SUSE CVE-2017-18248

The addjob function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification...

CVE-2018-19045

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information...

Security fix for the ALT Linux 10 package firefox-esr version 52.5.2-alt1

Dec. 10, 2017 Andrey Cherepanov 52.5.2-alt1 - New ESR version 52.5.2 - Fixes: + CVE-2017-7843 Web worker in Private Browsing mode can write IndexedDB data - Build with DBUS support ALT 34302...