2115 matches found
[SECURITY] Fedora 29 Update: file-5.34-15.fc29
The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...
CVE-2019-12410
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...
CVE-2019-12410
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...
PYSEC-2019-195
It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...
PYSEC-2019-196
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...
CVE-2019-12410
CVE-2019-12410 affects Apache Arrow 0.12.0–0.14.1, where memory for Arrow Arrays could be left uninitialized when reading RLE null data from Parquet. This impacts C++, Python, Ruby, and R implementations and could lead to leaking uninitialized memory if data is transmitted (e.g., Flight) or persi...
Moderate: Red Hat Security Advisory: libarchive security and bug fix update
An update for libarchive is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
[SECURITY] Fedora 30 Update: file-5.36-5.fc30
The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...
[SECURITY] Fedora 31 Update: file-5.37-8.fc31
The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...
[SECURITY] Fedora 31 Update: apache-commons-compress-1.19-1.fc31
The Apache Commons Compress library defines an API for working with ar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files. In version 1.14 read-only support for Brotli decompression has been added, but it has been removed form this package...
[SECURITY] Fedora 30 Update: apache-commons-compress-1.19-1.fc30
The Apache Commons Compress library defines an API for working with ar, cpio, Unix dump, tar, zip, gzip, XZ, Pack200 and bzip2 files. In version 1.14 read-only support for Brotli decompression has been added, but it has been removed form this package...
Memory Corruption Vulnerability in XnView
XnView Picture Viewer with picture viewer, screen capture, slideshow, thumbnail creation, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 picture formats and more than 500 pictures after installing plug-ins. XnView has a...
[SECURITY] Fedora 29 Update: libreoffice-6.1.6.3-5.fc29
LibreOffice is an Open Source, community-developed, office productivity sui te. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...
CVE-2019-17252
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!ReadBadPNG+0x0000000000000115...
CVE-2019-17252
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!ReadBadPNG+0x0000000000000115...
CVE-2019-17251
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43...
Design/Logic Flaw
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!ReadBadPNG+0x0000000000000115...
Design/Logic Flaw
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43...
CVE-2019-17252
CVE-2019-17252 affects IrfanView 4.53 and is a User Mode Write Access vulnerability at FORMATS!Read_BadPNG+0x0000000000000115. Multiple sources corroborate a read/write access conflict in IrfanView 4.53; CVSS indicates high impact locally with partial confidentiality, integrity, and availability ...
