Debian DSA-3881-1 : firefox-esr - security update

Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, buffer overflows and other implementation errors may lead to the execution of arbitrary code, denial of service or domain spoofing. Debian follows the extended support...

Updated libytnef packages fix security vulnerabilities

Several issues were discovered in libytnef, a library used to decode application/ms-tnef e-mail attachments. Multiple heap overflows, out-of-bound writes and reads, NULL pointer dereferences and infinite loops could be exploited by tricking a user into opening a maliciously crafted winmail.dat fi...

Mozilla: Vulnerabilities in the Graphite 2 library (MFSA 2017-16)

A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird...

Fedora 25 : libsndfile (2017-abbac6c64b)

fixes buffer overflows for flac and pcm Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

USN-3276-2: shadow regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3276-1 intended to fix a vulnerability in su. The solution introduced a regression in su signal handling. This update modifies the security fix. We apologize for the inconvenience. Original advisory...

Debian DLA-968-1 : libpodofo security update

Several heap-based buffer overflows and NULL pointer dereferences have been discovered in libpodofo, a library for manipulating PDF files, that allow remote attackers to cause a denial of service application crash or other unspecified impact via a crafted PDF document. For Debian 7 'Wheezy', thes...

[SECURITY] [DLA 968-1] libpodofo security update

Package : libpodofo Version : 0.9.0-1.1+deb7u2 CVE ID : CVE-2017-6840 CVE-2017-6842 CVE-2017-6843 CVE-2017-6847 CVE-2017-6848 CVE-2017-7378 CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 Debian Bug : 861557 861564 859330 859329 Several heap-based buffer overflows and NULL pointer...

openSUSE Security Update : libsndfile (openSUSE-2017-625)

This update for libsndfile fixes the following issues : - CVE-2017-8361: Global buffer overflow in flacbuffercopy. bsc1036946 - CVE-2017-8362: Invalid memory read in flacbuffercopy. bsc1036943 - CVE-2017-8363: Heap-based buffer overflow in flacbuffercopy. bsc1036945 - CVE-2017-7585, CVE-2017-7741...

FreeBSD : freetype2 -- buffer overflows (4a088d67-3af2-11e7-9d75-c86000169601)

Werner Lemberg reports : CVE-2017-8105, CVE-2017-8287: Older FreeType versions have out-of-bounds writes caused by heap-based buffer overflows related to Type 1 fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...

EnergyWise Module Buffer Overflow

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

EnergyWise Module Buffer Overflow

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

EnergyWise Module Buffer Overflow

The multiple vulnerabilities of the EnergyWise module of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to trigger buffer overflows or system reboots, accompanied by service failure through specially created...

freetype2 -- buffer overflows

Werner Lemberg reports: CVE-2017-8105, CVE-2017-8287: Older FreeType versions have out-of-bounds writes caused by heap-based buffer overflows related to Type 1 fonts...

Ubuntu 14.04 LTS / 16.04 LTS : shadow regression (USN-3276-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3276-2 advisory. USN-3276-1 intended to fix a vulnerability in su. The solution introduced a regression in su signal handling. This update modifies the security fix. W...

[SECURITY] [DSA 3846-1] libytnef security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3846-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 09, 2017 https://www.debian.org/security/faq -...

openSUSE Security Update : tcpdump / libpcap (openSUSE-2017-557)

This update for tcpdump to version 4.9.0 and libpcap to version 1.8.1 fixes the several issues. These security issues were fixed in tcpdump : - CVE-2016-7922: The AH parser in tcpdump had a buffer overflow in print-ah.c:ahprint bsc1020940. - CVE-2016-7923: The ARP parser in tcpdump had a buffer...

Ubuntu: Security Advisory (USN-3276-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3276-1: shadow vulnerabilities

Sebastian Krahmer discovered integer overflows in shadow utilities. A local attacker could possibly cause them to crash or potentially gain privileges via crafted input. CVE-2016-6252 Tobias Stöckmann discovered a race condition in su. A local attacker could cause su to send SIGKILL to other...

Ubuntu 14.04 LTS / 16.04 LTS : shadow vulnerabilities (USN-3276-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3276-1 advisory. Sebastian Krahmer discovered integer overflows in shadow utilities. A local attacker could possibly cause them to crash or potentially gain...

Updated openjpeg packages fix security vulnerability

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data. CVE-2016-51...