Lucene search
+L
MageiaMost viewed

6099 matches found

Mageia
Mageia
•added 2021/08/23 5:28 a.m.•47 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.60 and fixes at least the following security issues: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the a...

8.8CVSS6.8AI score0.00658EPSS
SaveExploits1References5
Mageia
Mageia
•added 2021/06/13 9:32 p.m.•47 views

Updated python-lxml packages fix a security vulnerability

An XSS vulnerability was discovered in python-lxml’s clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run...

6.1CVSS3.5AI score0.04002EPSS
SaveExploits1References4
Mageia
Mageia
•added 2021/06/13 9:32 p.m.•47 views

Updated wpa_supplicant, hostapd packages fix security vulnerability

The wpasupplicant and hostapd packages are updated to fix a forging attacks that may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. CVE-2021-30004...

5.3CVSS2.9AI score0.01669EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/06/08 2:33 p.m.•47 views

Updated firefox packages fix a security vulnerability

Updated firefox packages fix a security vulnerability: Mozilla developers Gabriele Svelto, Anny Gakhokidze, Alexandru Michis, Christian Holler reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with...

8.8CVSS2.8AI score0.01368EPSS
SaveExploits0References11
Mageia
Mageia
•added 2021/05/07 5:35 a.m.•47 views

Updated pagure packages fix a security vulnerability

Pagure before 5.6 allows XSS via the templates/blame.html blame view...

6.1CVSS3.2AI score0.00974EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/04/18 6:34 p.m.•47 views

Updated python3 packages fix security vulnerability

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to...

5.7CVSS2AI score0.01878EPSS
SaveExploits0References3
Mageia
Mageia
•added 2020/12/25 9:45 p.m.•47 views

Updated erlang-rebar3 package fixes security vulnerability

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification CVE-2020-13802...

10CVSS4.9AI score0.0675EPSS
SaveExploits3References1
Mageia
Mageia
•added 2020/12/20 2:43 p.m.•47 views

Updated openjpeg2 packages fix security vulnerabilities

A heap-buffer overwrites error was discovered in lib/openjp2/mqc.c in OpenJPEG 2.3.1. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution CVE-2020-27814. A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker ...

7.8CVSS3.6AI score0.02008EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/08/27 3:52 p.m.•47 views

Updated firefox packages fix security vulnerabilities

By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious...

8.8CVSS1.4AI score0.01378EPSS
SaveExploits0References3
Mageia
Mageia
•added 2020/07/30 1:6 p.m.•47 views

Updated podofo packages fix security vulnerability

The updated packages fix security vulnerabilities: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. CVE-2018-12983 An issue was...

9.8CVSS3.2AI score0.02552EPSS
SaveExploits4References6
Mageia
Mageia
•added 2020/06/15 7:54 a.m.•47 views

Updated axel packages fix security vulnerability

Updated axel package fixes security vulnerability: An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification CVE-2020-13614. The axel package has been updated to version 2.17.8, fixing this issue and other bugs...

5.9CVSS3AI score0.01928EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/04/01 1:56 a.m.•47 views

Updated chromium-browser-stable packages fix security vulnerability

Multiple flaws were found in the way Chromium 80.0.3987.122 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. CVE-2020-6420, CVE-2020-6422, CVE-2020-6424,...

8.8CVSS1.9AI score0.03498EPSS
SaveExploits7References3
Mageia
Mageia
•added 2020/04/01 1:56 a.m.•47 views

Updated nghttp2 packages fix security vulnerability

Malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure CVE-2019-18802...

9.8CVSS9AI score0.02457EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/02/09 7:13 p.m.•47 views

Updated xmlrpc packages fix security vulnerability

A flaw was discovered where the XMLRPC client implementation in Apache XMLRPC, performed deserialization of the server-side exception serialized in the faultCause attribute of XMLRPC error response messages. A malicious or compromised XMLRPC server could possibly use this flaw to execute arbitrar...

9.8CVSS3.4AI score0.49285EPSS
SaveExploits2References2
Mageia
Mageia
•added 2020/01/22 10:37 a.m.•47 views

Updated ffmpeg packages fix security vulnerabilities

Updated ffmpeg packages fix security vulnerabilities: This update provides ffmpeg version 4.1.5, which fixes several bugs, and atleasst the follwing security vulnerabilities: In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other...

