Mageia: Security Advisory (MGASA-2022-0277)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0277 Updated chromium-browser-stable packages fix security vulnerability

1325699 High CVE-2022-2603: Use after free in Omnibox. Reported by Anonymous on 2022-05-16 1335316 High CVE-2022-2604: Use after free in Safe Browsing. Reported by Nan Wang@eternalsakura13 and Guang Gong of 360 Alpha Lab on 2022-06-10 1338470 High CVE-2022-2605: Out of bounds read in Dawn. Report...

Updated chromium-browser-stable packages fix security vulnerability

1325699 High CVE-2022-2603: Use after free in Omnibox. Reported by Anonymous on 2022-05-16 1335316 High CVE-2022-2604: Use after free in Safe Browsing. Reported by Nan Wang@eternalsakura13 and Guang Gong of 360 Alpha Lab on 2022-06-10 1338470 High CVE-2022-2605: Out of bounds read in Dawn. Report...

Stable Channel Promotion for ChromeOS

Hello All, The Stable channel is being updated to 104.0.5112.83 Platform version: 14909.100.0 for most ChromeOS devices and will be rolled out over the next few days. For Chrome browser fixes, see the Chrome Desktop release announcement. If you find new issues, please let us know one of the...

Oracle Enterprise Manager Cloud Control (Jan 2020 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager, Supported versions that are...

CVE-2020-2608

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Repository. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise...

CVE-2020-2608

CVE-2020-2608 affects Oracle Enterprise Manager Base Platform (Repository) with vulnerable versions 13.2.0.0 and 13.3.0.0. The issue allows a high-privilege attacker with network access over HTTP to gain unauthorized access to data across Enterprise Manager Base Platform, plus unauthorized update...

[SECURITY] Fedora 30 Update: openslp-2.0.0-22.fc30

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

openSUSE Security Update : freerdp (openSUSE-2019-2608)

This update for freerdp fixes the following issues : - CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. - CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. This update was imported from the SUSE:SLE-15-SP1:Update update project. ...

Virtuozzo Linux Errata and Bugfix Advisory 2019:2608

Upstream security update. Follow RHBA-2019:2608 for details...

CVE-2019-2608

CVE-2019-2608 involves Oracle Outside In Technology (Outside In Filters) used by IBM Rational DOORS Next Generation and IBM FileNet Content Manager. Affected versions include Oracle Outside In Technology 8.5.3 and 8.5.4; vulnerability allows unauthenticated network access via HTTP to read, update...

[SECURITY] Fedora 28 Update: openslp-2.0.0-18.fc28

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

CVE-2017-2608

Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs SECURITY-383...

CVE-2017-2608

Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs SECURITY-383...

CVE-2017-2608

CVE-2017-2608 is a remote-code-execution vulnerability in Jenkins via deserialization in XStream-based APIs (javax.imageio). Affected are Jenkins versions before 2.44 and 2.32.2 (as listed in multiple advisories). The flaw arises from improper validation of user-supplied input before deserializat...

CVE-2018-2608

The CVE-2018-2608 advisory concerns Oracle Hospitality Simphony (Oracle Hospitality Applications, subcomponent: Security). Affected: Simphony version 2.7. Root cause details are not provided in the connected documents, but the vulnerability is described as easily exploitable: an unauthenticated a...

CVE-2016-2608

...

CVE-2016-2608

CVE-2016-2608 entry is rejected/not used; not representing an active vulnerability entry.

[SECURITY] Fedora 26 Update: openslp-2.0.0-12.fc26

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

[SECURITY] Fedora 25 Update: openslp-2.0.0-10.fc25

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...