Lucene search
+L
MageiaMost viewed

6143 matches found

Mageia
Mageia
•added 2021/07/12 8:26 p.m.•45 views

Updated libgrss packages fix security vulnerability

libgrss does not perform any TLS certificate verification because it uses the deprecated SoupSessionAsync, which requires manually enabling certificate verification, rather than a modern SoupSession that has good defaults CVE-2016-20011...

7.5CVSS2.5AI score0.01469EPSS
SaveExploits0References2
Mageia
Mageia
•added 2021/07/12 8:26 p.m.•45 views

Updated mediawiki packages fix a security vulnerability

In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access. When a bot account has a "sitewide block" applied, it is able to still "purge" pages through the MediaWiki Action API which a "sitewide block" should have prevented...

7.5CVSS4.5AI score0.01943EPSS
SaveExploits1References3
Mageia
Mageia
•added 2021/06/16 8:22 p.m.•45 views

Updated qt4 and qtsvg5 packages fix a security vulnerability

An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includes the backported upstream fix and should resolve the security issue CVE-2021-3481...

7.1CVSS1.7AI score0.00543EPSS
SaveExploits1References4
Mageia
Mageia
•added 2021/06/08 2:33 p.m.•45 views

Updated lz4 packages fix a security vulnerability

An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential...

9.8CVSS8.7AI score0.0319EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/05/21 10:47 p.m.•45 views

Updated thunderbird packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection CVE-2021-29956. Partial protection of inline OpenPGP message not indicated CVE-2021-29957...

4.3CVSS3.1AI score0.0094EPSS
SaveExploits2References4
Mageia
Mageia
•added 2021/05/16 8:54 p.m.•45 views

Updated avahi packages fix a security vulnerability

Avoid infinite loop by handling HUP event in clientwork. CVE-2021-3468...

5.5CVSS1.7AI score0.00443EPSS
SaveExploits0References4
Mageia
Mageia
•added 2021/04/15 7:03 p.m.•45 views

Updated thunderbird packages fix security vulnerabilities

An attacker may use Thunderbird's OpenPGP key refresh mechanism to poison an existing key CVE-2021-23991. A crafted OpenPGP key with an invalid user ID could be used to confuse the user CVE-2021-23992. Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key CVE-2021-23993...

6.8CVSS1.6AI score0.01035EPSS
SaveExploits1References3
Mageia
Mageia
•added 2021/04/12 7:59 p.m.•45 views

Updated spamassassin packages fix security vulnerability

In Apache SpamAssassin before 3.4.5, malicious rule configuration .cf files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3...

10CVSS2AI score0.06132EPSS
SaveExploits0References4
Mageia
Mageia
•added 2021/03/04 12:26 p.m.•45 views

Updated thunderbird packages fix security vulnerabilities

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs CVE-2021-23968. As specified in the W3C...

8.8CVSS0.8AI score0.0153EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/02/04 1:40 p.m.•45 views

Updated python and python3 packages fix security vulnerability

A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack an...

9.8CVSS1.7AI score0.23293EPSS
SaveExploits1References2
Mageia
Mageia
•added 2021/01/17 4:07 p.m.•45 views

Updated sudo packages fix security vulnerabilities

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudoedit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path. CVE-2021-23239. selinuxeditcopytfiles in sudoedit in...

7.8CVSS3AI score0.01066EPSS
SaveExploits2References3
Mageia
Mageia
•added 2021/01/14 3:13 p.m.•45 views

Updated bison packages fix a security vulnerability

It was discovered that GNU Bison before 3.5.4 allows attackers to cause a denial of service application crash CVE-2020-14150...

5.5CVSS4.7AI score0.00385EPSS
SaveExploits0References1
Mageia
Mageia
•added 2021/01/04 2:42 p.m.•45 views

Updated rawtherapee package fixes a security vulnerability

There is a floating point exception in dcrawcommon.cpp of libRAW. It will lead to remote denial of service attack. This code is embedded in rawtherapee CVE-2017-13735...

7.5CVSS3.3AI score0.02988EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/12/29 11:57 a.m.•45 views

Updated jackit packages fix security vulnerability

posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure,...

8.1CVSS0.9AI score0.017EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/11/21 12:21 p.m.•45 views

Updated raptor2 packages fix a security vulnerability

A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon. CVE-2020-25713...

6.5CVSS2.9AI score0.02143EPSS
SaveExploits0References4
Mageia
Mageia
•added 2020/11/10 3:20 p.m.•45 views

Updated samba packages fix security vulnerabilities

Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue to obtain file name information CVE-2020-14318. Bas Alberts discovered that Samba incorrectly handled certain winbind requests. A remote attacker could possibly use th...

6.5CVSS2.2AI score0.02207EPSS
SaveExploits0References6
Mageia
Mageia
•added 2020/10/20 4:22 p.m.•45 views

Updated tigervnc packages fix a security vulnerability

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle TLS certificate exceptions. They store the certificates as authorities, meaning that the owner of a certificate could impersonate any server after a client had added an exception. CVE-2020-26117...