9.8CVSS3.9AI score0.02305EPSS
SaveExploits0References4
Mageia
Mageia
•added 2019/12/19 1:44 p.m.•47 views

Updated pacemaker packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs. CVE-2019-3885 A flaw was found in the way pacemaker's client-server authenticatio...

8.8CVSS2.8AI score0.01962EPSS
SaveExploits0References6
Mageia
Mageia
•added 2019/12/19 1:44 p.m.•47 views

Updated fence-agents packages fix security vulnerability

pdated fence-agents package fixes security vulnerability: Denial of service via guest VM comments CVE-2019-10153...

5CVSS3.4AI score0.02171EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/11/19 9:16 p.m.•47 views

Updated systemd packages fix security vulnerability

Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access controls on its D-Bus interface and allows unprivileged users to execute methods that are meant to be available only to privileged users...

4.4CVSS2.9AI score0.00511EPSS
SaveExploits1References3
Mageia
Mageia
•added 2019/10/16 10:22 p.m.•47 views

Updated sudo packages fix security vulnerability

The updated packages fix a security vulnerability: Potential bypass of Runas user restrictions. CVE-2019-14287...

9CVSS2.9AI score0.63764EPSS
SaveExploits11References3
Mageia
Mageia
•added 2019/09/21 11:7 a.m.•47 views

Updated ibus packages fix security vulnerability

It was discovered that any unprivileged user could monitor and send method calls to the ibus bus of another user, due to a misconfiguration during the setup of the DBus server. When ibus is in use, a local attacker, who discovers the UNIX socket used by another user connected on a graphical...

7.1CVSS2.8AI score0.00365EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/09/06 9:9 p.m.•47 views

Updated SDL12 packages fix security vulnerability

Updated SDL12 packages fix security vulnerability: SDL Simple DirectMedia Layer through 1.2.15 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit in video/SDLblit.c CVE-2019-13616...

8.1CVSS3AI score0.03299EPSS
SaveExploits1References2
Mageia
Mageia
•added 2019/07/10 10:44 a.m.•47 views

Updated dosbox package fixes security vulnerabilities

Dosbox 0.74-3 is a security release: Fixed that a very long line inside a bat file would overflow the parsing buffer. CVE-2019-7165 by Alexandre Bartel Added a basic permission system so that a program running inside DOSBox can't access the contents of /proc e.g. /proc/self/mem when / or /proc we...

9.8CVSS2.7AI score0.06685EPSS
SaveExploits1References1
Mageia
Mageia
•added 2019/06/10 7:17 p.m.•47 views

Updated imagemagick packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Fixed a heap-based buffer overflow in ReadMNGImage. CVE-2019-11007 Fixed a heap-based buffer overflow in WriteXWDImage. CVE-2019-11008, CVE-2019-11009...

8.8CVSS3.6AI score0.0377EPSS
SaveExploits2References6
Mageia
Mageia
•added 2019/03/14 9:39 p.m.•47 views

Updated rsyslog packages fix security vulnerability

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash CVE-2018-16881...

7.5CVSS4.2AI score0.02238EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/03/07 4:34 p.m.•47 views

Updated nagios packages fix security vulnerability

A flaw was found in Nagios Core version 4.4.1 and earlier. The qhhelp function is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket CVE-2018-13441. A flaw was found in...

5.5CVSS2.7AI score0.0451EPSS
SaveExploits8References2
Mageia
Mageia
•added 2019/02/22 1:8 a.m.•47 views

Updated spice-gtk packages fix security vulnerability

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are...

10CVSS3.8AI score0.05349EPSS
SaveExploits0References6
Mageia
Mageia
•added 2019/02/20 8:56 p.m.•47 views

Updated poppler packages fix security vulnerability

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo. CVE-2018-18897 XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of...

7.8CVSS5.3AI score0.03422EPSS
SaveExploits4References6
Mageia
Mageia
•added 2019/01/20 12:2 a.m.•47 views

Updated libssh packages fix security vulnerability

libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the server would expect to initiate authentication, the attacker could successfully...

