Important: Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0.18 (openstack-nova) security update

An update for openstack-nova is now available for Red Hat OpenStack Services on OpenShift 18.0.18 Antelope. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Cross-site scripting - Stored via upload `.svg` file in

Description When user upload a file with .svg extension and direct access this file, the server response with Content-type: image/svg+xml lead to processing SVG as HTML file Proof of Concept POST /api/resource HTTP/2 Host: demo.usememos.com Cookie:...

PhotoLine Handles TIFF Image Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the TIFF format, which could be exploited by attackers to construct malformed TIFF files that could crash the program...

SUSE SLED11 / SLES11 Security Update : libqt4 (SUSE-SU-2015:0977-1)

The libqt4 library was updated to fix several security issues : CVE-2015-0295: Division by zero when processing malformed BMP files. bsc921999 CVE-2015-1858: Segmentation fault in BMP Qt Image Format Handling. bsc927806 CVE-2015-1859: Segmentation fault in ICO Qt Image Format Handling. bsc927807...

SUSE-SU-2015:0977-1 Security update for libqt4

The libqt4 library was updated to fix several security issues: CVE-2015-0295: Division by zero when processing malformed BMP files. bsc921999 CVE-2015-1858: Segmentation fault in BMP Qt Image Format Handling. bsc927806 CVE-2015-1859: Segmentation fault in ICO Qt Image Format Handling. bsc927807...

Fedora 21 : qt5-qtbase-5.4.1-9.fc21 (2015-6364)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...

Fedora 22 : qt5-qtbase-5.4.1-9.fc22 (2015-6114)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...