OPENSUSE-SU-2020:0180-1 Security update for upx

This update for upx to version 3.96 fixes the following issues: - CVE-2019-1010048: Fixed a denial of service in PackLinuxElf32::PackLinuxElf32help1 boo1141777. - CVE-2019-14296: Fixed a denial of service in canUnpack boo1143839. - CVE-2019-20021: Fixed a heap-based buffer over-read in canUnpack...

Security update for upx (moderate)

openSUSE Security Update: Security update for upx Announcement ID: openSUSE-SU-2020:0180-1 Rating: moderate References: 1094138 1141777 1143839 1159833 1159920 Cross-References: CVE-2018-11243 CVE-2019-1010048 CVE-2019-14296 CVE-2019-20021 CVE-2019-20053 Affected Products: openSUSE Backports...

Flaw in Philips Smart Light Bulbs Exposes Your WiFi Network to Hackers

There are over a hundred potential ways hackers can ruin your life by having access to your WiFi network that's also connected to your computers, smartphones, and other smart devices. Whether it's about exploiting operating system and software vulnerabilities or manipulating network traffic, ever...

OPENSUSE-SU-2020:0170-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issue fixed: - CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage bsc1159861. - CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage bsc1160369. Non-security issue fixed: - Fixed an issue where...

CVE-2019-15126 aka Kr00k

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2020:0170-1 Rating: moderate References: 1159861 1160369 1161194 Cross-References: CVE-2019-19948 CVE-2019-19949 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errat...

OPENSUSE-SU-2020:0163-1 Security update for upx

This update for upx to version 3.96 fixes the following issues: - CVE-2019-1010048: Fixed a denial of service in PackLinuxElf32::PackLinuxElf32help1 boo1141777. - CVE-2019-14296: Fixed a denial of service in canUnpack boo1143839. - CVE-2019-20021: Fixed a heap-based buffer over-read in canUnpack...

Security update for upx (moderate)

openSUSE Security Update: Security update for upx Announcement ID: openSUSE-SU-2020:0163-1 Rating: moderate References: 1094138 1141777 1143839 1159833 1159920 Cross-References: CVE-2018-11243 CVE-2019-1010048 CVE-2019-14296 CVE-2019-20021 CVE-2019-20053 Affected Products: openSUSE Leap 15.1 An...

PT-2020-7568 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue concerns information disclosure related to PPTP and PoE on the affected device. Recommendations: For D-Link DIR-100 version 4.03B07, update to a newer version that addresses the informatio...

SUSE SLES12 Security Update : python36 (SUSE-SU-2020:0302-1)

This update for python36 to version 3.6.10 fixes the following issues : CVE-2017-18207: Fixed a denial of service in Waveread.readfmtchunk bsc1083507. CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ signs bsc1149955. CVE-2019-15903: Fixed a heap-based buffer over-read...

SUSE-SU-2020:0302-1 Security update for python36

This update for python36 to version 3.6.10 fixes the following issues: - CVE-2017-18207: Fixed a denial of service in Waveread.readfmtchunk bsc1083507. - CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ signs bsc1149955. - CVE-2019-15903: Fixed a heap-based buffer...

Debian: Security Advisory (DLA-2088-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2088-1 : libsolv security update

repodataschema2id in repodata.c in libsolv, a dependency solver library, had a heap-based buffer over-read via a last schema whose length could be less than the length of the input schema. For Debian 8 'Jessie', this problem has been fixed in version 0.6.5-1+deb8u1. We recommend that you upgrade...

[SECURITY] [DLA 2088-1] libsolv security update

Package : libsolv Version : 0.6.5-1+deb8u1 CVE ID : CVE-2019-20387 Debian Bug : 949611 repodataschema2id in repodata.c in libsolv, a dependency solver library, had a heap-based buffer over-read via a last schema whose length could be less than the length of the input schema. For Debian 8 "Jessie"...

SUSE-SU-2020:0275-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issue fixed: - CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage bsc1159861. - CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage bsc1160369. Non-security issue fixed: - Fixed an issue where...

Debian DLA-2084-1 : graphicsmagick security update

Three issues have been found in graphicsmagick, a collection of image processing tools. They are basically a heap-based buffer over-read, heap-based buffer overflow and a use-after-free in different functions. For Debian 8 'Jessie', these problems have been fixed in version 1.3.20-3+deb8u8. We...

Debian: Security Advisory (DLA-2084-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LANCOM Device Detection (Telnet over SSL)

Detection of LANCOM devices. This script performs Telnet over SSL based detection of LANCOM devices. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

MGASA-2020-0049 Updated libsass packages fix security vulnerabilities

Use-after-free vulnerability in sasscontext.cpp:handleerror CVE-2018-11499. Null pointer dereference in Sass::SelectorList::populateextends CVE-2018-19797. Use-after-free vulnerability exists in the SharedPtr class CVE-2018-19827. Stack overflow in Eval::operator CVE-2018-19837. Stack-overflow at...

CVE-2015-0241

The tochar function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service crash or possibly execute arbitrary code via a 1 large number of digits when processing a numeric...