The updated packages fix a security vulnerability: In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. Us… Continue Reading — Mageia 2020-0273: libexif security update>
Unix, Linux, DevOps , Cloud computing and BigData Knowledge-Base
Updated vlc packages fixes security vulnerability: A heap-based buffer overflow in the hxxx_AnnexB_to_xVC function in modules/packetizer/hxxx_nal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service (applica… Continue Reading — Mageia 2020-0272: vlc security update>
Updated libxml2 packages fix security vulnerability: The fix for CVE-2019-19956 introduced regressions which can cause invalid xmlns references in output and memory leaks, possibly leading to more serious security issues. The broken fix has been revert… Continue Reading — Mageia 2020-0271: libxml2 security update>
The updated packages fix a security vulnerability: Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions Continue Reading — Mageia 2020-0270: libupnp...
Updated python-httplib2 packages fix security vulnerability: In httplib2, an attacker controlling unescaped part of uri for httplib2.Http.request() could change request headers and body, send additional hidden requests to same server. This vulnerabilit… Continue Reading — Mageia 2020-0269: python-httplib2 security update>
New libvorbis packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Continue Reading — Slackware: 2020-186-01: libvorbis Security Update>
# Python 3.6.11 Python 3.6.11 is the latest security fix release of Python 3.6. – bpo-39073: Disallow CR or LF in email.headerregistry.Address arguments to guard against header injection attacks. – bpo-38576: Disallow control characters in hostnames in… Continue Reading — Fedora 32: python36 2020-8bdd3fd7a4>