CVE-2019-19956

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-oldNs...

openslp security update

CentOS Errata and Security Advisory CESA-2019:4240 An update for openslp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

EulerOS 2.0 SP5 : NetworkManager (EulerOS-SA-2019-2698)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure CWE-200 vulnerability in DNS resolver that can result in...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in pgp_parse_algo_attr_blob

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6329203163398144 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...

Fedora 30 : nss (2019-8fbc65ef9e)

Fix intermittent SECERRORUNKNOWNISSUER 1752303, 1648617 ---- Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes -...

Virtuozzo Linux Errata and Enhancement Advisory 2019:4155

Upstream security update. Follow RHEA-2019:4155 for details...

Virtuozzo Linux Errata and Security Advisory 2019:4024 Important

Upstream security update. Follow RHSA-2019:4024 for details...

openSUSE Security Update : calamares (openSUSE-2019-2628)

This update for calamares fixes the following issues : - Launch with 'pkexec calamares' in openSUSE Tumbleweed, but launch with 'xdg-su -c calamares' in openSUSE Leap 15. Update to Calamares 3.2.15 : - 'displaymanager' module now treats 'sysconfig' as a regular entry in the 'displaymanagers' list...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3972

Upstream security update. Follow RHBA-2019:3972 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3977

Upstream security update. Follow RHBA-2019:3977 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3971

Upstream security update. Follow RHBA-2019:3971 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2019:3982

Upstream security update. Follow RHBA-2019:3982 for details...

Virtuozzo Linux Errata and Security Advisory 2019:3976 Low

Upstream security update. Follow RHSA-2019:3976 for details...

Virtuozzo Linux Errata and Security Advisory 2019:3888 Important

Upstream security update. Follow RHSA-2019:3888 for details...

Virtuozzo Linux Errata and Security Advisory 2019:3981 Important

Upstream security update. Follow RHSA-2019:3981 for details...

Fedora 31 : nss (2019-3f6ab3b846)

Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.47.1releasenotes Note that Tenable Network Security has extracted...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

UBUNTU-CVE-2019-18678

An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches between a client and Squid with attacker-controlle...