SUSE-SU-2017:0237-1 Security update for gstreamer-0_10-plugins-good

gstreamer-010-plugins-good was updated to fix five security issues. These security issues were fixed: - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write bsc1012103. - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write bsc1012102. -...

SUSE-SU-2017:0225-1 Security update for gstreamer-0_10-plugins-good

gstreamer-010-plugins-good was updated to fix six security issues. These security issues were fixed: - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write bsc1012102 - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write bsc1012103 -...

OPENSUSE-SU-2017:0195-1 Security update for libgit2

AThis update for libgit2 fixes the following issues: - CVE-2016-8568: invalid memory accesses parsing object files out-of-bound read boo1003810 - CVE-2016-8569: invalid memory accesses parsing object files NULL pointer de-reference boo1003810...

SUSE-SU-2016:3303-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following security issues: - CVE-2016-9807: Flic decoder invalid read could lead to crash. bsc1013655 - CVE-2016-9634: Flic out-of-bounds write could lead to code execution. bsc1012102 - CVE-2016-9635: Flic out-of-bounds write could lead to code...

SUSE-SU-2016:3288-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2016-9807: flic decoder invalid read could lead to crash bsc1013655 CVE-2016-9634: flic out-of-bounds write could lead to code execution bsc1012102 CVE-2016-9635: flic out-of-bounds write could lead to code execution bsc101210...

SUSE-SU-2016:2828-1 Security update for X Window System client libraries

This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...

MGASA-2016-0364 Updated kernel-tmb package fixes security issues

This update is based on the upstream 4.4.26 kernel and fixes at least these security issues: sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the...

SUSE-SU-2016:2505-1 Security update for X Window System client libraries

This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...

SUSE-SU-2016:1909-1 Security update for libarchive

libarchive was updated to fix 20 security issues. These security issues were fixed: - CVE-2015-8918: Overlapping memcpy in CAB parser bsc985698. - CVE-2015-8919: Heap out of bounds read in LHA/LZH parser bsc985697. - CVE-2015-8920: Stack out of bounds read in ar parser bsc985675. - CVE-2015-8921:...

SUSE-SU-2016:1203-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2013-7446: Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel allowed local users to bypass intended AFUNIX socket permissions or cause a...

SUSE-SU-2016:1057-1 Security update for openssl

This update for openssl fixes various security issues and bugs: Security issues fixed: - CVE-2016-0800 aka the 'DROWN' attack bsc968046: OpenSSL was vulnerable to a cross-protocol attack that could lead to decryption of TLS sessions by using a server supporting SSLv2 and EXPORT cipher suites as a...

Design/Logic Flaw

The Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340 before 341.95 and R352 before 354.74 on Windows allows local users to obtain sensitive information, cause a denial of service crash, or gain privileges via unspecified vectors related to an untrusted...

SUSE-SU-2016:0471-1 Security update for glibc

This update for glibc fixes the following security issues: - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD...

Google Chrome < 9.0.597.107 Multiple Vulnerabilities

Binary data 5807.pasl...

Multiple linux kernel IGMP processing bugs

DoS, kernel memory access...

SUSE-SA:2004:043: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2004:043 cyrus-imapd. Stefan Esser reported various bugs within the Cyrus IMAP Server. These include buffer overflows and out-of-bounds memory access which could allow remote attackers to execute arbitrary commands as root. The bugs...

SUSE-SA:2004:020: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:020 kernel. Multiple security vulnerabilities are being addressed with this security update of the Linux kernel. Kernel memory access vulnerabilities are fixed in the e1000, decnet, acpiasus, alsa, airo/WLAN, pss and mpu401 driver...

CVE-2003-1301

Sun Java Runtime Environment JRE 1.x before 1.4.211 and 1.5.x before 1.5.006, and as used in multiple web browsers, allows remote attackers to cause a denial of service application crash via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid...

Apple OSX sliplogin overflow

side note ... isn't it odd that I can run gdb on a suid binary? Osx version 10.1.3 localhost: elguapo ls -al /usr/sbin/sliplogin -r-sr-xr-x 1 root wheel 14700 Dec 8 10:49 /usr/sbin/sliplogin localhost: elguapo sliplogin perl -e 'print "A" x 9000' Bus error localhost: elguapo uname -a Darwin...