Lucene search
+L
MageiaMost viewed

6098 matches found

Mageia
Mageia
added 2023/03/11 7:0 p.m.32 views

Updated tmux packages fix security vulnerability

Fixed a null pointer dereference in window.c. CVE-2022-47016...

2.4AI score
SaveExploits0References4
Mageia
Mageia
added 2022/12/30 10:39 p.m.32 views

Updated python-ujson packages fix security vulnerability

Fixes len integer overflow issue. RHBZ2149975 Ultrajson doesn't build on webassembly e.g. pyodide because the version of double-conversion used is too old. This updates it to a newer version which supports webassembly...

4.5AI score
SaveExploits0References3
Mageia
Mageia
added 2022/12/17 6:48 p.m.32 views

Updated python-slixmpp packages fix security vulnerability

Fixes missing certificate hostname validation...

7.5CVSS1.6AI score0.00473EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/12/13 10:9 p.m.32 views

Updated rootcerts packages fix security vulnerability

Set CKANSSSERVERDISTRUSTAFTER and CKANSSEMAILDISTRUSTAFTER for 3 TrustCor Root Certificates. r=KathleenWilson...

2.4AI score
SaveExploits0References3
Mageia
Mageia
added 2022/09/16 7:39 p.m.32 views

Updated gimp packages fix security vulnerability

An issue in gimplayerinvalidateboundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service DoS. CVE-2022-32990...

5.5CVSS5.1AI score0.0065EPSS
SaveExploits1References2
Mageia
Mageia
added 2022/09/16 7:39 p.m.32 views

Updated ostree packages fix security vulnerability

A memory corruption issue that could be triggered when diffing binary files. CVE-2014-9862...

7.8CVSS8AI score0.06762EPSS
SaveExploits0References3
Mageia
Mageia
added 2022/08/29 5:7 a.m.32 views

Updated clamav packages fix security vulnerability

ClamAV 0.103.7 is a critical patch release with the following fixes: Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature "Intermediates" feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...

3.9AI score
SaveExploits0References2
Mageia
Mageia
added 2022/05/15 10:6 a.m.32 views

Updated python-nbxmpp packages fix security vulnerability

Missing input sanitising in python-nbxmpp, a Jabber/XMPP Python library, could result in denial of service in clients based on it such as Gajim...

7.5CVSS2.9AI score0.01568EPSS
SaveExploits1References2
Mageia
Mageia
added 2022/03/23 8:36 a.m.32 views

Updated sphinx packages fix security vulnerability

It was found that sphinx could allow arbitrary files to be read by abusing a configuration option. CVE-2020-29050...

7.5CVSS3AI score0.02166EPSS
SaveExploits2References4
Mageia
Mageia
added 2021/10/06 7:41 p.m.32 views

Updated fail2ban packages fix security vulnerability

fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command mail from mailutils package...

8.1CVSS3.2AI score0.03621EPSS
SaveExploits1References4
Mageia
Mageia
added 2021/09/29 5:22 p.m.32 views

Updated libgd packages fix security vulnerability

The updated packages fix a security vulnerability: The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks CVE-2021-40812...

6.5CVSS2.4AI score0.01659EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/07/20 10:46 a.m.32 views

Updated rvxt-unicode, mxrvt, eterm packages fix security vulnerability

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is terminated by a newline CVE-2021-33477...

8.8CVSS2.7AI score0.04089EPSS
SaveExploits1References7
Mageia
Mageia
added 2021/07/04 2:13 a.m.32 views

Updated networkmanager packages fix security vulnerability

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability. CVE-2021-20297...

5.5CVSS2.5AI score0.00254EPSS
SaveExploits0References1
Mageia
Mageia
added 2021/06/23 5:11 p.m.32 views

Updated cifs-utils packages fix a security vulnerability

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity CVE-2021-20208...

6.1CVSS3.8AI score0.00642EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/06/13 9:32 p.m.32 views

Updated exif packages fix a security vulnerability

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash. CVE-2021-27815...

5.5CVSS4.5AI score0.01268EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/06/08 2:33 p.m.32 views

Updated mpv packages fix a security vulnerability

Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file CVE-2021-30145...

7.8CVSS6.4AI score0.02409EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/03/12 1:25 a.m.32 views

Updated libcaca packages fix a security vulnerability

A buffer overflow issue in cacaresize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context CVE-2021-3410...

7.8CVSS4.1AI score0.00565EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/11/21 12:21 p.m.32 views

Updated librepo packages fix a security vulnerability

It was discovered that librepo was subject to a directory traversal vulnerability where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal...

8.5CVSS4AI score0.02526EPSS
SaveExploits0References4
Mageia
Mageia
added 2020/07/31 11:25 p.m.32 views

Updated cloud-init packages fix security vulnerability

In cloud-init, relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function CVE-2020-8631. In cloud-init, randuserpassword in cloudinit/config/ccsetpasswords.py has a small default...

