EUVD-2018-1891

Malware in sbrugna...

TencentOS Server 4: pkgconf (TSSA-2024:0166)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0166 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Security update for pkgconf (moderate)

openSUSE Security Update: Security update for pkgconf Announcement ID: openSUSE-SU-2023:0043-1 Rating: moderate References: 1207394 Cross-References: CVE-2023-24056 CVSS scores: CVE-2023-24056 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-24056 SUSE: 5.5...

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...