firefox security update

60.2.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 60.2.0-1 - Update to 60.2.0 ESR 60.1.0-9 - Do not set user agent rhbz1608065 - GTK dialogs are localized now rhbz1619373 - JNLP association works again rhbz1607457 60.1.0-8 - Fixed...

September 20, 2018—KB4457133 (Preview of Monthly Rollup)

None None...

Description of the Communicator 2007 R2 cumulative update: January 2010

Describes the issue that is fixed in the Communicator 2007 R2 cumulative update that is dated January 2010.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issue that is fixed in the cumulative update that is dated January 2010.This article describes the following items abo...

Red Hat 389-ds-base Denial of Service Vulnerability (CNVD-2019-02505)

Red Hat 389-ds-base is an American Red Hat package that includes a Linux directory server and a server administration command-line program. A security vulnerability in Red Hat 389-ds-base versions 1.3.7.10 and earlier, 1.3.8.8 and earlier, and 1.4.0.16 and earlier, stems from the program failing ...

Mozilla Firefox ESR < 60.2 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 60.2. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include'compat.inc'; if description...

UBUNTU-CVE-2018-16426

Endless recursion when handling responses from an IAS-ECC card in iaseccselectfile in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs...

UBUNTU-CVE-2018-16427

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs...

Microsoft Windows Explorer Out-of-Bounds Read Denial of Service Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Explorer is one of the default browsers that comes with Windows operating systems. Microsoft Windows Explorer suffers from an out-of-bounds read denial of service vulnerability. An attacker exploiting...

CVE-2018-16427

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs...

Samsung SmartThings Hub Buffer Overflow Vulnerability

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of the video-core HTTP server in Samsung SmartThings Hub STH-ETH-250 using firmware...

xkbcommon infinite recursion vulnerability

xkbcommon is a keyboard key mapping compiler and support library. An infinite recursion vulnerability exists in versions of xkbcommon prior to 0.8.1, which can be exploited by a local attacker to crash an xkbcommon user by submitting a specially crafted keymap file...

Epiphany Web Browser 3.28.1 - Denial of Service (PoC)

Epiphany Web Browser 3.28.1 - Denial of Service PoC Exploit Title: Epiphany Web Browser 3.28.1 - Denial of Service PoC Author: Dhiraj Mishra Date: 2018-08-23 Software: https://projects-old.gnome.org/epiphany/ Version: 3.28.1 CVE: N/A Tested on: Ubuntu 18 64bit Steps to reproduce: 1. Open epiphany...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2018:2412-1)

This update for wireshark fixes the following issues: Security issues fixed : - bsc1094301: Wireshark security update to 2.6.1, 2.4.7, 2.2.15 - CVE-2018-14339: MMSE dissector infinite loop wnpa-sec-2018-38, bsc1101810 - CVE-2018-14341: DICOM dissector crash wnpa-sec-2018-39, bsc1101776 -...

SUSE-SU-2018:2412-1 Security update for wireshark

This update for wireshark fixes the following issues: Security issues fixed: - bsc1094301: Wireshark security update to 2.6.1, 2.4.7, 2.2.15 - CVE-2018-14339: MMSE dissector infinite loop wnpa-sec-2018-38, bsc1101810 - CVE-2018-14341: DICOM dissector crash wnpa-sec-2018-39, bsc1101776 -...

Out-of-bounds

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or,...

openSUSE Security Update : python-Django1 (openSUSE-2018-875)

This update for python-Django1 to version 1.11.15 fixes the following issues : The following security vulnerability was fixed : - CVE-2018-14574: Fixed an open redirect possibility in CommonMiddleware boo1102680 The following other bugs were fixed : - Fixed WKBWriter.write and writehex for empty...

FreeBSD : xml-security-c -- crashes on malformed KeyInfo content (5786185a-9a43-11e8-b34b-6cc21735f730)

The shibboleth project reports : SAML messages, assertions, and metadata all commonly make use of the XML Signature KeyInfo construct, which expresses information about keys and certificates used in signing or encrypting XML. The Apache Santuario XML Security for C++ library contained code paths ...

xml-security-c -- crashes on malformed KeyInfo content

The shibboleth project reports: SAML messages, assertions, and metadata all commonly make use of the XML Signature KeyInfo construct, which expresses information about keys and certificates used in signing or encrypting XML. The Apache Santuario XML Security for C++ library contained code paths a...

Debian DLA-1451-1 : wireshark security update

CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14368 CVE-2018-14369 Due to several flaws different dissectors could go in infinite loop or could be crashed by malicious packets. For Debian 8 'Jessie', these problems have been fixed in version...

Mozilla: Buffer overflow using computed size of canvas element

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60,...