5.5CVSS4AI score0.00435EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/07/10 3:40 p.m.32 views

Updated mediawiki packages fix security vulnerability

Updated mediawiki packages fix security vulnerability: In MediaWiki before 1.31.8, private wikis behind a caching server using the imgauth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control...

3.1CVSS2.8AI score0.01302EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/05/15 3:48 p.m.32 views

Updated jbig2dec packages fix security vulnerability

Updated jbig2dec packages fix security vulnerability: jbig2imagecompose in jbig2image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow CVE-2020-12268...

9.8CVSS3.7AI score0.02622EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/01/28 7:52 a.m.32 views

Updated libqb packages fix security vulnerability

Insecure treatment of IPC temporary files which could allow a local attacker to overwrite privileged system files CVE-2019-12779...

7.1CVSS3.9AI score0.00655EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/01/05 3:37 p.m.32 views

Updated libdwarf packages fix security vulnerability

Updated libdwarf packages fix security vulnerability: dwarfelfloadheaders.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service division by zero via an ELF file with a zero-size section group SHTGROUP, as demonstrated by dwarfdump CVE-2019-14249...

6.5CVSS5.8AI score0.0273EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/01/05 3:37 p.m.32 views

Updated jss packages fix security vulnerability

Updated jss packages fix security vulnerability: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS CryptoManager, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be...

7.4CVSS1.8AI score0.00859EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/12/31 4:51 p.m.32 views

Updated libidn2 packages fix security vulnerabilities

Updated libidn2 packages fix security vulnerabilities: It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains CVE-2019-12290. It was discovered that Libidn2 incorrectly handled certain inputs. An attacker could possibly u...

9.8CVSS3.9AI score0.03708EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/12/13 6:25 p.m.32 views

Updated kdelibs4 packages fix security vulnerability

kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction CVE-2019-14744...

7.8CVSS2.2AI score0.04069EPSS
SaveExploits1References3
Mageia
Mageia
added 2019/07/25 7:53 p.m.32 views

Updated vlc packages fix security vulnerability

VLC 3.0.7 has been released on June 6 including security fixes...

7.1CVSS2.3AI score0.01153EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/05/12 9:35 a.m.32 views

Updated tcpreplay packages fixes security vulnerabilities

Updated tcpreplay package fixes security vulnerabilities: An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6 located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause...

7.8CVSS4.3AI score0.01317EPSS
SaveExploits3References2
Mageia
Mageia
added 2019/02/13 11:8 a.m.32 views

Updated cinnamon packages fix security vulnerability

A flaw was found in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of for example other users' icon files in onfacebrowsemenuitemactivated and onfacemenuitemactivated. These icon files are written to the respective user's $HOME/.face locatio...

8.1CVSS4.5AI score0.02201EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/01/23 3:50 p.m.32 views

Updated libcaca packages fix security vulnerabilities

It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service CVE-2018-20544. It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code...

8.8CVSS2.4AI score0.02389EPSS
SaveExploits6References2
Mageia
Mageia
added 2018/12/03 10:13 p.m.32 views

Updated messagelib packages fix security vulnerability

Some HTML emails can trick messagelib into opening a new browser window when displaying said email as HTML. This happens even if the option to allow the HTML emails to access remote servers is disabled in KMail settings. This means that the owners of the servers referred in the email can see in...

5.3CVSS2.1AI score0.01104EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/11/15 10:4 p.m.32 views

Updated flash-player-plugin packages fix security vulnerability

An important vulnerability in Adobe Flash Player 31.0.0.122 and earlier versions. Successful exploitation could lead to information disclosure. CVE-2018-15978...

7.5CVSS2.5AI score0.0743EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/11/03 7:20 p.m.32 views

Updated cimg and gmic packages fix security vulnerabilities

Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h CVE-2018-7587. An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp i...

7.8CVSS2.1AI score0.01349EPSS
SaveExploits8References3
Mageia
Mageia
added 2018/09/21 4:26 p.m.32 views

Updated soundtouch packages fix security vulnerability

Updated soundtouch package fixes security vulnerabilities: - Reachable assertion in FIRFilter.cpp causing denial of service CVE-2018-14045. - Reachable assertion in RateTransposer::setChannels causing denial of service CVE-2018-14044. - Heap-based buffer overflow in...

8.8CVSS4.1AI score0.02609EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/08/19 6:36 p.m.32 views

Updated flash-player-plugin packages fix security vulnerabilities

Updated flash-player-plugin packages fix security vulnerabilities: Out-of-bounds read that can lead to Information Disclosure CVE-2018-12824, CVE-2018-12826, CVE-2018-12827 Security bypass that can lead to Security Mitigation Bypass CVE-2018-12825 Use of a component with a known vulnerability can...

