imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687013954027520 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Fedora 27 : openvpn (2017-5882331351)

Maintenance release with several minor upstream bugfixes and a security fix related to legacy configurations deploying the deprecated key-method 1 configuration option CVE-2017-12166. From this update of, OpenVPN will use the lz4 compression library from Fedora instead of the upstream bundled...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3488

Upstream security update. Follow RHBA-2017:3488 for details...

Unbreakable Enterprise kernel security and bugfix update

4.1.12-112.14.1 - ext4: fix off-by-one on max nrpages in ext4findunwrittenpgoff Eryu Guan Orabug: 27233471 4.1.12-112.13.1 - cgroup: make sure a parent css isnt offlined before its children Tejun Heo Orabug: 27179269 4.1.12-112.12.1 - ctf: allow dwarf2ctf to run as root but produce no output Nick...

CentOS 6 / 7 : java-1.7.0-openjdk (CESA-2017:3392)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3326

Upstream security update. Follow RHBA-2017:3326 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3301

Upstream security update. Follow RHBA-2017:3301 for details...

Fedora 26 : qt5-qtwebengine (2017-4d90e9fc97)

An update of QtWebEngine to the security and bugfix release 5.9.3, including : - Security fixes from Chromium up to version 62.0.3202.89. Including: CVE-2017-5124, CVE-2017-5126, CVE-2017-5127, CVE-2017-5128, CVE-2017-5129, CVE-2017-5132, CVE-2017-5133, CVE-2017-15386, CVE-2017-15387,...

Oracle Linux 7 : kernel (ELSA-2017-3315-1)

Description of changes: - 3.10.0-693.11.1.0.1.el7.OL7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel olkmodsigningkey.x509alexey.petrenko at oracle.com - Update...

Fedora 25 : jbig2dec (2017-ed565f9ed0)

update to 0.14 bugfix release CVE-2017-9216 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3202

Upstream security update. Follow RHBA-2017:3202 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3205

Upstream security update. Follow RHBA-2017:3205 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3203

Upstream security update. Follow RHBA-2017:3203 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3209

Upstream security update. Follow RHBA-2017:3209 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3199

Upstream security update. Follow RHBA-2017:3199 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3207

Upstream security update. Follow RHBA-2017:3207 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:3206

Upstream security update. Follow RHBA-2017:3206 for details...

openSUSE Security Update : sssd (openSUSE-2017-1251)

This update for sssd provides the following fixes : Security issues fixed : - CVE-2017-12173: Fixed unsanitized input when searching in local cache database bsc1061832. Non security issues fixed : - Fixed a segfault issue in ldaprfc2307fallbacktolocalusers. bsc1055123 - Install /var/lib/sss/mc...

Updated exiv2 packages fix security vulnerabilities & bugs

Opening an image created on certain pentax cameras with gwenview, which uses the exiv2 library, causes gwenview to segfault. Exiv2 upstream created a patch to resolve this problem bugfix - applies only to mga6. The following security issues were also fixed: Heap overflow in...

PHP -- denial of service attack

The PHP project reports: The PHP development team announces the immediate availability of PHP 5.6.32. This is a security release. Several security bugs were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. The PHP development team announces the immediate...