CVE-2016-6797

The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was...

USN-3114-2: nginx regression

USN-3114-1 fixed a vulnerability in nginx. A packaging issue prevented nginx from being reinstalled or upgraded to a subsequent release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Dawid Golunski discovered that the nginx package incorrectly handl...

Debian DLA-685-2 : libxi regression update

A regression was found in the previous libxi update. An uninitialized pointer could be freed, causing crashes. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.6.1-1+deb7u3. We recommend that you upgrade your libxi packages. NOTE: Tenable Network Security has extracted the...

pcre2: Heap-buffer-overflow in first_significant_code

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5503331300540416 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002bf1 Crash State:...

Debian DLA-674-2 : ghostscript regression update

The update for ghostscript issued as DLA-674-1 caused regressions for certain Postscript document viewers evince, zathura. Updated packages are now available to address this problem. For reference, the original advisory text follows. Several vulnerabilities were discovered in Ghostscript, the GPL...

libchewing: Heap-buffer-overflow in _Inner_InternalSpecialSymbol

Project: https://github.com/chewing/libchewing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4509892513628160 Fuzzer: libFuzzerchewingrandominitfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Debian DSA-3696-1 : linux - security update (Dirty COW)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2015-8956 It was discovered that missing input sanitising in RFCOMM Bluetooth socket handling may result in denial of service or information leak...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3696-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2015-8956 It was discovered that missing input sanitising in RFCOMM Bluetooth socket handling may result in denial of service or information leak...

DSA-3696-1 linux - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3696-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap-buffer-overflow in find_minlength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4881488118022144 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002c33 Crash State:...

Global-buffer-overflow in parse_regex

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5849123378954240 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000828bdd Crash State:...

Heap-buffer-overflow in tt_face_vary_cvt

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6269022198824960 Fuzzer: libFuzzerfreetype2fuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

FreeBSD-SA-16:27.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:27.openssl Security Advisory The FreeBSD Project Topic: Regression in OpenSSL suite Category: contrib Module: openssl Announced: 2016-10-10 Credits: OpenSSL...

Ubuntu 14.04 LTS : Pillow regresssion (USN-3090-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3090-2 advisory. USN-3090-1 fixed vulnerabilities in Pillow. The patch to fix CVE-2014-9601 caused a regression which resulted in failures when processing certain png images. This...

[SECURITY] [DSA 3681-2] wordpress regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3681-2 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 636-2] firefox-esr regression update

Package : firefox-esr Version : 45.4.0esr-1deb7u2 The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 "Wheezy", these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages...

USN-3090-2 Pillow regression

USN-3090-1 fixed vulnerabilities in Pillow. The patch to fix CVE-2014-9601 caused a regression which resulted in failures when processing certain png images. This update temporarily reverts the security fix for CVE-2014-9601 pending further investigation. We apologize for the inconvenience...