Local Security Checks GLSA 201404-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201405-01

Gentoo Linux Local Security Checks GLSA 201405-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201311-16

Gentoo Linux Local Security Checks GLSA 201311-16 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201404-05

Gentoo Linux Local Security Checks GLSA 201404-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201308-02

Gentoo Linux Local Security Checks GLSA 201308-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...