Fedora 31 : freeipa (2019-c64e1612f5)

FreeIPA 4.8.3 is a security update release that includes fixes for two issues : - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch A flaw was found in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on...

Fedora 30 : freeipa (2019-8e9093da55)

FreeIPA 4.8.3 is a security update release that includes fixes for two issues : - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch A flaw was found in the way that FreeIPA's batch processing API logged operations. This included passing user passwords in clear text on...

FreeIPA Multiple Vulnerabilities (Nov 2019)

FreeIPA is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:freeipa:freeipa"; if description...

Security fix for the ALT Linux 8 package freeipa version 4.3.3-alt20

4.3.3-alt20 built Nov. 28, 2019 Stanislav Levin in task 241733 Nov. 26, 2019 Stanislav Levin - Applied security patches fixes: CVE-2019-14867, CVE-2019-10195...

CVE-2019-14867

The CVE-2019-14867 issue affects IPA/FreeIPA: the internal ber_scanf() usage in some IPA server components that parse Kerberos key data. Affected are all 4.6.x prior to 4.6.7, all 4.7.x prior to 4.7.4, and all 4.8.x prior to 4.8.3. An unauthenticated attacker who can trigger parsing of the krb pr...

EulerOS 2.0 SP5 : git (EulerOS-SA-2019-2153)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal...

CVE-2018-14867

creationtimestamp| type| source ---|---|--- 2019-06-28 22:29:37+00:00| seen| https://t.me/cibsecurity/5220...

CVE-2018-14867

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters...

CVE-2018-14867

CVE-2018-14867 concerns Odoo’s portal messaging system where an incorrect access control flaw in Odoo Community (versions 9.0 and 10.0) and Odoo Enterprise (9.0 and 10.0) allows remote attackers to post messages on behalf of customers and to guess document attribute values by crafting parameters....

Debian: Security Advisory (DLA-1120-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated git packages fix security vulnerability

The git subcommand cvsserver is a Perl script which makes excessive use of the backtick operator to invoke git. Unfortunately user input is used within some of those invocations, which can be a OS Command Injection vulnerability CVE-2017-14867...

EulerOS 2.0 SP1 : git (EulerOS-SA-2017-1265)

According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support...

openSUSE Security Update : git (openSUSE-2017-1167)

This update for git fixes the following issues : This security issue was fixed : - CVE-2017-14867: Git used unsafe Perl scripts to support subcommands such as cvsserver, which allowed attackers to execute arbitrary OS commands via shell metacharacters in a module name bsc1061041. This update was...

openSUSE: Security Advisory for git (openSUSE-SU-2017:2757-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for git (important)

This update for git fixes the following issues: This security issue was fixed: - CVE-2017-14867: Git used unsafe Perl scripts to support subcommands such as cvsserver, which allowed attackers to execute arbitrary OS commands via shell metacharacters in a module name bsc1061041. This update was...

SUSE SLES12 Security Update : git (SUSE-SU-2017:2747-1)

This update for git fixes the following issues: This security issue was fixed : - CVE-2017-14867: Git used unsafe Perl scripts to support subcommands such as cvsserver, which allowed attackers to execute arbitrary OS commands via shell metacharacters in a module name bsc1061041. Note that Tenable...

SUSE-SU-2017:2747-1 Security update for git

This update for git fixes the following issues: This security issue was fixed: - CVE-2017-14867: Git used unsafe Perl scripts to support subcommands such as cvsserver, which allowed attackers to execute arbitrary OS commands via shell metacharacters in a module name bsc1061041...

SUSE-SU-2017:2717-1 Security update for git

This update for git fixes the following issues: - CVE-2017-14867: A cvsserver perl script command injection was fixed CVE-2017-14867, bsc1061041:...

Medium: git

Issue Overview: Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The...

openSUSE Security Update : git (openSUSE-2017-1115)

This update for git to version 2.13.6 fixes the following issues : - CVE-2017-14867: Various Perl scripts did not use safepipecapture instead of backticks, leaving them susceptible to end-user input boo1061041 As an additional measure, 'git cvsserver' no longer is invoked by 'git daemon' by...