8.1CVSS4.2AI score0.0306EPSS
SaveExploits0References5
Mageia
Mageia
•added 2020/10/16 3:44 p.m.•45 views

Updated flash-player-plugin package fixes security vulnerability

NULL Pointer Dereference that leads to arbitrary code execution in the context of the current user. CVE-2020-9746...

9.3CVSS3.2AI score0.04255EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/09/27 8:06 p.m.•45 views

Updated mbedtls packages fix security vulnerabilities

mbedtls 2.16.8 fixes three security vulnerabilities which could affect earlier releases: Local side channel attack on classical CBC decryption in DTLS CVE-2020-16150. Local side channel attack on RSA and static Diffie-Hellman. Protocol weakness in DHE-PSK key exchange...

5.5CVSS3.7AI score0.00368EPSS
SaveExploits0References4
Mageia
Mageia
•added 2020/09/06 8:33 p.m.•45 views

Updated python-rsa packages fix security vulnerability

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS1.8AI score0.01359EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/09/04 9:16 a.m.•45 views

Updated sane packages fix security vulnerabilities

A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080. CVE-2020-12861 An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same...

8.8CVSS2.9AI score0.03044EPSS
SaveExploits7References5
Mageia
Mageia
•added 2020/08/25 8:13 a.m.•45 views

Updated ghostscript packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A buffer overflow vulnerability in lprnisblack in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. CVE-2020-16287 A buffer overflow vulnerability in...

7.8CVSS4.2AI score0.02258EPSS
SaveExploits25References2
Mageia
Mageia
•added 2020/07/31 11:25 p.m.•45 views

Updated xerces-c packages fix security vulnerability

A use-after-free vulnerability was found in xerces-c in the way an XML document is processed via the SAX API. Applications that process XML documents with an external Document Type Definition DTD may be vulnerable to this flaw. A remote attacker could exploit this flaw by creating a specially...

8.1CVSS3.7AI score0.09503EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/07/10 3:40 p.m.•45 views

Updated xpdf packages fix security vulnerability

A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump...

7.1CVSS2.6AI score0.0112EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/07/04 10:47 p.m.•45 views

Updated vlc packages fix security vulnerability

Updated vlc packages fixes security vulnerability: A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted...

7.8CVSS6.7AI score0.02411EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/06/10 10:26 p.m.•45 views

Updated sudo packages fix security vulnerability

Updated sudo packages fix security vulnerabilities: It was found that sudo always allowed commands to be run with unknown user or group ids if the sudo configuration allowed it for example via the "ALL" alias. This could allow sudo to impersonate non-existent account and depending on how...

7.5CVSS3.5AI score0.03295EPSS
SaveExploits0References5
Mageia
Mageia
•added 2020/05/29 9:18 p.m.•45 views

Updated jasper packages fix security vulnerability

Updated jasper packages fix security vulnerability: There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack CVE-2018-9154...

7.5CVSS3.2AI score0.0354EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/05/24 6:04 p.m.•45 views

Updated dovecot packages fix security vulnerabilities

Dovecot has been updated to fix several security issues. Sending malformed NOOP command causes crash in submission, submission-login or lmtp service CVE-2020-10957. Sending command followed by sufficient number of newlines triggers a use-after-free bug that might crash submission-login, submissio...

7.5CVSS1.3AI score0.08153EPSS
SaveExploits5References2
Mageia
Mageia
•added 2020/05/05 12:20 p.m.•45 views

Updated exiv2 packages fix security vulnerability

The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file. CVE-2019-13111...

5.5CVSS3.1AI score0.00802EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/04/20 2:02 p.m.•45 views

Updated python-bleach packages fix security vulnerability

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False. CVE-2020-6816 Regular expression denial of service. CVE-2020-6817...

7.5CVSS3.5AI score0.01329EPSS
SaveExploits2References4
Mageia
Mageia
•added 2020/04/20 2:02 p.m.•45 views

Updated webkit2 packages fix security vulnerability

The webkit2 package has been updated to version 2.28.1, fixing security issues and other bugs...

8.8CVSS3.7AI score0.02898EPSS
SaveExploits0References3
Mageia
Mageia
•added 2020/03/08 10:37 p.m.•45 views

Updated pdfresurrect packages fix security vulnerability

The updated package fixes a security vulnerability: In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document. CVE-2020-9549...

7.8CVSS3.2AI score0.01371EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/03/06 4:13 p.m.•45 views

Updated libsolv packages fix security vulnerability

Updated libsolv packages fix security vulnerability: An out-of-bounds read was discovered in libsolv when the last schema has a length that is less than the length of the input schema. A remote attacker may abuse this flaw to crash an application that uses libsolv CVE-2019-20387...

7.5CVSS7.5AI score0.02338EPSS
SaveExploits0References3
Mageia
Mageia
•added 2020/03/06 4:13 p.m.•45 views

Updated ilmbase packages fix security vulnerability

The updated packages fix a security vulnerability: OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/ IlmThreadPool.cpp, as demonstrated by exrmultiview. CVE-2018-18443...

