Lucene search
+L
MageiaMost viewed

6098 matches found

Mageia
Mageia
•added 2020/05/05 12:20 p.m.•33 views

Updated dolphin-emu packages fix security vulnerability

Updated dolphin-emu package fixes security vulnerabilities Dolphin Emulator includes a modified copy of the SoundTouch library at version 1.9.2. That version is subject to the following security issues: - The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9....

8.8CVSS4.4AI score0.06151EPSS
SaveExploits10References5
Mageia
Mageia
•added 2020/01/28 7:52 a.m.•33 views

Updated libbsd packages fix security vulnerability

It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table strtab in nlist.c. An attacker could possibly use this issue to access sensitive information CVE-2019-20367...

9.1CVSS1.5AI score0.02805EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/01/05 3:37 p.m.•33 views

Updated dia packages fix security vulnerability

Updated dia package fixes security vulnerability: An endless loop on filenames with invalid encoding CVE-2019-19451...

5.5CVSS2.9AI score0.0037EPSS
SaveExploits0References2
Mageia
Mageia
•added 2020/01/05 3:37 p.m.•33 views

Updated freeimage packages fix security vulnerabilities

The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS1.6AI score0.0421EPSS
SaveExploits2References3
Mageia
Mageia
•added 2019/12/13 6:25 p.m.•33 views

Updated clementine packages fix security vulnerability

NULL ptr dereference crash in the moodbar pipeline CVE-2019-14332...

7.8CVSS1.7AI score0.01366EPSS
SaveExploits3References2
Mageia
Mageia
•added 2019/12/06 2:15 p.m.•33 views

Updated libcryptopp packages fix security vulnerability

The updated packages fix a security vulnerability: Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The iss...

5.9CVSS0.9AI score0.03245EPSS
SaveExploits1References2
Mageia
Mageia
•added 2019/11/19 9:16 p.m.•33 views

Updated ghostscript packages fix security vulnerability

The updated packages fix a security vulnerability: -dSAFER escape in .charkeys. CVE-2019-14869...

8.8CVSS1.3AI score0.03434EPSS
SaveExploits0References3
Mageia
Mageia
•added 2019/09/06 9:9 p.m.•33 views

Updated libmspack packages fix security vulnerability

Updated libmspack packages fix security vulnerability: It was discovered that libmspack incorrectly handled certain CHM files. A remote attacker could possibly use this issue to access sensitive information CVE-2019-1010305...

5.5CVSS1.7AI score0.01524EPSS
SaveExploits1References2
Mageia
Mageia
•added 2019/09/06 9:9 p.m.•33 views

Updated zstd packages fix security vulnerability

Updated zstd packages fix security vulnerability: It was discovered that Zstandard incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code CVE-2019-11922...

8.1CVSS2.5AI score0.01424EPSS
SaveExploits0References1
Mageia
Mageia
•added 2019/05/12 9:35 a.m.•33 views

Updated bash packages fix security vulnerability

Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASHCMDS, allowing the user to execute any command with the permissions of the shell CVE-2019-9924...

7.8CVSS2.5AI score0.00415EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/04/05 6:12 p.m.•33 views

Updated gnutls packages fix security vulnerability

A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption double free vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected. CVE-2019-3829...

7.5CVSS3.7AI score0.58969EPSS
SaveExploits1References4
Mageia
Mageia
•added 2019/02/13 11:8 a.m.•33 views

Updated python-marshmallow packages fix security vulnerability

In the marshmallow library before 2.15.1 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expose no fields to instead expose all fields if the schema is being filtered dynamically using the "only" option, and there...

5.3CVSS3.3AI score0.01858EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/02/13 11:8 a.m.•33 views

Updated transfig packages fix security vulnerability

It was discovered that transfig incorrectly handled certain FIG files. An attacker could possibly use this to execute arbitrary code CVE-2018-16140...

7.8CVSS2.4AI score0.01381EPSS
SaveExploits0References2
Mageia
Mageia
•added 2019/01/18 10:19 p.m.•33 views

Updated rdesktop package fixes security vulnerabilities

rdesktop has been updated to fix multiple CVE's. Fix memory corruption in processbitmapdata - CVE-2018-8794 Fix remote code execution in processbitmapdata - CVE-2018-8795 Fix remote code execution in processplane - CVE-2018-8797 Fix Denial of Service in mcsrecvconnectresponse - CVE-2018-20175 Fix...

