5749 matches found
Pixel Update Bulletin—January 2019Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel devices Google devices. For Google devices, security patch levels of 2019-01-05 or later address all issues in this bulletin and all issues in the January 2019 Andro...
tidy-html5/tidy_fuzzer: Use-of-uninitialized-value in PPrintText
Project: https://github.com/htacg/tidy-html5.git Detailed report: https://oss-fuzz.com/testcase?key=5705060225384448 Project: tidy-html5 Fuzzer: libFuzzertidy-html5tidyfuzzer Fuzz target binary: tidyfuzzer Job Type: libfuzzermsantidy-html5 Platform Id: linux Crash Type: Use-of-uninitialized-value...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in ff_add_median_pred_sse2
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5644026183680000 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...
Fedora 28 : firefox (2018-3f177356b0)
Update to latest stable upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 29 : ghostscript (2018-81ee973d7c)
This is a security update for CVE-2018-16802. It also fixes a printing problem discovered in one of the previous CVE fixes. NOTE: Please, be advised that there's a separate issue related to printing problems, which is connected to CUPS itself, meaning this update might not completely resolve your...
Fedora 28 : nspr / nss / nss-softokn / nss-util (2018-1a7a5c54c2)
Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...
Fedora 28 : lldpad (2018-cec7093baa)
Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...
Fedora 28 : redis (2018-31f5fe58f7)
Upstream 4.0.10 release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 28 : nss (2018-2575edf8d3)
Updates the nss package to upstream NSS 3.40.1. This is a point release after 3.40, with a security fix for CVE-2018-12404. For details about other new functionality and a list of bugs fixed in this release please see the upstream release notes...
Fedora 28 : firefox (2018-c07238c0ff)
New upstream Firefox version 62.0 - More info at https://www.mozilla.org/en-US/firefox/62.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...
Fedora 29 : nspr / nss / nss-softokn / nss-util (2018-c72d2d89ec)
Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...
Fedora 29 : lldpad (2018-06d56c8c9d)
Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...
Fedora 29 : wordpress (2018-25b3204dc8)
See upstream announcements : - WordPress 5.0.2 Maintenance Release - WordPress 5.0.1 Security Release - WordPress 5.0 Bebo Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...
Fedora 29 : pdns-recursor (2018-e14840a7f5)
Fixes CVE-2018-16855 Crafted query can cause a denial of service ---- New upstream release with security fixes for CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
Fedora 28 : glibc (2018-264d881a62)
This updates contains various updates from the upstream glibc 2.27 release branch, including minor fixes for the realpath function and the i386 memmove implementation. Python helper scripts in the glibc-benchtests subpackage now use /usr/bin/python3 as the script interpreter RHBZ1577223. Starting...
Fedora 28 : pcs (2018-bbfb0f5bc9)
Security fix for CVE-2018-1086 and CVE-2018-1079 Rebased to latest upstream sources Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...
Fedora 28 : zsh (2018-a5e9a619f6)
update to latest upstream release, which fixes the following vulnerabilities : - CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath - CVE-2018-1083 - stack-based buffer overflow in compctl.c:genmatchesfiles - CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd Note tha...
CVE-2018-20657
The demangletemplate function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service memory consumption, as demonstrated by cxxfilt, a related issue to CVE-2018-12698...
SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2018:1183-1)
This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...
SUSE SLES12 Security Update : nodejs4, nodejs6 (SUSE-SU-2017:2168-1)
This update for nodejs4 and nodejs6 fixes the following issues: Security issues fixed : - CVE-2017-1000381: The c-ares function aresparsenaptrreply could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. bsc1044946 ...