Virtuozzo Linux Errata and Bugfix Advisory 2017:0302

Upstream security update. Follow RHBA-2017-0302 for details...

Virtuozzo Linux Errata and Security Advisory 2017:0293 Important

Upstream security update. Follow RHSA-2017-0293 for details...

Virtuozzo Linux Errata and Security Advisory 2017:0294 Important

Upstream security update. Follow RHSA-2017-0294 for details...

grpc: Crash in gpr_free

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5637166455586816 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000002717 Crash...

Virtuozzo Linux Errata and Security Advisory 2017:0286 Moderate

Upstream security update. Follow RHSA-2017-0286 for details...

CVE-2014-9905

Multiple cross-site scripting XSS vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title of an appointment or 2 contact fields...

nss: Bad-cast to const std::__1::__less<unsigned long, unsigned long> *_GLOBAL__sub_I_quickder_target.cc;_start

Project: https://hg.mozilla.org/projects/nss Detailed report: https://oss-fuzz.com/testcase?key=4585070186725376 Project: nss Fuzzer: libFuzzernssquickder Fuzz target binary: quickder Job Type: libfuzzerubsannss Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe7319e0e8 Crash State:...

CVE-2016-8866

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

Fedora 24 : spice (2017-05793780f0)

Add upstream patches fixing CVE-2016-9577 and CVE-2016-9578 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Virtuozzo Linux Errata and Security Advisory 2017:0276 Moderate

Upstream security update. Follow RHSA-2017-0276 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0274

Upstream security update. Follow RHBA-2017-0274 for details...

libarchive: Heap-buffer-overflow in read_header

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6650271522357248 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libplist: Heap-buffer-overflow in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6605859144597504 Project: libplist Fuzzer: libFuzzerlibplistbplistfuzzer Fuzz target binary: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type:...

Virtuozzo Linux Errata and Security Advisory 2017:0252 Moderate

Upstream security update. Follow RHSA-2017-0252 for details...

Virtuozzo Linux Errata and Security Advisory 2017:0254 Moderate

Upstream security update. Follow RHSA-2017-0254 for details...

thunderbird security update

CentOS Errata and Security Advisory CESA-2017:0238 An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

libtiff security update

CentOS Errata and Security Advisory CESA-2017:0225 An update for libtiff is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

Debian DLA-805-1 : bind9 security update

Several denial of service vulnerabilities assertion failures were discovered in BIND, a DNS server implementation. CVE-2016-9131 A crafted upstream response to an ANY query could cause an assertion failure. CVE-2016-9147 A crafted upstream response with self-contradicting DNSSEC data could cause ...

libreoffice: Heap-buffer-overflow in MakePreview

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5385827211280384 Project: libreoffice Fuzzer: libFuzzerlibreofficeepsfuzzer Fuzz target binary: epsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

firefox security update

CentOS Errata and Security Advisory CESA-2017:0190 An update for firefox is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability...