SUSE-SU-2017:1041-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following security issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 - A crafted AVI file could have caused a stack overflow leading to DoS bsc1024047,...

SUSE-SU-2017:1039-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following security issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 - A crafted AVI file could have caused a stack overflow leading to DoS bsc1024047,...

SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2017:1003-1)

This update for gstreamer-010-plugins-base fixes the following security issues : - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2017:1012-1)

This update for gstreamer-010-plugins-base fixes the following issues : - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844 Note that Tenable Network Security has extracted the preceding description block directly...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2017:1010-1)

This update for gstreamer-plugins-good fixes the following issues : - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-good (SUSE-SU-2017:1004-1)

This update for gstreamer-plugins-good fixes the following issues : - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1004-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1010-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - A crafted aac audio file could have caused an invalid read and thus corruption or denial of service bsc1024014, CVE-2016-10198 - A crafted mp4 file could have caused an invalid read and thus corruption or denial of service...

SUSE-SU-2017:1012-1 Security update for gstreamer-0_10-plugins-base

This update for gstreamer-010-plugins-base fixes the following issues: - A crafted AVI file could have caused a floating point exception leading to DoS bsc1024076, CVE-2017-5837, bsc1024079, CVE-2017-5844...

Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)

http://www.example.com/wp-admin/admin.php?page=bwspanel&category=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%2842%29%3C%2Fscript%3E...

Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)

PoC http://www.example.com/wp-admin/admin.php?page=bwspanel=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%2842%29%3C%2Fscript%3E...

EQGRP

This is a repository containing three ELF files: 7z, 7z.so, and 7za. The files are likely related to the 7-Zip file archiver, a popular tool for compressing and decompressing files. The ELF files are likely used as plugins or extensions for the 7-Zip software. The files are compiled for Linux and...

SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2017:0962-1)

This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed : - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2017:0962-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed: - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068...

Updated pidgin packages fix security vulnerability

A server controlled by an attacker can send an invalid XML that can trigger an out-of-bound memory access. This might lead to a crash or, in some extreme cases, to remote code execution in the client-side CVE-2017-2640. The pidgin package has been updated to version 2.12.0, which fixes this issue...

openSUSE Security Update : gstreamer-0_10-plugins-good (openSUSE-2017-402)

This update for gstreamer-010-plugins-good fixes the following issues : Security issues fixed : - CVE-2016-9634, CVE-2016-9635: add some bounds checking boo1012102 boo1012103. - CVE-2016-9636: fix casting for some comparisons boo1012104. - CVE-2016-9807, CVE-2016-9808: rewrite logic using...

DNSControl - Synchronize your DNS to multiple providers from a simple DSL

DNSControl is a system for maintaining DNS zones. It has two parts: a domain specific language DSL for describing DNS zones plus software that processes the DSL and pushes the resulting zones to DNS providers such as Route53, CloudFlare, and Gandi. It can talk to Microsoft ActiveDirectory and it...

Ubuntu 14.04 LTS / 16.04 LTS : GStreamer Base Plugins vulnerabilities (USN-3244-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3244-1 advisory. Hanno Bck discovered that GStreamer Base Plugins did not correctly handle certain malformed media files. If a user were tricked into opening ...

Debian DSA-3819-1 : gst-plugins-base1.0 - security update

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-3818-1 : gst-plugins-bad1.0 - security update

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...