CVE-2021-37662

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can generate undefined behavior via a reference binding to nullptr in BoostedTreesCalculateBestGainsPerFeature and similar attack can occur in BoostedTreesCalculateBestFeatureSplitV2. The...

CVE-2021-37642

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

GHSA-M3F9-W3P3-P669 Heap buffer overflow in `QuantizedMul`

Impact An attacker can cause a heap buffer overflow in QuantizedMul by passing in invalid thresholds for the quantization: python import tensorflow as tf x = tf.constant256, 328, shape=1, 2, dtype=tf.quint8 y = tf.constant256, 328, shape=1, 2, dtype=tf.quint8 minx = tf.constant, dtype=tf.float32...

Minor update (4) for Vivaldi Desktop Browser 3.1

Download Vivaldi The following improvements were made since the third 3.1 minor update: Chromium Various security fixes backported from Chromium 84: CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-2020-6517 CVE-2020-6518 CVE-2020-6522...

DRUPAL-CORE-2020-002

The jQuery project released version 3.5.0, and as part of that, disclosed two security vulnerabilities that affect all prior versions. As mentioned in the jQuery blog, both are ... security issues in jQuery’s DOM manipulation methods, as in .html, .append, and the others. Security advisories for...

USN-3911-2 file regression

USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that caused the interpreter string to be truncated. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that file incorrectly handled...

Fedora 30 : opendmarc (2019-24b3f84f6e)

This update provides the final 1.3.2 release previously the package was 1.3.2 beta. It also includes the previously-omitted database schema directory resolving 1415753 and rddmarc tools, and backports proposed fixes for a crasher bug and security issue CVE-2019-16378 from upstream submissions. No...

Mozilla: Backport critical security fixes in Skia

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR 52.8, Thunderbird 52.8, and Firefox ESR 52.8...

Fedora 26 : qt5-qtwebengine (2018-024afa2d48)

A QtWebEngine security update backporting security fixes from Chromium 65 up to 65.0.3325.146. The backports have been forward-ported from QtWebEngine 5.9.5 LTS. This update fixes the following security issues : - CVE-2017-15429 - CVE-2018-6033 claimed fixed in 5.10.1, but the fix was incomplete...

Security fix for the ALT Linux 9 package glibc version 6:2.23-alt2

May 10, 2016 Gleb Fotengauer-Malinovskiy 6:2.23-alt2 - Backported upstream fixes for sw bugs: 19679, 19758, 19759, 19762, 19791, 19792, 19822, 19879 including fixes for CVE-2016-1234, CVE-2016-3075, CVE-2016-3706...

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3

6:2.11.3-alt8.M60P.3 built Dec. 23, 2015 Dmitry V. Levin in task 155253 Dec. 23, 2015 Dmitry V. Levin - Backported upstream fixes for sw15330/CVE-2013-1914, sw14699/CVE-2013-4237, sw1585567/CVE-2013-4332, sw14134/CVE-2012-6656, sw17325/CVE-2014-6040, sw14547/CVE-2012-4412,4424...

DLA-329-1 postgresql-8.4 - security update

Bulletin has no description...

DLA-227-1 postgresql-8.4 - security update

Bulletin has no description...

Oracle Linux 7 : ipa (ELSA-2015-0442)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0442 advisory. - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges 1165774 - CVE-2014-7828 freeipa: password not required when OTP in use 1160877...

Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6

Jan. 11, 2014 Dmitry V. Levin 6:2.17-alt6 - Backported upstream fixes for sw bugs: 14547, 14699, 15003, 15014, 15073, 15122, 15160, 15234, 15330, 15465, 15736, 15754, 15759, 15855, 15856, 15857, 15917, 16038, 16072 including fixes for CVE-2012-4412, CVE-2012-4424, CVE-2013-4237, CVE-2013-4332,...

Oracle Linux 3 : krb5 (ELSA-2007-0384)

From Red Hat Security Advisory 2007:0384 : Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication syst...

Oracle Linux 3 : libtiff (ELSA-2006-0603)

From Red Hat Security Advisory 2006:0603 : Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of...

Oracle Linux 3 : krb5 (ELSA-2008-0181)

From Red Hat Security Advisory 2008:0181 : Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication...

RHEL 5 : kernel (RHSA-2009:0021)

Updated kernel packages that resolve several security issues are now available for Red Hat Enterprise Linux 5.2 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of...

RHEL 4 : kernel (RHSA-2009:1077)

Updated kernel packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the cor...