RLSA-2021:4649 Moderate: gcc-toolset-10-binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: Developer environment:...

RUSTSEC-2021-0125 Panic on incorrect date input to `simple_asn1`

Version 0.6.0 of the simpleasn1 crate panics on certain malformed inputs to its parsing functions, including fromder and derdecode. Because this crate is frequently used with inputs from the network, this should be considered a security vulnerability. The issue occurs when parsing the old ASN.1...

DEBIAN-CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

UBUNTU-CVE-2021-3910

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

GHSA-5MXH-2QFV-4G7J NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

NUL character in ROA causes OctoRPKI to crash

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character. Patches For more information If you have any questions or comments about this advisory email us at [email protected]...

RLSA-2021:4595 Moderate: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: Developer environment:...

RLSA-2021:4593 Moderate: annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

ALSA-2021:4593 Moderate: annobin security update

Annobin provides a compiler plugin to annotate and tools to examine compiled binary files. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in annobin in order to facilitate...

The vulnerability of the character determination function in the implementation of the Unicode standard, related to errors in code generation using homoglyphs, allows a violator to execute arbitrary code.

The vulnerability of the character determination function in the implementation of the Unicode standard is related to errors in code generation using homoglyphs. Exploiting this vulnerability can allow a remote attacker to generate arbitrary codes...

CLSA-2021-1636389447 Fixed CVEs in glibc: CVE-2021-43396, CVE-2021-3326

CVE-2021-3326: avoid denial of service due to a failed assertion - CVE-2021-43396: check actual stored character in state reset code...

Denial Of Service (DoS)

rust:edge is vulnerable to denial of service. The vulnerability exists as it permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters causing an...

Adobe Character Animator 4.0.0 < 4.4.2 Multiple Vulnerabilities (APSB21-95)

The version of Adobe Character Animator installed on the remote Windows host is prior to 4.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-95 advisory. - Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when...

Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Adobe Character Animator 安全漏洞

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a memory buffer out-of-bounds access vulnerability that could be exploited by attackers to implement an application denial of service in the context of the...

Adobe Character Animator 2021 null pointer dereference vulnerability

Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitive 2D character animation, real-time animation, and easy sharing and publishing of characters. Adobe Character Animator 2021 4.4 and earlier versions are vulnerable to a...

Adobe Character Animator 2021 Memory Corruption Vulnerability (CNVD-2022-67832)

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe Character Animator 2021 Memory Buffer Out-of-Bounds Access Vulnerability (CNVD-2022-67830)

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain a memory buffer out-of-bounds access vulnerability that could be exploited by attackers to implement an application denial of service in the context of the...

Adobe Character Animator 2021 out-of-bounds read vulnerability

Adobe Character Animator is a motion capture and animation tool from Adobe. Adobe Character Animator 2021 4.4 and earlier versions contain an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...