9.1CVSS5AI score0.91789EPSS
SaveExploits13References4
Mageia
Mageia
•added 2018/12/15 9:29 p.m.•47 views

Updated nss packages fix security vulnerability

Cache side-channel variant of the Bleichenbacher attack.CVE-2018-12404...

5.9CVSS2.7AI score0.44398EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/10/30 6:1 p.m.•47 views

Updated curl packages fix security vulnerabilities

Updated curl packages fix security vulnerabilities: Peter Wu discovered that curl incorrectly handled certain SMTP buffers. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2018-0500. Zhaoyang Wu discovered tha...

10CVSS10.5AI score0.11823EPSS
SaveExploits1References12
Mageia
Mageia
•added 2018/10/30 6:1 p.m.•47 views

Updated spamassassin packages fix security vulnerabilities

Updated spamassassin package fixes security vulnerabilities: A reliance on "." in @INC in one configuration script CVE-2016-1238. A denial of service vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts CVE-2017-15705. A...

9.8CVSS1.4AI score0.1082EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/09/13 8:38 p.m.•47 views

Updated ntp packages fix security vulnerability

Updated ntp packages fix security vulnerability: Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter CVE-2018-12327...

9.8CVSS5.8AI score0.29037EPSS
SaveExploits5References2
Mageia
Mageia
•added 2018/09/07 10:15 a.m.•47 views

Updated libxkbcommon packages fix security vulnerabilities

Updated libxkbcommon packages fix security vulnerabilities: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation CVE-2018-15853...

7.8CVSS1.8AI score0.00539EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/08/12 8:39 p.m.•47 views

Updated libsndfile packages fix security vulnerabilities

Updated libsndfile package fixes security vulnerabilities: The function d2alawarray in alaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17456. The function d2ulawarray in ulaw.c of libsndfile 1.0.29pre1 may lead to a remote DoS attack CVE-2017-17457. A stack-based buffer...

8.8CVSS5.2AI score0.03574EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/06/14 6:14 p.m.•47 views

Updated patch packages fix security vulnerabilities

Updated patch package fixes security vulnerabilities: It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this to cause a denial of service CVE-2016-10713. It was discovered that Patch incorrectly handled certain inputs. An attacker could possibly use th...

7.8CVSS2.8AI score0.08427EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/06/04 3:11 p.m.•47 views

Updated python3 packages fix security vulnerabilities

Updated python3 packages fix security vulnerabilities: A flaw was found in the way catastrophic backtracking was implemented in Python's pop3lib's apop method. An attacker could use this flaw to cause denial of service CVE-2018-1060. A flaw was found in the way catastrophic backtracking was...

7.5CVSS3AI score0.05287EPSS
SaveExploits1References4
Mageia
Mageia
•added 2018/02/24 11:25 p.m.•47 views

Updated postgresql packages fix security vulnerability

In postgresql 9.4.x before 9.4.16 and 9.6.x before 9.6.7, pgupgrade creates file in current working directory containing the output of pgdumpall -g under umask which was in effect when the user invoked pgupgrade, and not under 0077 which is normally used for other temporary files. This can allow ...

7CVSS6.9AI score0.00482EPSS
SaveExploits0References4
Mageia
Mageia
•added 2018/01/03 6:52 p.m.•47 views

Updated systemd packages fix security vulnerability

Updated systemd packages fix security vulnerability: Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchez independently discovered that systemd-resolved incorrectly handled certain DNS responses. A remote attacker could possibly use this issue to cause systemd to temporarily stop...

7.5CVSS1.2AI score0.23633EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/12/07 8:54 p.m.•47 views

Updated wireshark packages fix security vulnerability

The wireshark package has been updated to version 2.2.11, which fixes a few security issues where a malformed packet trace could cause it to crash, and fixes several other bugs as well. See the release notes for details...

7.5CVSS3.6AI score0.16786EPSS
SaveExploits2References6
Mageia
Mageia
•added 2017/12/01 11:13 p.m.•47 views

Updated perl-Catalyst-Plugin-Static-Simple package fixes security vulnerability

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character CVE-2017-16248...

