Security update for SDL2 (moderate)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2019:2226-1 Rating: moderate References: 1141844 1142031 Cross-References: CVE-2019-13616 CVE-2019-13626 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: Th...

openSUSE Security Update : djvulibre (openSUSE-2019-2217)

This update for djvulibre fixes the following issues : Security issues fixed : - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM...

openSUSE Security Update : expat (openSUSE-2019-2205)

This update for expat fixes the following issues : Security issues fixed : - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and...

openSUSE: Security Advisory for expat (openSUSE-SU-2019:2204-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:2205-1 Security update for expat

This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 This update was imported from the SUSE:SLE-15:Update update project...

Security update for expat (moderate)

openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2019:2205-1 Rating: moderate References: 1149429 Cross-References: CVE-2019-15903 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for expat fixe...

Security update for expat (moderate)

openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2019:2204-1 Rating: moderate References: 1149429 Cross-References: CVE-2019-15903 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for expat fixe...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:2463-1)

This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c bsc1141844. CVE-2019-13626: Fixed integer overflow in IMAADPCMdecode in audio/SDLwave.c bsc1142031. Note that Tenable Network Security has...

SUSE SLED15 / SLES15 Security Update : djvulibre (SUSE-SU-2019:2452-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. CVE-2019-15144: Fixed denial-of-service caused by crafted PBM image...

SUSE-SU-2019:2452-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM imag...

CVE-2019-16748

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

CVE-2019-16748

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

CVE-2019-16748

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

CVE-2019-16748

CVE-2019-16748 affects wolfSSL (through 4.1.0) due to a missing sanity check of memory accesses during ASN.1 certificate parsing in the handshake. The issue is a one-byte heap-based buffer over-read in CheckCertSignature_ex (wolfcrypt/src/asn.c). This can lead to a severe impact as reflected by C...

EulerOS 2.0 SP3 : SDL (EulerOS-SA-2019-2045)

According to the versions of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.CVE-2019-7572 - SDL...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:2440-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2019:2440-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429...

SUSE-SU-2019:2429-1 Security update for expat

This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429...

exiv2 security update

CentOS Errata and Security Advisory CESA-2019:2101 An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

FreeBSD : bro -- invalid memory access or heap buffer over-read (55571619-454e-4769-b1e5-28354659e152)

Jon Siwek of Corelight reports : This is a security patch release to address a potential Denial of Service vulnerability : - The NTLM analyzer did not properly handle AV Pair sequences that were either empty or unterminated, resulting in invalid memory access or heap buffer over-read. The NTLM...