EulerOS 2.0 SP2 : ghostscript (EulerOS-SA-2019-2370)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the...

EulerOS 2.0 SP2 : dosfstools (EulerOS-SA-2019-2356)

According to the versions of the dosfstools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The readboot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service crash via a crafted filesystem, which...

EulerOS 2.0 SP2 : ppp (EulerOS-SA-2019-2399)

According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than...

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-2383)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...

EulerOS 2.0 SP2 : lz4 (EulerOS-SA-2019-2360)

According to the version of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a...

EulerOS 2.0 SP5 : subversion (EulerOS-SA-2019-2550)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in util.c in moddavsvn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated...

EulerOS 2.0 SP5 : file (EulerOS-SA-2019-2525)

According to the version of the file packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byt...

EulerOS 2.0 SP5 : lz4 (EulerOS-SA-2019-2542)

According to the version of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a...

EulerOS 2.0 SP5 : libmwaw (EulerOS-SA-2019-2535)

According to the version of the libmwaw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the...

Updated lz4 packages fix security vulnerability

Updated lz4 packages fix security vulnerability: Heap-based buffer overflow in LZ4write32 CVE-2019-17543...

CVE-2019-19638

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function loadpnm at frompnm.c, due to an integer overflow...

CVE-2019-19635

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function sixeldecoderawimpl at fromsixel.c...

CVE-2019-19638

CVE-2019-19638 affects Libsixel 1.8.2. A heap-based buffer overflow in load_pnm (frompnm.c) is caused by an integer overflow, as described in multiple connected sources. This condition is associated with denial-of-service/crash behavior in affected versions, with DoS vectors noted for crafted PNG...

CVE-2019-19638

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function loadpnm at frompnm.c, due to an integer overflow...

Updated libtiff packages fix security vulnerability

The updated packages fix a security vulnerability: tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...

NewStart CGSL MAIN 4.06 : qemu-kvm Multiple Vulnerabilities (NS-SA-2019-0211)

The remote NewStart CGSL host, running version MAIN 4.06, has qemu-kvm packages installed that are affected by multiple vulnerabilities: - mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams. CVE-2018-11806 - Qemu emulator = 3.0.0 built with the NE2000...

[SECURITY] [DLA 2021-1] libav security update

Package : libav Version : 6:11.12-1deb8u9 CVE ID : CVE-2017-17127 CVE-2017-18245 CVE-2018-19128 CVE-2018-19130 CVE-2019-14443 CVE-2019-17542 Several security issues were fixed in libav, a multimedia library for processing audio and video files. CVE-2017-17127 The vc1decodeframe function in...

EulerOS 2.0 SP2 : flex (EulerOS-SA-2019-2448)

According to the version of the flex package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service o...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2019-2490)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via...

openSUSE Security Update : libidn2 (openSUSE-2019-2613)

This update for libidn2 to version 2.2.0 fixes the following issues : - CVE-2019-12290: Fixed an improper round-trip check when converting A-labels to U-labels bsc1154884. - CVE-2019-18224: Fixed a heap-based buffer overflow that was caused by long domain strings bsc1154887. This update was...