Closed
Milestone
expired on Dec 20, 2016
3.4.7
Bugfix release 3.4.7
(from redmine: created on 2016-11-08)
Unstarted Issues (open and unassigned)
0
Ongoing Issues (open and assigned)
0
Completed Issues (closed)
230
- [3.4] xfsprogs: Security: wrong owner / group on XFS binaries
- [3.4] wavpack: Multiple vulnerabilities (CVE-2018-10536, CVE-2018-10537, CVE-2018-10538, CVE-2018-10539, CVE-2018-10540)
- [3.4] curl: Multiple vulnerabilities (CVE-2018-1000300, CVE-2018-1000301)
- [3.4] xen: Multiple vulnerabilities (CVE-2018-10471, CVE-2018-10472, CVE-2018-8897, CVE-2018-10981, CVE-2018-10982)
- [3.4] wget: Cookie injection vulnerability (CVE-2018-0494)
- [3.4] memcached: UDP server support allows spoofed traffic amplification DoS (CVE-2018-1000115)
- [3.4] jq: stack exhaustion via jv_dump_term() function (CVE-2016-4074)
- [3.4] Ruby 2.2.9, 2.3.6, 2.4.3, 2.5.0 Multiple Vulnerabilitie
- [3.4] uwsgi: Multiple vulnerabilities (CVE-2018-6758, CVE-2018-7490)
- [3.4] apache2: Multiple vulnerabilities (CVE-2017-15710, CVE-2017-15715, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1283, CVE-2018-1312)
- [3.4] kamailio: A Buffer Overflow (CVE-2018-8828)
- [3.4] tiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c (CVE-2018-5784)
- [3.4] clamav: Multiple vulnerabilities (CVE-2018-0202, CVE-2018-1000085)
- [3.4] mariadb: Multiple vulnerabilities (CVE-2017-10268, CVE-2017-10378, CVE-2017-15365, CVE-2018-2562, CVE-2018-2612, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668)
- [3.4] rsync: sanitization bypass in parse_argument in options.c (CVE-2018-5764)
- [3.4] samba: Multiple vulnerabilities (CVE-2018-1050, CVE-2018-1057)
- [3.4] curl: Multiple vulnerabilities (CVE-2018-1000120, CVE-2018-1000121, CVE-2018-1000122)
- [3.4] py-django: Multiple vulnerabilitie (CVE-2018-7536, CVE-2018-7537)
- [3.4] xen: Multiple vulnerabilitie (CVE-2018-7540, CVE-2018-7541)
- [3.4] wavpack: Multiple vulnerabilities (CVE-2018-6767, CVE-2018-7253, CVE-2018-7254)
- [3.4] cups: A localhost.localdomain whitelist entry in valid_host() (CVE-2017-18190)
- [3.4] squid: Multiple vulnerabilities (CVE-2018-1000024, CVE-2018-1000027)
- [3.4] python: PyString_DecodeEscape integer overflow (CVE-2017-1000158)
- [3.4] libtasn1: Stack exhaustion due to indefinite recursion during BER decoding (CVE-2018-6003)
- [3.4] xen: Multiple vulnerabilities (CVE-2017-17563, CVE-2017-17564, CVE-2017-17565, CVE-2017-17566, CVE-2017-5753, CVE-2017-5715, CVE-2017-5754)
- [3.4] libvorbis: Multiple vulnerabilities (CVE-2017-14632, CVE-2017-14633)
- [3.4] Tiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() (CVE-2017-18013)
- [3.4] curl: Multiple vulnerabilities (CVE-2018-1000005, CVE-2018-1000007)
- [3.4] bind: Improper fetch cleanup sequencing in the resolver can cause named to crash (CVE-2017-3145)
- [3.4] libxml2: Mishandling parameter-entity references (CVE-2017-16931)
- [3.4] ncurses:Stack based buffer overflow (CVE-2017-16879)
- [3.4) awstats: Path traversal flaws (CVE-2017-1000501)
- [3.4] asterisk: Multiple vulnerabilities (CVE-2017-16671, CVE-2017-16672, CVE-2017-17090, CVE-2017-17664, CVE-2017-17850)
- [3.4] gd: Multiple vulnerabilities (CVE-2017-6362, CVE-2017-7890)
- [3.4] rsync: Several vulnerabilities (CVE-2017-16548, CVE-2017-17433, CVE-2017-17434)
- [3.4] openssh: Improper write operations in readonly mode allow for zero-length file creation (CVE-2017-15906)
- [3.4] openssl: Multiple vulnerabilities (CVE-2017-3737, CVE-2017-3738)
- [3.4] libxcursor: heap overflows when parsing malicious files (CVE-2017-16612)
- [3.4] libxfont: Open files with O_NOFOLLOW (CVE-2017-16611)
- [3.4] xen: Multiple vulnerabilities (CVE-2017-17044, CVE-2017-17045)
- [3.4] curl: Multiple vulnerabilities (CVE-2017-8816, CVE-2017-8817)
- [3.4] ffmpeg: Multiple vulnerabilities (CVE-2017-9991, CVE-2017-9992, CVE-2017-9993, CVE…CVE-2017-14767, CVE-2017-15186)
- [3.4] busybox: Multiple vulnerabilities (CVE-2017-15873, CVE-2017-16544)
- [3.4] samba: Multiple vulnerabilities (CVE-2017-14746, CVE-2017-15275)
- [3.4] varnish: Data leak - ‘-sfile’ Stevedore transient objects (CVE-2017-8807)
- [3.4] postgresql: Multiple vulnerabilities (CVE-2017-12172, CVE-2017-15098, CVE-2017-15099)
- [3.4] tiff: memory-based DoS in tiff2bw (CVE-2017-16232)
- [3.4] pcre: match() stack overflow (CVE-2017-16231)
- [3.4] openvpn: remote buffer overflow (CVE-2017-12166)
- [3.4] openssl: Multiple vulnerabilities (CVE-2017-3735, CVE-2017-3736)
- [3.3] quagga: remote denial of service via BGP UPDATE messages (CVE-2017-16227)
- [3.4] quagga: remote denial of service via BGP UPDATE messages (CVE-2017-16227)
- [3.4] wget: Multiple vulnerabilities (CVE-2017-13089, CVE-2017-13090)
- [3.4] xen: Multiple vulnerabilities (CVE-2017-15588, CVE-2017-15589, CVE-2017-15590, CVE-2017-15593, CVE-2017-15592, CVE-2017-15594, CVE-2017-15595, CVE-2017-15597)
- [3.4] curl: IMAP FETCH response out of bounds read (CVE-2017-1000257)
- [3.4] CVE-2017-15650 musl
- [3.4] wireshark: Multiple vulnerabilities (CVE-2017-15191)
- [3.4] ghostscript: Multiple vulnerabilities (CVE-2017-9611, CVE-2017-9612, CVE-2017-9726, CVE-2017-9727, CVE-2017-9739, CVE-2017-9835, CVE-2017-11714)
- [3.4] db: Multiple vulnerabilities (CVE-2017-3604, CVE-2017-3605, CVE-2017-3606, CVE-2017-3607, CVE-2017-3608, CVE-2017-3609, CVE-2017-3610, CVE-2017-3611, CVE-2017-3612, CVE-2017-3613, CVE-2017-3614, CVE-2017-3615, CVE-2017-3616, CVE-2017-3617)
- [3.4] ncurses: Multiple vulnerabilities (CVE-2017-11112, CVE-2017-11113, CVE-2017-13728, CVE-2017-13729, CVE-2017-13730, CVE-2017-13731, CVE-2017-13732, CVE-2017-13733, CVE-2017-13734)
- [3.4] curl: FTP PWD response parser out of bounds read (CVE-2017-1000254)
- [3.4] sqlite: Heap-buffer overflow in the getNodeSize function (CVE-2017-10989)
- [3.4] libvorbis: out-of-bounds access and application crash (CVE-2017-14160)
- [3.4] wireshark: Multiple vulnerabilities (CVE-2017-13765, CVE-2017-13767)
- [3.4] strongswan: Insufficient Input Validation in gmp Plugin (CVE-2017-11185)
- [3.4] perl: Multiple vulnerabilities (CVE-2016-1238, CVE-2017-12837, CVE-2017-12883)
- [3.4] samba: Multiple vulnerabilities (CVE-2017-12150, CVE-2017-12151, CVE-2017-12163)
- [3.4] newsbeuter: remote code execution (CVE-2017-14500)
- [3.4] gdk-pixbuf: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function (CVE-2017-2862)
- [3.4] bluez: Out-of-bounds heap read in service_search_attr_req function (CVE-2017-1000250)
- [3.4] tcpdump: Multiple vulnerabilities (Various CVEs)
- [3.4] libgcrypt: Missing input validation for X25519 curve (CVE-2017-0379)
- [3.4] xen: Multiple vulnerabilities (CVE-2017-14316, CVE-2017-14317, CVE-2017-14318, CVE-2017-14319)
- [3.4] libarchive: heap-based buffer overflow in xml_data (CVE-2017-14166)
- [3.4] asterisk: Multiple vulnerabilities (CVE-2017-14099, CVE-2017-14100)
- [3.4] libmspack: Multiple vulnerabilities (CVE-2017-6419, CVE-2017-11423)
- [3.4] libraw: Multiple vulnerabilities (CVE-2017-6886, CVE-2017-6887)
- [3.4] xen: Multiple vulnerabilities (CVE-2017-12135, CVE-2017-12137, CVE-2017-12136, CVE-2017-12134, CVE-2017-12855)
- [3.4] newsbeuter: Remote code execution (CVE-2017-12904)
- [3.4] augeas: Improper handling of escaped strings leading to memory corruption (CVE-2017-7555)
- [3.4] openjpeg: memory allocation failure in opj_aligned_alloc_n (opj_malloc.c) (CVE-2017-12982)
- [3.4] mariadb: Multiple vulnerabilities (CVE-2017-3308, CVE-2017-3309, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3636, CVE-2017-3641, CVE-2017-3653)
- [3.4] mercurial: Multiples vulnerabilities (CVE-2017-9462, CVE-2017-1000115, CVE-2017-1000116)
- [3.4] supervisor: Command injection via malicious XML-RPC request (CVE-2017-11610)
- [3.4] libsoup: Stack based buffer overflow with HTTP Chunked Encoding (CVE-2017-2885)
- [3.4] subversion: Arbitrary code execution on clients through malicious svn+ssh URLs (CVE-2017-9800)
- [3.4] postgresql: Multiple vulnerabilities (CVE-2017-7546, CVE-2017-7547, CVE-2017-7548)
- [3.4] curl: Multiple vulnerabilities (CVE-2017-1000100, CVE-2017-1000101)
- [3.4] libsndfile: Heap-based Buffer Overflow (CVE-2017-12562)
- [3.4] memcached: Heap-based buffer over-read in try_read_command function (CVE-2017-9951)
- [3.4] tcpdump: heap-based buffer over-read and application crash (CVE-2017-11108)
- [3.4] lame: Multiple vulnerabilities (CVE-2015-9099, CVE-2015-9100, CVE-2017-9410, CVE-2017-9411, CVE-2017-9412, CVE-2017-11720)
- [3.4] libtasn1: NULL pointer dereference in the _asn1_check_identifier function (CVE-2017-10790)
- [3.4] mpg123: global buffer overflow in III_i_stereo (layer3.c) (CVE-2017-11126)
- [3.4] spice: Possible buffer overflow via invalid monitor configurations (CVE-2017-7506)
- [3.4] jasper: NULL pointer exception in the function jp2_encode (CVE-2017-1000050)
- [3.4] ncurses: buffer overflow in the fmt_entry function(CVE-2017-10684, CVE-2017-10685)
- [3.4] wireshark: Multiple vulnerabilities (CVE-2017-11406, CVE-2017-11407, CVE-2017-11408, CVE-2017-11409)
- [3.4] libmtp: various flaws (CVE-2017-9831, CVE-2017-9832)
- [3.4] heimdal: Orpheus' Lyre KDC-REP service name validation (CVE-2017-11103)
- [3.4] samba: Orpheus' Lyre mutual authentication validation bypass (CVE-2017-11103)
- [3.4] c-ares: NAPTR parser out of bounds access (CVE-2017-1000381)
- [3.4] nginx: Integer overflow in nginx range filter module leading to memory disclosure (CVE-2017-7529)
- [3.4] irssi: Multiple issues (CVE-2017-10965, CVE-2017-10966)
- [3.4] xen: Multiple vulnerabilities (CVE-2017-10911, CVE-2017-10912, CVE-2017-10913, CVE-2017-10914, CVE-2017-10915, CVE-2017-10916, CVE-2017-10917, CVE-2017-10918, CVE-2017-10920, CVE-2017-10921, CVE-2017-10922)
- [3.4] bind: Multiple vulnerabilities (CVE-2017-3142, CVE-2017-3143)
- [3.4] tiff: Multiple vulnerabilities (CVE-2017-9147, CVE-2017-9403, CVE-2017-9404, CVE-2017-9936, CVE-2017-10688)
- [3.4] Libgcrypt 1.7.8 released to fix CVE-2017-7526
- [3.4] apache2: Several vulnerabilities (CVE-2017-3167, CVE-2017-3169, CVE-2017-7659, CVE-2017-7668, CVE-2017-7679)
- [3.4] libsndfile: Multiple vulnerabilities (CVE-2017-8361, CVE-2017-8362, CVE-2017-8363, CVE-2017-8365)
- [3.4] libgcrypt: Possible timing attack on EdDSA session key (CVE-2017-9526)
- [3.4] graphite2: Multiple vulnerabilities (CVE-2017-7771, CVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776, CVE-2017-7777, CVE-2017-7778)
- [3.4] gnutls: Crash upon receiving well-formed status_request extension (CVE-2017-7507)
- [3.4] irssi: Multiple vulnerabilities (CVE-2017-9468, CVE-2017-9469)
- Ruby 2.3.1-r0 - Multiple vulnerabilities
- yaml 0.1.6-r1 (CVE-2014-9130)
- [3.4] wireshark: Multiple vulnerabilities (CVE-2017-9343, CVE-2017-9344, CVE-2017-9345, CVE-2017-9346, CVE-2017-9347, CVE-2017-9348, CVE-2017-9349, CVE-2017-9350, CVE-2017-9351, CVE-2017-9352, CVE-2017-9354)
- [3.4] mosquitto: Pattern based ACLs can be bypassed (CVE-2017-7650)
- [3.4] openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (CVE-2017-9287)
- [3.4] zlib: Multiple vulnerabilities (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843)
- [3.4] strongswan: Multiple vulnerabilities (CVE-2017-9022, CVE-2017-9023)
- [3.4] libtasn1: asn1_find_node() based stackoverflow (CVE-2017-6891)
- [3.4] samba: Remote code execution from a writable share (CVE-2017-7494)
- [3.4] ghostscript: Multiple vulnerabilities (CVE-2016-10217, CVE-2016-10218, CVE-2016-10219, CVE-2016-10220, CVE-2017-5951, CVE-2017-7207, CVE-2017-8291)
- [3.4] nss: Write beyond bounds caused by bugs in Base64 de/encoding in nssb64d.c and nssb64e.c (CVE-2017-5461)
- [3.4] dropbear: Multiple vulnerabilities (CVE-2017-9078, CVE-2017-9079)
- [3.4] xen: Multiple issues (CVE-2017-8903, CVE-2017-8904, CVE-2017-8905)
- [3.4] freetype: Multiple vulnerabilities (CVE-2016-10244, CVE-2017-8105, CVE-2017-8287)
