SUSE-SU-2017:1357-1 Security update for git

This update for git fixes the following issues: - git 2.12.3: CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 Fix for potential segv introduced in v2.11.0 and later Misc fixes and cleanups. - git 2.12.2: CLI output fixes 'Dump http' transport fixes various fixes...

JVN#34900750: EC-CUBE vulnerable to code injection

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a code injection vulnerability. Impact Arbitrary PHP code may be executed with the privilege of the application on the server where it resides. Solution Apply the update or patch Apply the updat...

GNU glibc 2.12.2 - fnmatch() Stack Corruption

GNU glibc 2.12.2 - fnmatch Stack Corruption / source: https://www.securityfocus.com/bid/46563/info GNU glibc is prone to a stack-corruption vulnerability. An attacker can exploit this issue to execute arbitrary machine code in the context of the application that uses the affected library. Failed...