You are here
Security
DSA-6560-1 firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, sandbox escape, information disclosure, mitigation bypass or
privilege escalation.
Categories: Security
DSA-6559-1 buildstream - security update
It was discovered that missing validation of tar sources in the
Buildstream software integration tool could allow to write files on the
build host.
Categories: Security
DSA-6558-1 curl - security update
It was discovered that the cURL URL transfer library, is prone to a
use-after-free vulnerability when handling a HTTP/2 RST_STREAM received
by a server during an upload, which could result in remote code
execution.
Categories: Security
DSA-6557-1 ntfs-3g - security update
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS
driver for FUSE, which could result in denial of service, information
leak or potentially local root privilege escalation.
Categories: Security
DSA-6556-1 nagios4 - security update
Multiple security vulnerabilities were discovered in the Nagios
monitoring system, which could result in cross-site request forgery,
cross-site scripting or the execution of arbitrary commands.
Categories: Security
DSA-6555-1 librsvg - security update
It was discovered that librsvg, a library to render Scalable Vector
Graphics, incorrectly parsed files with nested XML includes, which could
result in denial of service or potentially the execution of arbitrary
code.
Categories: Security
DSA-6554-1 keystone - security update
A vulnerability was discovered in the handling of delegated
authentication in Keystone, the OpenStack identity service, which may
result in information disclosure of privilege escalation.
Categories: Security
DSA-6553-1 chromium - security update
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
Categories: Security
DSA-6552-1 vips - security update
Several vulnerabilities have been discovered in vips, a fast image
processing library. These vulnerabilities could result in denial of service,
memory safety issues, or other security impact when processing specially
crafted image files or data.
Categories: Security
DSA-6551-1 tor - security update
Multiple security vulnerabilities were discovered in Tor, a connection-
based low-latency anonymous communication system.
Categories: Security
Pages
Co-authored by Creative Contingencies's Peter Lieverdink.