java-1.7.0-openjdk security and bug fix update

1:1.7.0.161-2.6.12.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.161-2.6.12.0 - Remove superfluous %1 from policy JAR file path. - Resolves: rhbz1499207 1:1.7.0.161-2.6.12.0 - Update location of policy JAR files following 8157561. - Resolves: rhbz1499207 1:1.7.0.161-2.6.12.0 - Bump to 2.6.12 and...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

The vulnerability of the inftrees library’s Zlib component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the inftrees.c component of the zlib library arises due to a calculation error related to pointers. Exploiting this vulnerability may allow an attacker, operating remotely, to cause unpredictable behavior in the program, which could lead to breaches of confidentiality,...

The vulnerability of the inflateMark function in the zlib library, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inflateMark function in the zlib library is caused by an error in handling negative numbers. Exploiting this vulnerability could allow a remote attacker to cause unpredictable behavior in the program, which may lead to violations of confidentiality, integrity, and...

Fedora 25 : 1:nodejs (2017-c582c1e728)

2017-10-24, Version 6.11.5 'Boron' LTS, @MylesBorins This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/oct-2017-dos/ for details on patched vulnerabilities. Notable Changes - zlib : - CVE-2017-14919 - In zlib...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

ALPINE-CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

Code injection

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

UBUNTU-CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919

CVE-2017-14919 : Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 permit a denial of service via the zlib windowBits parameter set to 8, triggering an uncaught exception and crash. The vulnerability arises from an invalid windowBits value being accepted by the zlib module, leading to...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

CVE-2017-14919

Node.js before 4.8.5, 6.x before 6.11.5, and 8.x before 8.8.0 allows remote attackers to cause a denial of service uncaught exception and crash by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter...

Denial Of Service (DoS)

node is vulnerable to denial of service DoS attacks. These attacks are possible due to a change in the zlib module. The change causes node to throw an error when the an invalid value of 8 is given for windowBits...

RHEL 7 : java-1.6.0-sun (RHSA-2017:3047)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3047 advisory. Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update upgrades...

zlib: Out-of-bounds pointer arithmetic in inffast.c

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...

zlib: Big-endian out-of-bounds pointer

The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...

zlib: Out-of-bound pointer arithmetic in inftrees.c

A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior...