A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches (CVE-2018-6951). A double-free flaw was found in the way the patch utility processed . MGASA-2018-0448 - Updated patch packages fix security vulnerabilities Publication date: 15 Nov 2018 URL: https://advisories.mageia.org/MGASA-2018-0448.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-6951, CVE-2018-6952 A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches (CVE-2018-6951). A double-free flaw was found in the way the patch utility processed patch files. An attacker could potentially use this flaw to crash the patch utility by tricking it into processing crafted patches (CVE-2018-6952). References: - https://bugs.mageia.org/show_bug.cgi?id=23704 - https://lists.fedoraproject.org/archives/list/
Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in LibYAML, a fast YAML 1.1 parser and emitter library. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3102-1
Get the latest Linux and open source security news straight to your inbox.