4.3CVSS2.1AI score0.02107EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/02/26 10:21 a.m.•45 views

Updated opencontainers-runc packages fix security vulnerability

Updated opencontainers-runc package fixes security vulnerability: An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume CVE-2019-19921...

7CVSS5.7AI score0.00433EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/11/14 4:58 p.m.•45 views

Updated cpio packages fix security vulnerabilities

in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...

7.3CVSS7.4AI score0.02906EPSS
SaveExploits5References2
Mageia
Mageia
•added 2019/11/07 11:36 p.m.•45 views

Updated unbound packages fix security vulnerability

Updated unbound packages fix security vulnerability: Versions before 1.9.4 allow accesses to uninitialized memory, which would permit remote attackers to trigger a crash CVE-2019-16866...

7.5CVSS5.7AI score0.03506EPSS
SaveExploits0References1
Mageia
Mageia
•added 2019/09/27 7:38 p.m.•45 views

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 77.0.3865.90 fixes security issues: Four use-after-free bugs were found in Chromium 77.0.3865.75: one in the UI component CVE-2019-13685, two in the media component CVE-2019-13688, CVE-2019-13687, and one in the offline pages component CVE-2019-13686...

8.8CVSS2.7AI score0.00914EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/09/15 12:11 p.m.•45 views

Updated expat packages fix security vulnerability

Updated expat packages fix security vulnerability: It was discovered that Expat did not properly handled XML input including XML names that contain a large number of colons, potentially resulting in denial of service CVE-2018-20843...

7.8CVSS1.5AI score0.07107EPSS
SaveExploits1References3
Mageia
Mageia
•added 2019/09/12 7:09 p.m.•45 views

Updated flash-player-plugin packages fix security vulnerabilities

Updated flash-player-plugin package fixes security vulnerabilities: Same origin method execution that leads to arbitrary code execution in the context of the current user. CVE-2019-8069 Use after free that leads to arbitrary code execution in the context of the current user. CVE-2019-8070...

10CVSS3.2AI score0.05916EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/08/31 1:22 p.m.•45 views

Updated ansible packages fix security vulnerability

Updated ansible package fixes security vulnerability: A flaw was discovered in the way Ansible templating was implemented before version 2.7.12, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the...

5.5CVSS2.8AI score0.01774EPSS
SaveExploits0References3
Mageia
Mageia
•added 2019/03/14 9:39 p.m.•45 views

Updated hiawatha packages fix security vulnerability

Verison 10.8.4 fixed a vulnerability which allowed a remote atacker to perform directory traversal when AllowDotFiles was enabled CVE-2019-8358...

8.1CVSS5.6AI score0.01499EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/02/14 8:38 a.m.•45 views

Updated dom4j packages fix security vulnerability

dom4j version prior to version 2.1.1 contains an XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appears to be exploitable via an attacker specifying attributes or...

7.5CVSS5.1AI score0.0657EPSS
SaveExploits1References2
Mageia
Mageia
•added 2019/01/08 9:50 p.m.•45 views

Updated qtbase5 packages fix security vulnerabilities

Double free in QXmlStreamReader CVE-2018-15518. Denial of Service on malformed BMP file in QBmpHandler CVE-2018-19873...

9.8CVSS2.3AI score0.03382EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/01/08 9:50 p.m.•45 views

Updated nettle packages fix security vulnerability

A leaky data conversion exposing a manager oracle CVE-2018-16869...

5.7CVSS4.1AI score0.01495EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/11/22 10:26 p.m.•45 views

Updated poppler packages fix security vulnerabilities

In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. CVE-2018-16646 An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becau...

6.5CVSS3.4AI score0.02882EPSS
SaveExploits4References1
Mageia
Mageia
•added 2018/11/11 9:09 p.m.•45 views

Updated iniparser packages fix security vulnerability

A flaw was found in iniparser version prior to 4.1. A stack buffer underflow in the function iniparserload in iniparser.c file which can be triggered by parsing a file that containing a zero-byte. This vulnerability may allow an attacker to cause a Denial of Service DoS...

4.9AI score
SaveExploits0References4
Mageia
Mageia
•added 2018/09/14 8:41 p.m.•45 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 4.14.69 and adds additional fixes for the L1TF and Spectre security issues. Other fixes in this update: all SPIINTELSPI config options have been disable to prevent a potential bios corrupting bug mga23560 For other changes in this update, see the...

2.1AI score
SaveExploits0References6
Mageia
Mageia
•added 2018/09/02 7:07 p.m.•45 views

Updated libgd packages fix security vulnerabilities

The updated packages fix security vulnerabilities: gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated...

8.8CVSS7.8AI score0.13204EPSS
SaveExploits1References2
Mageia
Mageia
•added 2018/06/14 6:14 p.m.•45 views

Updated leptonica packages fix security vulnerabilities

This update fixes a security issue potential injection attack using gplot rootdir originally reported in CVE-2018-3836. This fix was incomplete and again reported in CVE-2018-7440 and CVE-2018-7442. The improved fix is included in leptonica-1.76.0...

9.8CVSS3AI score0.03739EPSS
SaveExploits1References4
Total number of security vulnerabilities5000