dhclient, dhcp security update

CentOS Errata and Security Advisory CESA-2019:2060 An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

blktrace security update

CentOS Errata and Security Advisory CESA-2019:2162 An update for blktrace is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : sssd (CESA-2019:2177)

An update for sssd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

matio:matio_fuzzer: Use-of-uninitialized-value in psnip_safe_size_mul

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5701145254690816 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

[ASA-201908-17] libnghttp2: denial of service

Arch Linux Security Advisory ASA-201908-17 ========================================== Severity: Medium Date : 2019-08-27 CVE-ID : CVE-2019-9511 CVE-2019-9513 Package : libnghttp2 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1024 Summary ======= The package...

file:magic_fuzzer: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5687868487368704 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasani386file Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xef4dd848 Cras...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_weave_blk

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5663742011899904 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

zstd:simple_decompress: Crash in ZSTD_decodeLiteralsBlock

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5755077486182400 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simpledecompress Job Type: libfuzzerubsanzstd Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ffcdeddc000 Crash...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5140635270512640 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

Virtuozzo Linux Errata and Security Advisory 2019:2471 Moderate

Upstream security update. Follow RHSA-2019:2471 for details...

mysql:8.0 security update

An update is available for mecab-ipadic, mecab. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server. It...

zstd:simple_decompress: Stack-buffer-overflow in ZSTD_decodeLiteralsBlock

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5640730759921664 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simpledecompress Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

opensc security, bug fix, and enhancement update

0.19.0-3 - Make OpenSC multilib also on s390 and ppc arches 0.19.0-2 - Make OpenSC multilib again by moving the conflicting files on ix86 arch 0.19.0-1 - Rebase to new upstream release 1656791 - Add Support for HID Crescendo 144K 1612372 - Add Support for CAC Alt tokens 1645581 - Fix usage...

RHEL 7 : samba (RHSA-2019:1966)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1966 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...

Fedora 30 : openqa / os-autoinst (2019-c404576415)

This update provides recent git snapshots of os-autoinst and openQA, with the usual slate of bug fixes and changes from upstream. Also, the AMQP plugin is now enabled, as the dependencies have been packaged into Fedora. The update also addresses some potential security issues. Note that Tenable...

Fedora 29 : icedtea-web (2019-efb92eed7a)

fixed CVEs 2019-10181, 2019-10182, 2019-10185 ---- Updated to fres upstream release : https://mail.openjdk.java.net/pipermail/distro-pkg-dev/2019-March/0413 20.html New in release 1.8 2019-03-12 : - added support for javafx-desc and so allwong run of pure-javafx only applications - --nosecurity...

aspell:aspell_fuzzer: Crash in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5673813550825472 Project: aspell Fuzzing engine: libFuzzer Fuzz target: aspellfuzzer Job Type: libfuzzerubsanaspell Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001cbb000 Crash...

Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Moderate: Red Hat Security Advisory: mariadb security and bug fix update

An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: sssd security, bug fix, and enhancement update

An update for sssd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...