6276 matches found
MGASA-2019-0028 Updated krb5 packages fix security vulnerability
An authenticated user who can obtain a TGT using an older encryption type DES, DES3, or RC4 can cause an assertion failure in the KDC by sending an S4U2Self request CVE-2018-20217...
MGASA-2019-0029 Updated live, ffmpeg, mplayer, and vlc packages fix security vulnerabilities
A bug in the server implementation of RTSP-over-HTTP in live could allow a denial-of-service attack. A bug in the server implementation of RTSP-over-HTTP could allow a buffer overflow, which could result in the execution of arbitrary code when parsing a malformed RTSP stream CVE-2018-4013. The...
MGASA-2019-0027 Updated mbedtls packages fix security vulnerability
A vulnerability was found in mbedTLS which allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-ECDHE cipher suites CVE-2018-19608...
MGASA-2019-0024 Updated nettle packages fix security vulnerability
A leaky data conversion exposing a manager oracle CVE-2018-16869...
MGASA-2019-0026 Updated avidemux packages fix security vulnerabilities
The avidemux package has been updated to version 2.7.1. Avidemux includes a bundled copy of the ffmpeg libraries, which have been updated from version 3.3.3 to version 3.3.9, fixing several security issues and other bugs...
MGASA-2019-0021 Updated openafs packages fix security vulnerabilities
Jeffrey Altman reported that the backup tape controller butc process does accept incoming RPCs but does not require or allow for authentication of those RPCs, allowing an unauthenticated attacker to perform volume operations with administrator credentials CVE-2018-16947. Mark Vitale reported that...
MGASA-2019-0023 Updated ansible package fixes security vulnerability
It was found that when a retry task in ansible run with -vvv fails, it will log the raw return code, stdout and stderr from ssh which could have contained sensitive data CVE-2018-16876...
MGASA-2019-0019 Updated opensc packages fix security vulnerabilities
Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...
MGASA-2019-0020 Updated discount packages fix security vulnerabilities
The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file CVE-2018-11468. DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:isfootnote...
MGASA-2019-0025 Updated qtbase5 packages fix security vulnerabilities
Double free in QXmlStreamReader CVE-2018-15518. Denial of Service on malformed BMP file in QBmpHandler CVE-2018-19873...
MGASA-2019-0022 Updated coreutils packages fix security vulnerabilities
A flaw was found in GNU Coreutils through 8.29 in chown-core.c. The functions chown and chgrp do not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
MGASA-2019-0018 Updated libao packages fix security vulnerability
A flaw was found in libao. The tokenizematrix function in audioout.c in Xiph.Org libao 1.2.0 can cause a denial of servicememory corruption via a crafted mp3 file CVE-2017-11548...
MGASA-2019-0016 Updated aubio packages fix security vulnerabilities
NULL pointer dereference in the function aubiosourceavcodecreadframe which may lead to DoS when playing a crafted audio file CVE-2017-17554. A crash in aubiopitchsetunit CVE-2018-14522. A buffer overrread resulting in crash or information leakage in newaubiopitchyinfft CVE-2018-14523...
MGASA-2019-0017 Updated dcraw packages fix security vulnerability
A NULL pointer dereference flaw was found in the way dcraw processed images. An attacker could potentially use this flaw to crash dcraw by tricking it into processing crafted images CVE-2018-5801...
MGASA-2019-0015 Updated wget packages fix security vulnerability
Since version 1.19 Wget stores the URL and in certain cases the 'Referer' URL within extended attributes xattrs of the file system - by default. This includes username + password and other credentials or private data if those have been used within the URLs. Anyone with read access to those files...
MGASA-2019-0007 Updated units package fixes security vulnerability
A flaw was found in units. unitscur doesn't sanitize downloaded data. This allows a maliciously intended server to execute arbitrary code remotely on the client rhbz1598913...
MGASA-2019-0013 Updated libextractor packages fix security vulnerabilities
Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed CVE-2018-20430, CVE-2018-20431...
MGASA-2019-0004 Updated openjpeg2 packages fix security vulnerabilities
A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter CVE-2017-17479. A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter CVE-2017-17480. A flaw was found in OpenJPEG 2.3.0, there is an integer overfl...
MGASA-2019-0012 Updated freerdp packages fix security vulnerabilities
Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2018-8784, CVE-2018-8785. Eyal Itkin discovered FreeRDP incorrectly handled...
MGASA-2019-0014 Updated libpgf packages fix security vulnerability
Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32 CVE-2015-6673...
MGASA-2019-0003 Updated libgxps packages fix security vulnerabilities
A flaw was found in libgxps through 0.3.0. There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c. A crafted input will lead to a remote denial of service attack CVE-2018-10733. An integer overflow flaw exists within the "gxpsimagescreatefrompng" function in...
MGASA-2019-0006 Updated imagemagick packages fix security vulnerabilities & bugs
Imagemagick has been updated to fix several bugs and security issues...
MGASA-2019-0009 Updated pdns-recursor packages fix security vulnerabilities
A vulnerability was in found in PowerDNS Recursor. The issue is a memory leak occurring while parsing some malformed records, due to the fact that some memory is allocated parsing a record and is not always properly released if the record is not valid. It allows a malicious auth server to cause a...
MGASA-2019-0010 Updated php-phpmailer package fixes security vulnerability
Potential object injection vulnerability CVE-2018-19296...
MGASA-2019-0008 Updated pdns packages fix security vulnerabilities
A vulnerability was in found in PowerDNS Authoritative Server. The issue is a memory leak occurring while parsing some malformed records, due to the fact that some memory is allocated parsing a record and is not always properly released if the record is not valid. It allows an authorized user to...
MGASA-2019-0002 Updated xmlrpc packages fix security vulnerabilities
XML external entity XXE vulnerability in the Apache XML-RPC aka ws-xmlrpc library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted DTD CVE-2016-5002. A flaw was discovered in the Apache XML-RPC ws-xmlrpc library that...
MGASA-2019-0005 Updated plexus-archiver packages fix security vulnerability
A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attacker could use this vulnerability to write files outside the target directory and overwrite existing files with malicious code or...
MGASA-2019-0011 Updated ldb, talloc, and samba packages fix security vulnerabilities
Florian Stuelpner discovered that Samba is vulnerable to infinite query recursion caused by CNAME loops, resulting in denial of service CVE-2018-14629. Alex MacCuish discovered that a user with a valid certificate or smart card can crash the Samba AD DC's KDC when configured to accept smart-card...
MGASA-2019-0001 Updated pache-commons-compress packages fix security vulnerabilities
A flaw was found in Apache Commons Compress versions 1.11 to 1.15. A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount ...
MGASA-2018-0496 Updated graphicsmagick packages fix security vulnerabilities & bugs
Graphicsmagick has been updated to fix several bugs and security issues...
MGASA-2018-0497 Updated python-lxml packages fix security vulnerability
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer CVE-2018-19787...
MGASA-2018-0498 Updated poppler packages fix security vulnerability
Poppler before 0.70.0 has a NULL pointer dereference in popplerattachmentnew when called from popplerannotfileattachmentgetattachment. CVE-2018-19149...
MGASA-2018-0495 Updated python packages fix security vulnerabilities
Possible denial of service vulnerability due to a missing check in Lib/wave.py to verify that at least one channel is provided CVE-2017-18207. Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service...
MGASA-2018-0494 Updated keepalived package fixes security vulnerabilities
keepalived before version 2.0.9 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protectedsymlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data ...
MGASA-2018-0493 Updated libtiff packages fix security vulnerabilities
Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service crash or possibly have unspecified other impact via a crafted TIFF file. CVE-2018-12900 LibTIFF 4.0.9 with JBIG enabled decodes arbitrarily-sized...
MGASA-2018-0492 Updated tcpdump package fixes security vulnerability
Fixed a stack-based buffer over-read in the printprefix function CVE-2018-19519...
MGASA-2018-0491 Updated ruby-i18n packages fix security vulnerability
A flaw was found in the i18n gem before 0.8.0 for Ruby. The Hashslice in lib/i18n/coreext/hash.rb allows remote attackers to cause a denial of service application crash via a call in a situation where :somekey is present in keepkeys but not present in the hash CVE-2014-10077...
MGASA-2018-0490 Updated monit packages fix security vulnerability
There is a use-after-free in monit that shows up if you run it for a while on an active system with address sanitizer enabled...
MGASA-2018-0488 Updated thunderbird packages fix security vulnerabilities & bugs
The updated packages fix several bugs and some security issues...
MGASA-2018-0489 Updated sqlite3 packages fix security vulnerability
A security issue fixed upstream in sqlite3 has been announced: https://www.openwall.com/lists/oss-security/2018/12/21/1 The issue is fixed in 3.25.3...
MGASA-2018-0487 Updated kernel packages fix security vulnerabilities
This kernel update is based on the upstream 4.14.89 and fixes at least the following security issues: Cross-hyperthread Spectre v2 mitigation is now provided by the Single Thread Indirect Branch Predictors STIBP support. Note that STIBP also requires the functionality be supported by the Intel...
MGASA-2018-0486 Updated phpmyadmin packages fix security vulnerabilities
XSS vulnerability in navigation tree was discovered - Local file inclusion through transformation feature...
MGASA-2018-0484 Updated php packages fix security vulnerability
Bypassing disabled exec functions in PHP via imapopen CVE-2018-19518...
MGASA-2018-0485 Updated netty & jctools packages fix security vulnerability
handler/ssl/OpenSslEngine.java in Netty before 4.0.37.Final allows remote attackers to cause a denial of service infinite loop CVE-2016-4970...
MGASA-2018-0480 Updated thunderbird packages fix security issues & bugs
Buffer overflow using computed size of canvas element. CVE-2018-12359 - Use-after-free when using focus. CVE-2018-12360 - Integer overflow in SwizzleData. CVE-2018-12361 - Integer overflow in SSSE3 scaler. CVE-2018-12362 - Media recorder segmentation fault when track type is changed during...
MGASA-2018-0483 Updated firefox packages fix security vulnerabilities
A buffer overflow and out-of-bounds read can occur in TextureStorage11 within the ANGLE graphics library, used for WebGL content. This results in a potentially exploitable crash CVE-2018-17466. A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to...
MGASA-2018-0482 Updated nss packages fix security vulnerability
Cache side-channel variant of the Bleichenbacher attack.CVE-2018-12404...
MGASA-2018-0481 Updated libwpd packages fix security vulnerability
It was discovered there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack CVE-2018-19208...
MGASA-2018-0479 Updated tomcat packages fix security vulnerabilities
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service CVE-2018-1336. The defaults settings for the CORS filter are insecure and enable supportsCredentials for all origins. It is expected that user...
MGASA-2018-0478 Updated flash-player-plugin packages fix security vulnerability
Use after free flaw enabling arbitrary code execution. CVE-2018-15982 Insecure Library Loading DLL hijacking flaw enabling privilege escalation. CVE-2018-15983...