August 2018 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide. MSRC team...

August 2018 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide. MSRC team...

imagemagick/encoder_dng_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed report: https://oss-fuzz.com/testcase?key=4830316907724800 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

freetype2/type1: Heap-buffer-overflow in mm_weights_unmap

Detailed report: https://oss-fuzz.com/testcase?key=5650962751422464 Project: freetype2 Fuzzer: libFuzzerfreetype2type1 Fuzz target binary: type1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x615000046218 Crash State: mmweightsunmap...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

DEBIAN-CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2016-0708

Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service details. For applications to be vulnerable, they must have been staged using automatic buildpack...

July 2018 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

July 2018 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

July 2018 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

PT-2018-3302 · Mutt +7 · Mutt +7

Name of the Vulnerable Software and Affected Versions: Mutt versions prior to 1.10.1 NeoMutt versions prior to 2018-07-16 Description: The issue allows remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic...

Microsoft Windows: Sign-in last interactive user automatically

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsigninlastuser.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Sign-in last interactive user automatically after a system-initiated restart Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Auto-restart with logged on users (scheduled AU)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winautorebootloggedonusers.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for No auto-restart with logged on users for scheduled automatic updates installations Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Automatic Updates: Scheduled install day

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winautoupdatesschedule.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure Automatic Updates: Scheduled install day Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Automatic Updates

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winautoupdates.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure Automatic Updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Automatic Download and Install of updates (Store)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winstoreautoupdatedownload.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Turn off Automatic Download and Install of updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Fedora 27 : 1:epiphany (2018-de5457b0a2)

Ensure search engine migration does not fail 794645 - Do not open adblock filters when automatic open downloads is enabled 794646 - Fix crash destroying sync service 794728 - Fix CVE-2018-11396/CVE-2018-12016 795740 - Do not use Fanboy's Annoyance adblock list by default 796245 - Fix a couple...