- [3.4] gst-plugins-ugly1: Multiple issues (CVE-2017-5846, CVE-2017-5847)
- [3.4] gst-plugins-base1: Multiple vulnerabilities (CVE-2016-9811, CVE-2017-5837, CVE-2017-5839, CVE-2017-5842, CVE-2017-5844)
- [3.4] gst-plugins-bad1: Multiple issues (CVE-2016-9809, CVE-2016-9812, CVE-2016-9813, CVE-2017-5843, CVE-2017-5848)
- [3.4] gst-plugins-good1: Multiple vulnerabilities (CVE-2016-10198, CVE-2016-10199, CVE-2016-9634, CVE-2016-9635, CVE-2016-9636, CVE-2016-9808, CVE-2017-5840, CVE-2017-5841, CVE-2017-5845)
- [3.4] gd: Multiple vulnerabilities (CVE-2016-6906, CVE-2016-9317, CVE-2016-6912, CVE-2016-10166, CVE-2016-10167, CVE-2016-10168)
- [3.4] weechat: Buffer overflow in the irc_ctcp_dcc_filename_without_quotes function (CVE-2017-8073)
- [3.4] icu: multiple issues (CVE-2017-7867, CVE-2017-7868)
- [3.4] wireshark: Multiple issues (CVE-2017-7700, CVE-2017-7701, CVE-2017-7702, CVE-2017-7703, CVE-2017-7705)
- [3.4] curl: TLS session resumption client cert bypass (CVE-2017-7468)
- [3.4] binutils: NULL pointer dereference in bfd_elf_final_link function (CVE-2017-7614)
- [3.4] libsamplerate: Buffer overflow in calc_output_single (CVE-2017-7697)
- [3.4] bind: Multiple vulnerabilities (CVE-2017-3136, CVE-2017-3137, CVE-2017-3138)
- [3.4] curl: write-out out of buffer read (CVE-2017-7407)
- [3.4] libxml2: XML External Entity vulnerability (CVE-2016-9318)
- [3.4] tiff: Multiple vulnerabilities (CVE-2017-7592, CVE-2017-7593, CVE-2017-7594, CVE-2017-7595, CVE-2017-7596, CVE-2017-7597, CVE-2017-7598, CVE-2017-7599, CVE-2017-7600, CVE-2017-7601, CVE-2017-7602)
- [3.4] xen: Multiple issues (CVE-2016-9603, CVE-2017-7228)
- [3.4] py-django: security issues (CVE-2017-7233, CVE-2017-7234)
- [3.4] wget: CRLF injection in the url_parse function in url.c (CVE-2017-6508)
- [3.4] curl: SSL_VERIFYSTATUS ignored (CVE-2017-2629 )
- [3.4] putty: Integer overflow in the ssh_agent_channel_data (CVE-2017-6542)
- [3.4] libxslt: integer overflow in xsltAddTextString (CVE-2017-5029)
- [3.4] samba: Symlink race allows access outside share definition (CVE-2017-2619)
- [3.4] wireshark: Multiple issues (CVE-2017-6467, CVE-2017-6468, CVE-2017-6469, CVE-2017-6470, CVE-2017-6471, CVE-2017-6472, CVE-2017-6473, CVE-2017-6474)
- [3.4] mariadb: Multiple vulnerabilities (CVE-2017-3313, CVE-2017-3302)
- [3.4] pidgin: Out-of-bounds write when stripping xml (CVE-2017-2640)
- [3.4] gdk-pixbuf: Multiple vulnerabilities (CVE-2017-6311, CVE-2017-6312, CVE-2017-6313, CVE-2017-6314)
- [3.4] apache2: Multiple vulnerabilities (CVE-2016-0736, CVE-2016-2161, CVE-2016-8740, CVE-2016-8743)
- [3.4] xen: Multiple issues (XSA-207, CVE-2017-2615, CVE-2017-2620)
- [3.4] expat: Multiple issues (CVE-2012-6702, CVE-2016-5300)
- [3.4] ffmpeg: heap overflows (CVE-2017-5024, CVE-2017-5025 ++)
- [3.4] vim: Tree length values not validated properly when handling a spell file (CVE-2017-5953)
- [3.4] libxml2: null pointer dereference when parsing a xml file using recover mode (CVE-2017-5969)
