Security fix for the ALT Linux 9 package bind version 9.10.5.P3-alt1

July 11, 2017 Dmitry V. Levin 9.10.5.P3-alt1 - 9.10.4-P8 - 9.10.5-P3 fixes: CVE-2017-3140, CVE-2017-3141, CVE-2017-3142, CVE-2017-3143...

Security fix for the ALT Linux 8 package tor version 0.3.0.9-alt1.M80P.1

0.3.0.9-alt1.M80P.1 built July 3, 2017 Anton Farygin in task 184902 June 30, 2017 Vladimir Didenko - new version Fixes: CVE-2017-0377...

isws.illinois.edu XSS vulnerability

Open Bug Bounty ID: OBB-256846 Description| Value ---|--- Affected Website:| isws.illinois.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security fix for the ALT Linux 10 package thunderbird version 52.2.0-alt1

June 22, 2017 Andrey Cherepanov 52.2.0-alt1 - New version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 9 package openvpn version June

June 21, 2017 Nikolay A. Fetisov 2.4.3-alt1 - New version - Security fixes: + CVE-2017-7522 Post-authentication --x509-track remote DoS + CVE-2017-7521 Post-authentication remote-triggerable memory leaks + CVE-2017-7521 Potential post-authentication remote code execution on servers that use the...

Security fix for the ALT Linux 10 package firefox-esr version 52.2.0-alt1

June 21, 2017 Andrey Cherepanov 52.2.0-alt1 - New ESR version 52.2.0 - Security fixes: + CVE-2017-5472: Use-after-free using destroyed node when regenerating trees + CVE-2017-7749: Use-after-free during docshell reloading + CVE-2017-7750: Use-after-free with track elements + CVE-2017-7751:...

Security fix for the ALT Linux 8 package curl version 7.54.1-alt1

June 14, 2017 Anton Farygin 7.54.1-alt1 - new version with security fixes: CVE-2017-9502: URL file scheme drive letter buffer overflow...

Security fix for the ALT Linux 7 package wireshark version 2.2.7-alt1.M70P.1

2.2.7-alt1.M70P.1 built June 4, 2017 Anton Farygin in task 183813 June 4, 2017 Anton Farygin - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read...

Security fix for the ALT Linux 8 package sudo version 1:1.8.20p1-alt1

May 31, 2017 Evgeny Sinelnikov 1:1.8.20p1-alt1 - Update to spring security release Fixes: CVE-2017-1000367...

Security fix for the ALT Linux 7 package samba-DC version 4.5.10-alt1.M70P.1

4.5.10-alt1.M70P.1 built May 25, 2017 Evgeny Sinelnikov in task 183302 May 24, 2017 Evgeny Sinelnikov - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

Security fix for the ALT Linux 7 package samba version 4.5.10-alt1.M70P.1

4.5.10-alt1.M70P.1 built May 25, 2017 Evgeny Sinelnikov in task 183302 May 24, 2017 Evgeny Sinelnikov - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

Security fix for the ALT Linux 8 package samba version 4.6.4-alt1

May 24, 2017 Evgeny Sinelnikov 4.6.4-alt1 - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

Security fix for the ALT Linux 8 package samba-DC version 4.6.4-alt1

May 24, 2017 Evgeny Sinelnikov 4.6.4-alt1 - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

DEBIAN-CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the alt parameter when uploading a vCard...

UBUNTU-CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the alt parameter when uploading a vCard...

PT-2017-18769 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file of AutoTrace. Recommendations: For AutoTrace version 0.31.1, at the...

PT-2017-18768 · None +2 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file at line 326:17 of the libautotrace.a library in AutoTrace. There is...

PT-2017-18777 · Autotrace +1 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function, located in input-tga.c. This function is part of the libautotrace.a library in...

PT-2017-18781 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-tga.c file of AutoTrace. Recommendations: For AutoTrace version 0.31.1, at the...

PT-2017-18782 · Martin Weber +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-tga.c file of AutoTrace. This is a technical issue that may lead to unintended...