Security update for djvulibre (moderate)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2019:2217-1 Rating: moderate References: 1146569 1146571 1146572 1146702 Cross-References: CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 Affected Products: openSUSE Leap 15.0 An update that fixes fo...

Debian DLA-1934-1 : cimg security update

Several issues have been found in cimg, a powerful image processing library. CVE-2019-1010174 is related to a missing string sanitization on URLs, which might result in a command injection when loading a special crafted image. The other CVEs are about heap-based buffer over-reads or double frees...

Security update for SDL2 (moderate)

openSUSE Security Update: Security update for SDL2 Announcement ID: openSUSE-SU-2019:2226-1 Rating: moderate References: 1141844 1142031 Cross-References: CVE-2019-13616 CVE-2019-13626 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: Th...

openSUSE Security Update : expat (openSUSE-2019-2205)

This update for expat fixes the following issues : Security issues fixed : - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : djvulibre (openSUSE-2019-2217)

This update for djvulibre fixes the following issues : Security issues fixed : - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM...

openSUSE: Security Advisory for expat (openSUSE-SU-2019:2204-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian: Security Advisory (DLA-1934-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2019:2204-1 Security update for expat

This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 This update was imported from the SUSE:SLE-15:Update update project...

CVE-2019-16928

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in stringvformat in string.c involving a long EHLO command...

Security update for expat (moderate)

openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2019:2205-1 Rating: moderate References: 1149429 Cross-References: CVE-2019-15903 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for expat fixe...

CVE-2019-16928

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in stringvformat in string.c involving a long EHLO command...

CVE-2019-16928

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in stringvformat in string.c involving a long EHLO command...

Heap overflow

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in stringvformat in string.c involving a long EHLO command...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:2463-1)

This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c bsc1141844. CVE-2019-13626: Fixed integer overflow in IMAADPCMdecode in audio/SDLwave.c bsc1142031. Note that Tenable Network Security has...

Heap overflow

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

CVE-2019-16748

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...

EulerOS 2.0 SP3 : flex (EulerOS-SA-2019-2050)

According to the version of the flex package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the yygetnextbuffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service o...

EulerOS 2.0 SP5 : pcre2 (EulerOS-SA-2019-1983)

According to the version of the pcre2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2019-2056)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to...

EulerOS 2.0 SP3 : keepalived (EulerOS-SA-2019-2044)

According to the version of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allow...