- [3.4] postfixadmin: allows to delete protected aliases (CVE-2017-5930)
- [3.4] bind: Combination of DNS64 and RPZ Can Lead to Crash (CVE-2017-3135)
- [3.4] wireshark: Multiple issues (CVE-2017-5596, CVE-2017-5597)
- [3.4] wavpack: multiple out of bounds memory reads (CVE-2016-10169, CVE-2016-10170, CVE-2016-10171, CVE-2016-10172)
- [3.4] tcpdump: Multiple vulnerabilities (Various CVEs)
- [3.4] libevent: Multiple issues (CVE-2016-10195, CVE-2016-10196, CVE-2016-10197)
- [3.4] libarchive: Out of bounds read in lha_read_file_header_1() function (CVE-2017-5601)
- [3.4] ansible: host to controller command execution vulnerability (CVE-2016-9587)
- [3.4] lcms2: Out-of-bounds read in Type_MLU_Read() (CVE-2016-10165)
- [3.4] openssl: Multiple issues (CVE-2017-3731, CVE-2017-3732, CVE-2016-7055)
- [3.4] libxpm: Out-of-bounds write in XPM extension parsing (CVE-2016-10164)
- [3.4] libgit2: Multiple vulnerabilities (CVE-2016-10128, CVE-2016-10129, CVE-2016-10130)
- [3.4] tiff: Heap-buffer overflow in tools/tiffcp via crafted BitsPerSample value (CVE-2017-5225)
- [3.4] mariadb: Multiple vulnerabilities (CVE-2016-6664, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3257, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3312, CVE-2017-3317, CVE-2017-3318)
- [3.4] irssi: Multiple vulnerabilities (CVE-2017-5193, CVE-2017-5194, CVE-2017-5356, CVE-2017-5195, CVE-2017-5196)
- [3.4] bind: Multiple security issues (CVE-2016-9131, CVE-2016-9147, CVE-2016-9444)
- [3.4] tiff: Multiple vulnerabilities (CVE-2016-9273, CVE-2016-9297, CVE-2016-9448, CVE-2016-9453)
- [3.4] bash: popd controlled free (CVE-2016-9401)
- [3.4] subversion: unrestricted XML entity expansion in mod_dontdothat and Subversion clients using http(s):// (CVE-2016-8734)
- [3.4] pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations (CVE-2016-10109)
- [3.4] phpmailer: Remote Code Execution (CVE-2016-10033, CVE-2016-10045)
- [3.4] busybox: NTP server denial of service flaw (CVE-2016-6301)
- [3.4] curl: printf floating point buffer overflow (CVE-2016-9586)
- [3.4] phpmyadmin: Multiple vulnerabilities (Various CVEs)
- [3.4] openssh: multiple issues (CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012)
- [3.4] squid: Multiple issues (CVE-2016-10002, CVE-2016-10003)
- [3.4] xen: Multiple issues (CVE-2016-10024, CVE-2016-10025, CVE-2016-10013)
- [3.4] openjpeg: Multiple issues (CVE-2016-9580, CVE-2016-9581)
- [3.4] samba: Several vulnerabilities (CVE-2016-2123, CVE-2016-2125, CVE-2016-2126)
- [3.4] libgsf: Null pointer dereference in tar_directory_for_file() (CVE-2016-9888)
- [3.4] icu: Stack based buffer overflow in locid.cpp (CVE-2016-7415)
- [3.4] xen: x86 CMPXCHG8B emulation fails to ignore operand size override (CVE-2016-9932)
- [3.4] libass: Multiple issues (CVE-2016-7969, CVE-2016-7970, CVE-2016-7971, CVE-2016-7972)