9.8CVSS7.4AI score0.08214EPSS
SaveExploits9References2
Mageia
Mageia
•added 2019/01/05 6:30 p.m.•33 views

Updated libextractor packages fix security vulnerabilities

Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed CVE-2018-20430, CVE-2018-20431...

6.5CVSS2.9AI score0.02237EPSS
SaveExploits2References2
Mageia
Mageia
•added 2018/12/28 10:16 a.m.•33 views

Updated ruby-i18n packages fix security vulnerability

A flaw was found in the i18n gem before 0.8.0 for Ruby. The Hashslice in lib/i18n/coreext/hash.rb allows remote attackers to cause a denial of service application crash via a call in a situation where :somekey is present in keepkeys but not present in the hash CVE-2014-10077...

7.5CVSS7.1AI score0.0339EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/11/28 8:50 p.m.•33 views

Updated icecast packages fix security vulnerability

Buffer overflows in URL auth code if there is a "mount" definition that enables URL authentication. A malicious client could send long HTTP headers, leading to a buffer overflow and potential remote code execution CVE-2018-18820...

8.1CVSS4.8AI score0.48944EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/11/15 10:4 p.m.•33 views

Updated teeworlds packages fix security vulnerability

It was discovered that incorrect connection setup in the server for Teeworlds, an online multi-player platform 2D shooter, could result in denial of service via forged connection packets rendering all game server slots occupied CVE-2018-18541. This update fixes it...

7.5CVSS2.5AI score0.03024EPSS
SaveExploits0References4
Mageia
Mageia
•added 2018/10/19 6:0 p.m.•33 views

Updated vlc packages fix security vulnerability

This update provides vlc 3.0.4 and fixes at least the following security issue: A use-after-free was discovered in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played CVE-2018-11529 For other fixes in this update, see...

8CVSS3.6AI score0.40877EPSS
SaveExploits10References3
Mageia
Mageia
•added 2018/08/23 11:35 p.m.•33 views

Updated cgit packages fix security vulnerability

Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' default is not turned off...

7.5CVSS3.4AI score0.9288EPSS
SaveExploits7References2
Mageia
Mageia
•added 2018/06/14 6:14 p.m.•33 views

Updated scummvm packages fix security vulnerability

Updated scummvm package fixes security vulnerability ScummVM 1.8.1's POSIX backend does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL CVE-2017-17528. This...

8.8CVSS2.9AI score0.01643EPSS
SaveExploits0References3
Mageia
Mageia
•added 2018/05/16 8:24 a.m.•33 views

Updated wget packages fix security vulnerabilities

Harry Sintonen discovered that wget does not properly handle '\r\n' from continuation lines while parsing the Set-Cookie HTTP header. A malicious web server could use this flaw to inject arbitrary cookies to the cookie jar file, adding new or replacing existing cookie values CVE-2018-0494. The...

6.5CVSS2AI score0.1698EPSS
SaveExploits5References3
Mageia
Mageia
•added 2018/05/09 6:33 p.m.•33 views

Updated cups packages fix security vulnerability

CUPS before version 2.2.6 has a vulnerability in the handling of usernames in the scheduler/ipp.c:addjob function. A remote attacker could exploit this by submitting a print job with an invalid UTF-8 username to cause a crash and subsequent denial of service CVE-2017-18248...

5.3CVSS4AI score0.0222EPSS
SaveExploits1References2
Mageia
Mageia
•added 2018/02/24 11:25 p.m.•33 views

Updated advancecomp packages fix security vulnerability

Joonun Jang discovered a vulnerability in AdvanceCOMP that could be used to crash or run programs if it opened a specially crafted ZIP file...

7.8CVSS2.1AI score0.01422EPSS
SaveExploits1References1
Mageia
Mageia
•added 2018/02/06 3:35 p.m.•33 views

Updated redis packages fix security vulnerability

The following vulnerabilities were fixed: - Buffer overflows occurring reading redis.conf bsc1061967 The following bugs are fixed: - Several PSYNC2 bugs could cause data corruption...

