2018年9月27日木曜日
27日 木曜日、先勝
+ Linux kernel 4.18.10, 4.14.72, 4.9.129, 4.4.158, 3.18.123 released
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.10
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.72
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.129
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.158
https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.123
+ WebKit WebCore::SVGTextLayoutAttributes::context Use-After-Free
https://cxsecurity.com/issue/WLB-2018090242
CVE-2018-4318
+ WebKit WebCore::InlineTextBox::paint Out-Of-Bounds Read
https://cxsecurity.com/issue/WLB-2018090241
CVE-2018-4328
+ WebKit WebCore::RenderMultiColumnSet::updateMinimumColumnHeight Use-After-Free
https://cxsecurity.com/issue/WLB-2018090240
CVE-2018-4323
+ WebKit WebCore::RenderLayer::updateDescendantDependentFlags Use-After-Free
https://cxsecurity.com/issue/WLB-2018090239
CVE-2018-4317
+ WebKit WebCore::SVGAnimateElementBase::resetAnimatedType Use-After-Free
https://cxsecurity.com/issue/WLB-2018090238
CVE-2018-4314
+ WebKit WebCore::SVGTRefElement::updateReferencedText Use-After-Free
https://cxsecurity.com/issue/WLB-2018090237
CVE-2018-4315
+ WebKit WebCore::AXObjectCache::handleMenuItemSelected Use-After-Free
https://cxsecurity.com/issue/WLB-2018090236
CVE-2018-4312
+ WebKit WebCore::Node::ensureRareData Use-After-Free
https://cxsecurity.com/issue/WLB-2018090235
CVE-2018-4306
+ WebCore::RenderTreeBuilder::removeAnonymousWrappersForInlineChildrenIfNeeded Use-After-Free
https://cxsecurity.com/issue/WLB-2018090234
CVE-2018-4197
VU#581311 TP-Link EAP Controller lacks RMI authentication and is vulnerable to deserialization attacks
https://www.kb.cert.org/vuls/id/581311
2016年9月27日火曜日
27日 火曜日、仏滅
+ Mozilla Firefox 49.0.1 released
https://www.mozilla.org/en-US/firefox/49.0.1/releasenotes/
+ SA72410 OpenSSL Large Message Handling Use-After-Free Vulnerability
https://secunia.com/advisories/72410/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6309
+ SA72514 OpenSSL CRL Sanity Check Denial of Service Vulnerability
https://secunia.com/advisories/72514/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052
+ OpenSSL CVE-2016-7052 Denial of Service Vulnerability
http://www.securityfocus.com/bid/93171
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052
登録:
投稿 (Atom)