- [3.4] firefox-esr: various vulnerabilities (CVE-2016-9893, CVE-2016-9895, CVE-2016-9897, CVE-2016-9898, CVE-2016-9899, CVE-2016-9900, CVE-2016-9901, CVE-2016-9902, CVE-2016-9904, CVE-2016-9905)
- [3.4] p7zip: Null pointer dereference in 7zIn.cpp (CVE-2016-9296)
- [3.4] libgit2: Multiple issues (CVE-2016-8568, CVE-2016-8569)
- [3.4] vim: Lack of validation of values for few options results in code exection (CVE-2016-1248)
- [3.4] xen: Multiple issues (CVE-2016-9386, CVE-2016-9382, CVE-2016-9385, CVE-2016-9383, CVE-2016-9377, CVE-2016-9378, CVE-2016-9381, CVE-2016-9379, CVE-2016-9380)
- [3.4] drupal7: Multiple vulnerabilities (CVE-2016-9449, CVE-2016-9450, CVE-2016-9451, CVE-2016-9452)
- [3.4] wireshark: Multiple issues (CVE-2016-9374, CVE-2016-9376, CVE-2016-9373, CVE-2016-9375)
- [3.4] py-django: security issues (CVE-2016-9013, CVE-2016-9014)
- PHP 5.6.28 security release
- [3.4] memcached: Multiple issues (CVE-2016-8704, CVE-2016-8705, CVE-2016-8706)
- [3.4] mariadb: Multiple security vulnerabilities (Various CVEs)
- Update openjdk8-jre on Alpine Linux 3.4 (u92 -> u112+)
- [3.4] mercurial: HTTP server permissions bypass (CVE-2018-1000132)
- [3.4] openssl: Multiple vulnerabilities (CVE-2018-0737, CVE-2018-0739)
- [3.4] perl: Multiple vulnerabilities (CVE-2018-6797, CVE-2018-6798, CVE-2018-6913)
- [3.4] sqlite: NULL Pointer Dereference (CVE-2018-8740)
- [3.4] libvorbis: out-of-bounds write (CVE-2018-5146)
- [3.4] curl doesn't support SSH based protocols
- [3.4] libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c ((CVE-2018-7225)
- [3.4] p7zip: Multiple vulnerabilities (CVE-2017-17969, CVE-2018-5996)
- [3.4] irssi: Multiple vulnerabilities (CVE-2018-5205, CVE-2018-5206, CVE-2018-5207, CVE-2018-5208, CVE-2018-7050, CVE-2018-7051, CVE-2018-7052, CVE-2018-7053)
- [3.4] libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function (CVE-2017-16910)
- [3.4] heimdal: NULL pointer dereference via crafted UDP packets (CVE-2017-17439)
- [3.4] tiff: Heap-based buffer overflow bug in pal2rgb (CVE-2017-17095)
- [3.4] collectd: Multiple vulnerabilities (CVE-2017-7401, CVE-2017-16820)
- [3.4] irssi: Multiple vulnerabilities (CVE-2017-15721, CVE-2017-15722, CVE-2017-15723, CVE-2017-15227, CVE-2017-15228)
- [3.4] weechat: crash in logger plugin when converting date/time specifiers in file mask (CVE-2017-14727)
- [3.4] libraw: multiple issues (CVE-2017-13735, CVE-2017-14265)
- [3.4] openjpeg: Multiple vulnerabilities (CVE-2017-14039, CVE-2017-14040, CVE-2017-14041, CVE-2017-14151, CVE-2017-14152, CVE-2017-14164)
- [3.4] libxdmcp: weak entropy usage for session keys (CVE-2017-2625)
- openvpn
- [3.4] tiff: Multiple vulnerabilities (CVE-2016-3186, CVE-2016-3621, CVE-2016-3622, CVE-2016-3623, CVE-2016-3624, CVE.., CVE-2016-5320, CVE-2016-5321, CVE-2016-5323, CVE-2016-5652, CVE-2016-5875)
- Snort does not start, configuration appears to be broken
- Broken wine
- Download of cert from acf-openssl gives invalid file
- X freezes when startx is run
- PHP iconv not working properly
