Virtuozzo Linux Errata and Enhancement Advisory 2017:1310

Upstream security update. Follow RHEA-2017-1310 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1301

Upstream security update. Follow RHBA-2017-1301 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1302

Upstream security update. Follow RHBA-2017-1302 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1315

Upstream security update. Follow RHBA-2017-1315 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1317

Upstream security update. Follow RHBA-2017-1317 for details...

Virtuozzo Linux Errata and Enhancement Advisory 2017:1307

Upstream security update. Follow RHEA-2017-1307 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1320

Upstream security update. Follow RHBA-2017-1320 for details...

Virtuozzo Linux Errata and Security Advisory 2017:1271 Important

Upstream security update. Follow RHSA-2017-1271 for details...

gdal: Index-out-of-bounds in DGNProcessElement

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5673081030836224 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Virtuozzo Linux Errata and Security Advisory 2017:1264 Important

Upstream security update. Follow RHSA-2017-1264 for details...

Virtuozzo Linux Errata and Security Advisory 2017:1262 Important

Upstream security update. Follow RHSA-2017-1262 for details...

Virtuozzo Linux Errata and Security Advisory 2017:1265 Moderate

Upstream security update. Follow RHSA-2017-1265 for details...

CVE-2017-9119

The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and application crash or possibly have unspecified other impact by triggering crafted operations on array data structures...

CVE-2017-9113

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...

adns -- multiple vulnerabilities

Ian Jackson and the adns project reports: Vulnerable applications: all adns callers. Exploitable by: the local recursive resolver. Likely worst case: Remote code execution. Vulnerable applications: those that make SOA queries. Exploitable by: upstream DNS data sources. Likely worst case: DoS cras...

jasper security update

CentOS Errata and Security Advisory CESA-2017:1208 An update for jasper is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

Virtuozzo Linux Errata and Security Advisory 2017:1230 Important

Upstream security update. Follow RHSA-2017-1230 for details...

gdal: Heap-buffer-overflow in PackBitsDecode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5296144668164096 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal: Index-out-of-bounds in start_pass_huff_decoder

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6249814238953472 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

CVE-2017-8906

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...