9.8CVSS2.3AI score0.01784EPSS
SaveExploits0References4
Mageia
Mageia
•added 2018/01/12 7:49 p.m.•33 views

Updated flash-player-plugin package fixes security vulnerability

Adobe Flash Player 28.0.0.137 addresses an important out-of-bounds read vulnerability that could lead to information exposure CVE-2018-4871...

7.5CVSS2.4AI score0.05509EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/01/07 4:6 p.m.•33 views

Updated python-mistune packages fix security vulnerabilities

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions CVE-2017-15612. A cross-site-scripting vulnerability was found in python-mistune CVE-2017-16876...

6.1CVSS3.1AI score0.02235EPSS
SaveExploits1References2
Mageia
Mageia
•added 2017/12/21 5:43 p.m.•33 views

Updated rsync package fixes security vulnerability

The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact by sendi...

9.8CVSS6.9AI score0.05163EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/12/16 11:20 p.m.•33 views

Updated evince packages fix security vulnerability

It was discovered that Evince incorrectly handled printing certain DVI files. If a user were tricked into opening and printing a specially-named DVI file, an attacker could use this issue to execute arbitrary code CVE-2017-1000159...

7.8CVSS2.8AI score0.01406EPSS
SaveExploits0References3
Mageia
Mageia
•added 2017/12/01 11:13 p.m.•33 views

Updated git packages fix security vulnerability

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service memory consumption via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to...

5.5CVSS4.7AI score0.01641EPSS
SaveExploits1References2
Mageia
Mageia
•added 2017/11/06 8:22 a.m.•33 views

Updated x11-server packages fix security vulnerabilities & bugs

The upstream 1.19.4 update we pushed as: http://advisories.mageia.org/MGASA-2017-0366.html introduced a regression in PRIME syncronization. Upstream released a 1.19.5 that fixes that and a lot of security fixes: CVE-2017-12176 to CVE-2017-12187 Also added a fix for "XShmGetImage: fix censoring"...

9.8CVSS0.7AI score0.0437EPSS
SaveExploits1References4
Mageia
Mageia
•added 2017/09/16 8:24 a.m.•33 views

Updated mpg123 packages fix security vulnerabilities

mpg123 version 1.25.6 fix two buffer overflows, and several other non-security bugs...

5.5CVSS4.2AI score0.0119EPSS
SaveExploits0References3
Mageia
Mageia
•added 2017/09/16 8:24 a.m.•33 views

Updated 389-ds-base packages fix security vulnerability

The directory server password lockout policy prevents binds from operating once a threshold of failed passwords has been met. During this lockout, if you bind with a successful password, a different error code is returned. This means that an attacker has no ratelimit or penalty during an account...

9.8CVSS1.6AI score0.01418EPSS
SaveExploits1References2
Mageia
Mageia
•added 2017/09/14 6:21 p.m.•33 views

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 27.0.0.130 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update addresses two memory corruption vulnerabilities that could lead to code execution CVE-2017-11281...

9.8CVSS5.7AI score0.34848EPSS
SaveExploits11References2
Mageia
Mageia
•added 2017/08/08 8:24 p.m.•33 views

Updated atril packages fix security vulnerability

It was discovered that Atril made insecure use of tar when opening tar comic book archives CBT. Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely CVE-2017-1000083...

7.8CVSS2.5AI score0.50826EPSS
SaveExploits9References2
Mageia
Mageia
•added 2017/07/30 3:58 p.m.•33 views

Updated freeradius packages fix security vulnerabilities

Fuzz testing of freeradius found multiple vulnerabilites that resulted in either the potential for remote code execution or a possible denial of service except for CVE-2017-10988 which was later determined to not actually result in any vulnerability...

9.8CVSS2.6AI score0.07043EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/07/13 9:10 a.m.•33 views

Updated sudo packages fix security vulnerability

A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root. CVE-2017-1000367...

6.9CVSS4.2AI score0.07953EPSS
SaveExploits8References2
Mageia
Mageia
•added 2017/06/28 10:1 a.m.•33 views

Updated weechat packages fix security vulnerability

It was discovered that weechat is prone to a buffer overflow vulnerability in the IRC plugin, allowing a remote attacker to cause a denial-of-service by sending a specially crafted filename via DCC CVE-2017-8073...