9.8CVSS2.5AI score0.32032EPSS
SaveExploits3References2
Mageia
Mageia
added 2018/08/17 10:27 p.m.32 views

Updated openslp packages fix security vulnerability

Updated openslp packages fix security vulnerability: OpenSLP is vulnerable to a double freeing of memory that causes a crash in the slpbuffer:SLPBufferRealloc function, which makes it vulnerable to a denial-of-service or remote code execution attack CVE-2017-17833...

9.8CVSS2.8AI score0.0389EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/04/22 7:59 p.m.32 views

Updated libcdio packages fix security vulnerabilities

A heap corruption bug was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files, thus resulting in local DoS CVE-2017-18198. A NULL pointer dereference flaw was...

9.8CVSS1.1AI score0.03363EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/02/15 9:17 p.m.32 views

Updated freetype2 packages fix security vulnerability

Updated freetype2 packages fix security vulnerability: FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the ttsizereset function in truetype/ttobjs.c CVE-2017-7864...

9.8CVSS3.7AI score0.03771EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/02/06 3:35 p.m.32 views

Updated php-smarty packages fix security vulnerability

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template nameCVE-2017-1000480...

9.8CVSS1.4AI score0.03124EPSS
SaveExploits0References1
Mageia
Mageia
added 2018/01/06 10:14 a.m.32 views

Updated openafs packages fixes security vulnerability

This update provides an update to openafs 1.6.22, fixing the following security issue: It was discovered that malformed jumbogram packets could result in denial of service against OpenAFS CVE-2017-17432. It also adds support for 4.14 series kernels...

7.8CVSS2.9AI score0.03053EPSS
SaveExploits0References4
Mageia
Mageia
added 2018/01/04 4:48 p.m.32 views

Updated wildmidi packages fix security vulnerabilities

The WMSetupMidiEvent function in internalmidi.c:2318 in WildMIDI before 0.4.2 can cause a denial of serviceinvalid memory read and application crash via a crafted mid file CVE-2017-11661. The WMParseNewMidi function in fmidi.c in WildMIDI before 0.4.2 can cause a denial of serviceinvalid memory...

7.5CVSS3.3AI score0.10772EPSS
SaveExploits7References2
Mageia
Mageia
added 2018/01/03 2:22 p.m.32 views

Updated fontforge packages fix security vulnerability

It was discovered that FontForge, a font editor, did not correctly validate its input. An attacker could use this flaw by tricking a user into opening a maliciously crafted OpenType font file, thus causing a denial-of-service via application crash, or execution of arbitrary code CVE-2017-11568,...

7.8CVSS3.2AI score0.0144EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/12/10 8:49 p.m.32 views

Updated firefox packages fix security vulnerability

Web worker in Private Browsing mode can write IndexedDB data. CVE-2017-7843...

7.5CVSS2.7AI score0.02989EPSS
SaveExploits1References2
Mageia
Mageia
added 2017/08/24 9:18 p.m.32 views

Updated perltidy packages fix security vulnerability

perltidy relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink CVE-2016-10374...

5.5CVSS3.7AI score0.0032EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/08/07 10:16 p.m.32 views

Updated librsvg packages fix security vulnerability

Division-by-zero in the Gaussian blur code CVE-2017-11464...

7.8CVSS3.9AI score0.01263EPSS
SaveExploits0References3
Mageia
Mageia
added 2017/06/14 3:52 p.m.32 views

Updated tor packages fix security vulnerability

A remotely triggerable assertion failure caused by receiving a BEGINDIR cell on a hidden service rendezvous circuit CVE-2017-0376...

7.5CVSS2.3AI score0.02176EPSS
SaveExploits1References2
Mageia
Mageia
added 2017/06/10 7:1 a.m.32 views

Updated gajim packages fix security vulnerability

Gajim unconditionally implements the "XEP-0146: Remote Controlling Clients" extension, which may be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions CVE-2016-10376...

4.5CVSS3.7AI score0.01153EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/04/21 7:24 a.m.32 views

Updated flash-player-plugin package fixes security vulnerability

This update fixes the following critical security issues: use-after-free vulnerabilities that could lead to code execution CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063. memory corruption vulnerabilities that could lead to code execution CVE-2017-3060, CVE-2017-3061, CVE-2017-3064...

10CVSS3AI score0.24728EPSS
SaveExploits4References2
Mageia
Mageia
added 2017/03/17 11:12 a.m.32 views

Updated wavpack packages fix security vulnerability

Hanno Böck discovered a global buffer overread vulnerability in WavPack's word parsing logic CVE-2016-10169, this update fixes it...

5.5CVSS2.3AI score0.02123EPSS
SaveExploits1References3
Mageia
Mageia
added 2017/02/20 1:0 p.m.32 views

Updated lynx packages fix security vulnerability

Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host. CVE-2016-9179...

7.5CVSS2.8AI score0.01987EPSS
SaveExploits0References2
Total number of security vulnerabilities5000