103 matches found
flatpak security update
1.0.2-5 - Fix IOCSTI sandbox bypass 1700651...
Gitlab -- Arbitrary repo read in Gitlab project import
Gitlab reports: Arbitrary repo read in Gitlab project import...
Important Photon OS Security Update - PHSA-2018-0119
Updates of 'nettle' packages of Photon OS have been released...
Updated graphicsmagick packages fix security vulnerabilities
GraphicsMagick 1.3.28 updated with fixes for several security issues...
apr security update
1.3.9-5.1 - Resolves: 1507346 - CVE-2017-12613 apr: Out-of-bounds array deref in aprtimeexp functions...
CVE-2017-16808
tcpdump before 4.9.3 has a heap-based buffer over-read related to aoeprint in print-aoe.c and lookupemem in addrtoname.c...
dnsmasq: Multiple Critical and Important vulnerabilities
No description provided...
CVE-2017-14617
In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...
log4j security update
0:1.2.17-16 - Fix socket receiver deserialization vulnerability - Resolves: CVE-2017-5645...
file-roller -- path traversal vulnerability
reports: File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...
Security fix for the ALT Linux 7 package samba-DC version 4.4.5-alt1
July 8, 2016 Evgeny Sinelnikov 4.4.5-alt1 - Update for security release with CVE-2016-2119...
binutils security, bug fix, and enhancement update
2.23.52.0.1-55 - Add missing delta to patch that fixes parsing corrupted archives. 1162666 2.23.52.0.1-54 - Import patch for PR 18270: Create AArch64 GOT entries for local symbols. 1238783 2.23.52.0.1-51 - Fix incorrectly generated binaries and DSOs on PPC platforms. 1247126 2.23.52.0.1-50 - Fix...
zenphoto -- multiple vulnerabilities
zenphoto reports: Fixes several SQL Injection, XSS and path traversal security issues...
udisks security update
1.0.1-7.el65 - Make sure doc subpackage is noarch 1.0.1-6.el65 - Put devel-docs in a separate package related: rhbz1070145 . 1.0.1-5.el65 - Related: rhbz1070145...
update for cgit (important)
Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments...
flash-player (important)
flash-player 11.1.102.63 fixes two security issues: - memory corruption vulnerability in Matrix3D could lead to code executionn CVE-2012-0768 - integer errors that could lead to information disclosure CVE-2012-0769...
samba security update
3.5.4-68.1 - Security Release, fixes CVE-2010-3069 - resolves: 632264...
redmine -- multiple vulnerabilities
Eric Davis reports: This security release addresses some security vulnerabilities found in the advanced subversion integration module Redmine.pm perl script...