harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4535496598355968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

[SECURITY] [DSA 3793-2] shadow regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3793-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 17, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3793-2] shadow regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3793-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 17, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3853-1 (bitlbee - security update)

It was discovered that bitlbee, an IRC to other chat networks gateway, contained issues that allowed a remote attacker to cause a denial of service via application crash, or potentially execute arbitrary commands. OpenVAS Vulnerability Test $Id: deb3853.nasl 6607 2017-07-07 12:04:25Z cfischer $...

Debian DSA-3850-1 : rtmpdump - security update

Dave McDaniel discovered multiple vulnerabilities in rtmpdump, a small dumper/library for RTMP media streams, which may result in denial of service or the execution of arbitrary code if a malformed stream is dumped. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Fedora 25 : kernel (2017-b9b1ac0d15)

The 4.10.14 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] [DSA 3844-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3844-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 03, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3842-1 (tomcat7 - security update)

Two vulnerabilities were discovered in tomcat7, a servlet and JSP engine. CVE-2017-5647 Pipelined requests were processed incorrectly, which could result in some responses appearing to be sent for the wrong request. CVE-2017-5648 Some application listeners calls were issued against the wrong...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-05) - Mac OS X

Google Chrome is prone to race condition vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Debian: Security Advisory (DSA-3839-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Web Browser Address Bar Spoofing Vulnerability

Opera Mini and Opera Stable are both web browsers developed by the Norwegian company Opera Software. An address bar spoofing vulnerability exists in Opera Mini version 13 and Opera Stable version 36. A remote attacker can exploit this vulnerability to spoof the displayed URL with a specially...

[SECURITY] [DSA 3834-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3834-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3834-1 (mysql-5.5 - security update)

Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.55, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible changes. Please see th...

[SECURITY] [DSA 3833-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3833-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 24, 2017 https://www.debian.org/security/faq -...

Chrome Universal XSS via ContainerNode::parserInsertBefore (CVE-2015-6755)

VULNERABILITY DETAILS From /WebKit/Source/core/dom/ContainerNode.cpp: void ContainerNode::parserInsertBeforePassRefPtrWillBeRawPtr newChild, Node& nextChild ... while RefPtrWillBeRawPtr parent = newChild-parentNode parent-parserRemoveChildnewChild; if document != newChild-document document...

CVE-2016-4075

Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...

CVE-2016-4075

Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...

CVE-2016-4075

CVE-2016-4075 affects Opera Mini 13 and Opera Stable 36, allowing remote attackers to spoof the displayed URL via a crafted HTML document related to about:blank. Connected sources confirm this address-bar spoofing vulnerability in Opera products and note remote exploitation through specially craf...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-04) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...