Updated pngcrush package fixes security vulnerability

pngcrush-1.7.84 fixes defects reported by Coverity-scan, so it should be more resistant to crashes due to malformed input files, such as the one presented in CVE-2015-2158...

RedHat Update for httpd RHSA-2015:0325-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UnAce buffer overflow vulnerability

UnAce is a decompression application. A security vulnerability exists in UnAce's handling of special files, allowing an attacker to exploit the vulnerability to crash the application...

Gnupg2 Memory Misreference Denial of Service Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. GnuPG suffers from a memory misreference denial of service vulnerability that allows an attacker to submit a special request to crash the application...

OpenStack Glance Denial of Service Vulnerability

Glance provides restful APIs to query the metadata of a virtual machine image, and can obtain the image. A denial of service vulnerability exists in OpenStack Glance's handling of image file uploads, which could be exploited by an attacker to crash an application...

Ubuntu: Security Advisory (USN-2496-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AppCrashView - View Application Crashes (.wer files)

AppCrashView is a small utility for Windows Vista and Windows 7 that displays the details of all application crashes occurred in your system. The crashes information is extracted from the .wer files created by the Windows Error Reporting WER component of the operating system every time that a cra...

Apple MAC OS X Yosemite Intel Image Driver Code Execution Vulnerability (CNVD-2015-00793)

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A security vulnerability in the Apple MAC OS X Yosemite Intel graphics driver allows attackers to exploit the vulnerability to crash applications or execute arbitrary code...

Updated freeciv packages fix a security vulnerability

Updated freeciv packages to latest bugfix version, also fixing security vulnerability Freeciv 2.4.1 in Mageia 4 was built against an embedded version of lua 5.1, vulnerable to the following security issue: A heap-based overflow vulnerability was found in the way Lua handles varargs functions with...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to version 35.0 bnc910669 Notable features: Firefox Hello with new rooms-based conversations model Implemented HTTP Public Key Pinning Extension for enhanced authentication of encrypted connections Security fixes: MFSA 2015-01/CVE-2014-8634/CVE-2014-8635 Miscellaneous...

[slackware-security] freetype

New freetype packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/freetype-2.5.5-i486-1slack14.1.txz: Upgraded. This release fixes a security bug that could cause freetype...

thunderbird: multiple issues

CVE-2014-8634 arbitrary remote code execution Christian Holler and Patrick McManus reported memory safety problems and crashes that affect Firefox ESR 31.3 and Firefox 34. - CVE-2014-8635 arbitrary remote code execution Christoph Diehl, Christian Holler, Gary Kwong, Jesse Ruderman, Byron Campen,...

DLA-133-1 unrtf - security update

Bulletin has no description...

[ MDVSA-2015:007 ] unrtf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:007 http://www.mandriva.com/en/support/security/ Package : unrtf Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated unrtf package fixes security vulnerabilities: Michal Zalewsk...

glibc security and bug fix update

2.12-1.149.4 - Fix recursive dlopen 1173469. 2.12-1.149.3 - Fix typo in ressend and resquery rh1172023. 2.12-1.149.2 - Fix crashes on invalid input in IBM gconv modules CVE-2014-6040, 1139571. 2.12-1.149.1 - Fix wordexp to honour WRDENOCMD CVE-2014-7817, 1170121...

Mozilla Firefox documentwrite Buffer Overflow - Ver2 (CVE-2010-3179)

A buffer overflow vulnerability has been reported in Mozilla Firefox, Mozilla Thunderbird and Mozilla SeaMonkey. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

DameWare Mini Remote Control Service Username Overflow Buffer Overflow - Ver2 (CVE-2005-2842)

A buffer overflow vulnerability has been reported in Dameware Development Mini Remote Control Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

IBM Informix Dynamic Server Long Username Authentication Error Stack Overflow - Ver2 (CVE-2006-3854)

A buffer overflow vulnerability has been reported in IBM Informix Dynamic Database Server. An attacker could exploit this vulnerability via a long username, which causes an overflow in vsprintf when displaying in the resulting error message. Successful exploitation of this vulnerability could all...

Microsoft Windows PPTP Service Buffer Overflow - Ver2 (CVE-2002-1214)

A buffer overflow vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000 and Microsoft Windows 2000 Terminal Services. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Microsoft Visual Basic 6 Enterprise SP6 vb6stkitdll Buffer Overflow - Ver2 (CVE-2008-2959)

A buffer overflow vulnerability has been reported in Microsoft Visual Basic Enterprise Edition. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...