427 matches found
[SECURITY] Fedora 34 Update: mingw-binutils-2.34-8.fc34
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
[SECURITY] Fedora 34 Update: mingw-libjpeg-turbo-2.0.90-2.fc34
MinGW Windows cross compiled Libjpeg-turbo library...
[SECURITY] Fedora 32 Update: mingw-binutils-2.32-10.fc32
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS
Perl before 5.30.3 has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection...
(Pwn2Own) Google Chromium V8 XOR Typer Mismatch Out-Of-Bounds Access Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Google Chromium. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation...
perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS
Perl before 5.30.3 has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection...
SYS.2.3.A2
Auf Grundlage der Sicherheitsanforderungen und des Einsatzzwecks MUSS ein geeignetes Unix-Derivat bzw. eine geeignete Linux-Distribution ausgewaehlt werden. Es MUSS fuer die geplante Einsatzdauer des Betriebssystems Support verfuegbar sein. Alle benoetigten Anwendungsprogramme SOLLTEN als Teil de...
Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials
A credential stealer infamous for targeting Windows systems has resurfaced in a new phishing campaign that aims to steal credentials from Microsoft Outlook, Google Chrome, and instant messenger apps. Primarily directed against users in Turkey, Latvia, and Italy starting mid-January, the attacks...
Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials
A credential stealer infamous for targeting Windows systems has resurfaced in a new phishing campaign that aims to steal credentials from Microsoft Outlook, Google Chrome, and instant messenger apps. Primarily directed against users in Turkey, Latvia, and Italy starting mid-January, the attacks...
[SECURITY] Fedora 33 Update: mingw-binutils-2.34-7.fc33
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
Fedora: Security Advisory for mingw-binutils (FEDORA-2021-354441fcdd)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for mingw-binutils (FEDORA-2020-28c78a6ac3)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: mingw-binutils-2.32-9.fc32
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
[SECURITY] Fedora 33 Update: mingw-binutils-2.34-4.fc33
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
[SECURITY] Fedora 32 Update: mingw-binutils-2.32-8.fc32
Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...
MGASA-2020-0305 Updated pcre2 packages fix security vulnerability
An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. T...
EulerOS Virtualization for ARM 64 3.0.6.0 : pcre2 (EulerOS-SA-2020-1702)
According to the version of the pcre2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An out-of-bounds read was discovered in PCRE when the pattern '\X' is JIT compiled and used to match specially crafted...
PCRE2: Denial of service
Background PCRE2 is a project based on PCRE Perl Compatible Regular Expressions which has a new and revised API. Description PCRE2 has a flaw when handling JIT-compiled regex using the \X pattern. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known...