GLSA-202107-20 : Redis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-20 Redis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202104-08 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202104-08 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

GLSA-202101-20 : glibc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-20 glibc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202011-15 : libmaxminddb: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-15 libmaxminddb: Denial of service libmaxminddb used uninitialised memory when reading from a corrupt database file. Impact : A remote attacker could entice a user to use a specially crafted database with libmaxminddb,...

GLSA-202008-13 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-13 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202006-18 : Bubblewrap: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202006-18 Bubblewrap: Arbitrary code execution Bubblewrap misuses temporary directories in /tmp as a mount point. Impact : This flaw may allow possible execution of code or prevention of running Bubblewrap. Workaround : There is n...

GLSA-202003-60 : QtCore: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-60 QtCore: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QtCore. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly execute arbitrary code with th...

GLSA-202003-18 : libvirt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-18 libvirt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact : A local privileged attacker could execute arbitrary...

GLSA-201908-08 : CUPS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-08 CUPS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in CUPS. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-201908-02 : libpng: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-02 libpng: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libpng. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing a user to process a...

GLSA-201904-10 : Mailman: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-10 Mailman: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mailman. Please review the referenced CVE identifier for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-201903-05 : Tar: Denial of service

The remote host is affected by the vulnerability described in GLSA-201903-05 Tar: Denial of service The sparsedumpregion function in sparse.c file in Tar allows an infinite loop using the --sparse option. Impact : A local attacker could cause a Denial of Service condition by modifying a file that...

GLSA-201806-01 : GNU Wget: Cookie injection

The remote host is affected by the vulnerability described in GLSA-201806-01 GNU Wget: Cookie injection A vulnerability was discovered in GNU Wgets respnew function which does not validate \r\n sequences in continuation lines. Impact : A remote attacker could inject arbitrary cookie entry request...

GLSA-201701-47 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-47 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers and bug reports referenced for details. Impact : Remote attackers could conduct a Man-in-the-Middle...

GLSA-201606-11 : claws-mail: Multiple Vulnerabilities (POODLE)

The remote host is affected by the vulnerability described in GLSA-201606-11 claws-mail: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in claws-mail. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly intercept communicatio...

GLSA-201606-05 : spice: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-05 spice: Multiple vulnerabilities Multiple vulnerabilities have been discovered in spice, please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...

samba security update

0:3.6.23-24.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-24 - related: 1290706 - Update patch for CVE-2015-5330 3.6.23-22 - resolves: 1290706 - CVE-2015-5299 - related: 1290706 - CVE-2015-5296 - related: 1290706 - CVE-2015-5252 - related: 129070...

bash security update

4.2.45-5.4 - CVE-2014-7169 Resolves: 1146324 4.2.45-5.3 - amend patch to match upstream's Related: 1146324 4.2.45-5.2 - Fix-up the patch Related: 1141647...

GLSA-201406-29 : spice-gtk: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-29 spice-gtk: Privilege escalation spice-gtk does not properly sanitize the DBUSSYSTEMBUSADDRESS environment variable. Impact : A local attacker may be able to gain escalated privileges. Workaround : There is no known...

GLSA-201404-04 : Crack: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201404-04 Crack: Arbitrary code execution An XML parameter parsing vulnerability has been discovered in Crack. Impact : A remote attacker could execute arbitrary code with the privileges of the process, cause a Denial of Service...