7.5CVSS3.7AI score0.03107EPSS
SaveExploits0References2
Mageia
Mageia
•added 2017/06/14 3:52 p.m.•33 views

Updated catdoc packages fix security vulnerability

Various issues found during fuzzing which may lead to an application crash or have unspecified further impact when the user is tricked into opening specially crafted files boo919228. A lot of segfaults on incorrect or corrupted data...

2.7AI score
SaveExploits0References2
Mageia
Mageia
•added 2017/06/14 1:50 p.m.•33 views

Updated smb4k packages fix security vulnerability

Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. This allows calling any other binary as root since the mount helper is typically installed as suid CVE-2017-8849...

7.8CVSS2.7AI score0.01948EPSS
SaveExploits4References2
Mageia
Mageia
•added 2017/04/04 6:44 a.m.•33 views

Updated wget packages fix security vulnerability

Wget up untill version 1.19.1 does not ensure control characters are not used in the hostname part of a url. This security update rejects control characters in host part of a url...

6.1CVSS2.7AI score0.03086EPSS
SaveExploits1References3
Mageia
Mageia
•added 2017/03/27 9:27 p.m.•33 views

Updated mbedtls packages fix security vulnerability

In mbedTLS before 1.3.19, if a malicious peer supplies a certificate with a specially crafted secp224k1 public key, then an attacker can cause the server or client to attempt to free block of memory held on stack. Depending on the platform, this could result in a Denial of Service client crash or...

8.1CVSS2.5AI score0.03418EPSS
SaveExploits2References4
Mageia
Mageia
•added 2017/03/27 9:27 p.m.•33 views

Updated roundcubemail package fixes security vulnerability

rcubeutils.php in Roundcube before 1.1.8 and before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets CSS token sequence within an SVG element CVE-2017-6820...

6.1CVSS1.8AI score0.01293EPSS
SaveExploits1References2
Mageia
Mageia
•added 2017/03/25 4:56 p.m.•33 views

Updated tnef packages fix security vulnerability

An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker. CVE-2017-6307 An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can le...

7.8CVSS2AI score0.0154EPSS
SaveExploits0References3
Mageia
Mageia
•added 2017/01/29 10:31 p.m.•33 views

Updated python-bottle packages fix security vulnerability

redirect in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect"233\r\nSet-Cookie: name=salt" call. CVE-2016-9964...

6.5CVSS2.4AI score0.01761EPSS
SaveExploits0References2
Mageia
Mageia
•added 2016/12/29 10:29 a.m.•33 views

Updated libgsf packages fix security vulnerability

An error within the "tardirectoryforfile" function gsf-infile-tar.c in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file CVE-2016-9888...

5.5CVSS2.5AI score0.0133EPSS
SaveExploits0References2
Mageia
Mageia
•added 2016/09/21 8:38 p.m.•33 views

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 11.2.202.635 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves an integer overflow vulnerability that could lead to code execution CVE-2016-4287. Th...

9.3CVSS3.1AI score0.19443EPSS
SaveExploits3References2
Mageia
Mageia
•added 2016/07/26 10:11 p.m.•33 views

Updated mupdf packages fix security vulnerability

Use-after-free issue in mupdf in pdfloadxref can cause a denial of service CVE-2016-6265...

5.5CVSS3AI score0.0163EPSS
SaveExploits1References2
Mageia
Mageia
•added 2016/07/08 7:50 p.m.•33 views

Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerability: Vivian Zhang and Christoph Anton Mitterer discovered that setting an empty VNC password does not work as documented in Libvirt, a virtualisation abstraction library. When the password on a VNC server is set to the empty string, authentication o...

9.8CVSS1.6AI score0.03623EPSS
SaveExploits0References3
Mageia
Mageia
•added 2016/07/05 3:47 p.m.•33 views

Updated libtorrent-rasterbar packages fix security vulnerability

A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent-rasterbar in the parsechunkheader function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of...

7.5CVSS1.4AI score0.01948EPSS
SaveExploits0References2
Total number of security vulnerabilities5000