that are cached against a given hostname). The impact is: Information disclosure (credentials, cookies, etc.

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. See How to fix? for Debian:8 relevant fixed versions and status. Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Debian:8. Libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612. Upgrade Debian:8 libxslt to version 1.1.28-2+deb8u5 or higher. Libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.

Note: Versions mentioned in the description apply only to the upstream libxslt package and not the libxslt package as distributed by Debian:8. There is no fixed version for Debian:8 libxml2. See How to fix? for Debian:8 relevant fixed versions and status.įormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. Note: Versions mentioned in the description apply only to the upstream libxml2 package and not the libxml2 package as distributed by Debian:8. There is no fixed version for Debian:8 glibc. Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function. Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Debian:8.

For apple instal One Commander 3.48.1