Fedora 28 : webkit2gtk3 (2018-e2e8a07a01)

This is a bug fix release in the stable 2.22 series. - CVE-2018-4437 -- Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. - Improved the logic to determine for which architectures to...

Fedora 28 : mozilla-privacy-badger (2018-bb965553f9)

Fixed security issues with HTML5 local storage tracking detection as well as SoundCloud widget replacement. Thanks again to Cure53 for discovering and reporting these vulnerabilities. - Improved Facebook link unwrapping; now enabled on the Facebook Onion domain - Improved translations Italian,...

SUSE SLED15 / SLES15 Security Update : zsh (SUSE-SU-2018:1874-1)

This update for zsh to version 5.5 fixes the following issues: Security issues fixed : - CVE-2018-1100: Fixes a buffer overflow in utils.c:checkmailpath that can lead to local arbitrary code execution bsc1089030 - CVE-2018-1071: Fixed a stack-based buffer overflow in exec.c:hashcmd bsc1084656 -...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2018:2752-1)

This update for webkit2gtk3 to version 2.20.5 fixes the following issues : Security issue fixed : CVE-2018-12911: Fix off-by-one in xdgmimegetsimpleglobs bsc1101999. CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265, CVE-2018-4267, CVE-2018-4272, CVE-2018-4284: Processing...

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2018:1938-2)

This update for java-180-openjdk to version 8u171 fixes the following issues: These security issues were fixed : - S8180881: Better packaging of deserialization - S8182362: Update CipherOutputStream Usage - S8183032: Upgrade to LittleCMS 2.9 - S8189123: More consistent classloading - S8189969,...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:3753-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 CVE-2018-18016: Fixed a memory...

SUSE SLED15 / SLES15 Security Update : accountsservice (SUSE-SU-2018:3625-1)

This update for accountsservice fixes the following issues : This security issue was fixed : CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed: Don't abort loading users when an...

SUSE-SU-2018:4298-1 Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 2.4.11 bsc1117740. Security issues fixed: - CVE-2018-19625: The Wireshark dissection engine could crash wnpa-sec-2018-51 - CVE-2018-19626: The DCOM dissector could crash wnpa-sec-2018-52 - CVE-2018-19623: The LBMPDM dissect...

Debian DLA-1616-1 : libextractor security update

Two security issues were discovered in libextractor, a library for extracting meta data from files of arbitrary type. An out-of-bounds read in common/convert.c and a NULL pointer Dereference in the OLE2 extractor may lead to a denial of service application crash. For Debian 8 'Jessie', these...

SUSE-SU-2018:4238-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15)

This update for the Linux Kernel 4.12.14-23 fixes several issues. The following security issues were fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. - CVE-2018-5848: Fixed an unsigned intege...

Security update for keepalived (moderate)

This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed bsc1015141: - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...

Security update for keepalived (moderate)

This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed bsc1015141: - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...

SUSE-SU-2018:4195-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12)

This update for the Linux Kernel 3.12.61-52133 fixes several issues. The following security issues were fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. - CVE-2018-5848: Fixed an unsigned...

OPENSUSE-SU-2018:4175-1 Security update for pdns

This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer bsc1114157. - CVE-2018-14626: Fixed packet cache pollution via crafted query bsc1114169. This update was imported from the...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:4142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:4157-1 Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606493 fixes several issues. The following security issues were fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in skclonelock. This could lead to local privilege escalation bsc1118319. - CVE-2018-5848: Fixed an unsigned...

openSUSE Security Update : openvswitch (openSUSE-2018-1562)

This update for openvswitch to version 2.7.6 fixes the following issues : These security issues were fixed : - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:Whe...

FreeBSD : wordpress -- multiple issues (4b98613c-0078-11e9-b05b-00e04c1ea73d)

wordpress developers reports : WordPress versions 5.0 and earlier are affected by the following bugs, which are fixed in version 5.0.1. Updated versions of WordPress 4.9 and older releases are also available, for users who have not yet updated to 5.0. Karim El Ouerghemmi discovered that authors...

Security update for openvswitch (moderate)

This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit bsc1104467. - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding bsc1104467. - CVE-2018-17204:When...

Updated thunderbird packages fix security issues & bugs

- Buffer overflow using computed size of canvas element. CVE-2018-12359 - Use-after-free when using focus. CVE-2018-12360 - Integer overflow in SwizzleData. CVE-2018-12361 - Integer overflow in SSSE3 scaler. CVE-2018-12362 - Media recorder segmentation fault when track type is changed during...