Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2022-0046: libtiff security upda
LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field…
Mageia 2021-0305: p7zip security upda
In p7zip-17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStreaWrite where a memcpy uses a NULL pointer as des…
Mageia 2020-0338: freerdp security upda
Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and…
Debian LTS: DLA-2304-1: libpam-radius-auth security upda
`add_password` in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer ov…
Mageia 2020-0019: freeimage security upda
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file,…