7.5CVSS6.2AI score0.02434EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/11/19 10:23 a.m.•47 views

Updated libextractor packages fix security vulnerabilities

In 'EXTRACTORwavextractmethod' function of wavextractor.c, the program does not check the value of samplerate, with a crafted file, the samplerate can be set to zero, resulting in a divide by zero and a crash CVE-2017-15266. NULL Pointer Dereference vulnerability in libextract when getting flac...

7.5CVSS6.7AI score0.02613EPSS
SaveExploits2References3
Mageia
Mageia
•added 2017/11/19 10:23 a.m.•47 views

Updated apr packages fix security vulnerability

An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a denial of service or potentially lead to data leak CVE-2017-12613...

7.1CVSS3.2AI score0.01749EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/11/19 10:23 a.m.•47 views

Updated jq packages fix security vulnerabilities

A heap-based buffer overflow flaw was found in jq's tokenadd function. By tricking a victim into processing a specially crafted JSON file, an attacker could use this flaw to crash jq or, potentially, execute arbitrary code on the victim's system CVE-2015-8863. Stack exhaustion could affect...

10CVSS9.2AI score0.07495EPSS
SaveExploits1References2
Mageia
Mageia
•added 2017/10/30 7:23 p.m.•47 views

Updated opensc_etc packages fix security vulnerability

A vulnerability, dubbed ROCA, was identified in an implementation of RSA key generation due to a fault in a code library developed by Infineon Technologies. The affected encryption keys are used to secure many forms of technology, such as hardware chips, authentication tokens, software packages,...

5.9CVSS1.3AI score0.09825EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/10/09 9:51 a.m.•47 views

Updated x11-server packages fix security vulnerabilities

In Xext/shm, the shmseg resource id can belong to a non-existing client and abort X server with FatalError "client not in use", or overwrite existing segment of another existing client CVE-2017-13721. Generating strings for XKB data used a single shared static buffer, which offered several...

7.8CVSS2AI score0.00443EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/09/21 1:43 p.m.•47 views

Updated bluez packages fix security vulnerability

An information-disclosure flaw was found in the bluetoothd implementation of the Service Discovery Protocol SDP. A specially crafted Bluetooth device could, without prior pairing or user interaction, retrieve portions of the bluetoothd process memory, including potentially sensitive information...

6.5CVSS2.6AI score0.07774EPSS
SaveExploits3References3
Mageia
Mageia
•added 2017/08/15 9:57 a.m.•47 views

Updated x11-server packages fix security vulnerabilities

Eric Sesterhenn discovered that the X.Org X server incorrectly compared MIT cookies. An attacker could possibly use this issue to perform a timing attack and recover the MIT cookie CVE-2017-2624. It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X...

8.8CVSS2.9AI score0.03877EPSS
SaveExploits3References4
Mageia
Mageia
•added 2017/08/13 1:17 p.m.•47 views

Updated kernel-linus packages fixes security and other bugs

This kernel-linus update is based on upstream 4.4.79 and fixes at least the following security issues: Linux kernel built with the VirtIO GPU driverCONFIGDRMVIRTIOGPU support is vulnerable to a memory leakage issue. It could occur while creating a virtio gpu object in virtiogpuobjectcreate. A...

7.8CVSS0.7AI score0.03763EPSS
SaveExploits0References6
Mageia
Mageia
•added 2017/07/30 3:58 p.m.•47 views

Updated postgresql9.4 packages fix security vulnerabilities

Robert Haas discovered that some selectivity estimators did not validate user privileges which could result in information disclosure CVE-2017-7484. Daniel Gustafsson discovered that the PGREQUIRESSL environment variable did no longer enforce a TLS connection CVE-2017-7485. Andrew Wheelwright...

7.5CVSS2.4AI score0.06331EPSS
SaveExploits0References4
Mageia
Mageia
•added 2017/06/12 7:42 a.m.•47 views

Updated lxc packages fix security vulnerabilities

Roman Fiedler discovered a directory traversal flaw in lxc-attach. An attacker with access to an LXC container could exploit this flaw to access files outside of the container CVE-2016-8649. Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A...

9.1CVSS2.3AI score0.02813EPSS
SaveExploits0References5
Total number of security vulnerabilities5000