Updated proftpd packages fix security vulnerability

Fixes memory disclosure to RADIUS servers by modradius. Ftp clients like filezilla fail to detect locale with in log : "Status: Server does not support non-ASCII characters." This comes from proftpd MultilineRFC2228 directive enabled by default. Without this directive Filezilla is able to enable...

Freeze Bridge via Non-UTF8 Token Name/Symbol/Denom

Handle nascent Vulnerability details Manual insertion of non-utf8 characters in a token name will break parsing of logs and will always result in the oracle getting in a loop of failing and early returning an error. The fix is non-trivial and likely requires significant redesign. Proof of Concept...

openSUSE: Security Advisory for xterm (openSUSE-SU-2021:2011-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:2011-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091...

OPENSUSE-SU-2021:0900-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091 This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for xterm (important)

openSUSE Security Update: Security update for xterm Announcement ID: openSUSE-SU-2021:0900-1 Rating: important References: 1182091 Cross-References: CVE-2021-27135 CVSS scores: CVE-2021-27135 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-27135 SUSE: 7.5...

SUSE-SU-2021:2014-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091...

SUSE-SU-2021:2013-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091...

SUSE-SU-2021:2011-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091...

SUSE-SU-2021:14747-1 Security update for xterm

This update for xterm fixes the following issues: - CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. bsc1182091...

CVE-2020-23321

There is a heap-buffer-overflow at lit-strings.c:431 in litreadcodeunitfromutf8 in JerryScript 2.2.0...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in litreadcodeunitfromutf8 in lit-strings.c:431 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

Security update for irssi (moderate)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2021:0595-1 Rating: moderate References: 1184848 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for irssi fixes the following...

Malleable Ciphertext

tink has a ciphertext malleability issue. The vulnerability exists due to storing of the ciphertext prefix in a hashmap keyed by a UTF8 encoded string instead of using byte arrays, allowing the retrieval of keys with IDs of invalid Unicode strings with a changed ID...

The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

SUSE SLES12 Security Update : perl (SUSE-SU-2020:1662-1)

This update for perl fixes the following issues : CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...

SUSE-SU-2020:1662-1 Security update for perl

This update for perl fixes the following issues: - CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have allowed overwriting of allocated memory with attacker's data bsc1171863. - CVE-2020-10878: Fixed multiple integer overflows which could have allowed the...

Joyent Node.js Buffer Overflow Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

OPENSUSE-SU-2020:0628-1 Security update for sqliteodbc

This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability boo1171041. Non-security issues fixed: - Update to version 0.9996 update to SQLite 3.22.0 fixes in handling DDL in SQLExecDirect et.al., thanks Andre Mikulec f...

OPENSUSE-SU-2020:0612-1 Security update for sqliteodbc

This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability boo1171041. Non-security issues fixed: - Update to version 0.9996 update to SQLite 3.22.0 fixes in handling DDL in SQLExecDirect et.al., thanks Andre Mikulec f...