qt5 security update

CentOS Errata and Security Advisory CESA-2020:4025 An update for qt5-qtbase is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

pcp, perl, python security update

CentOS Errata and Security Advisory CESA-2020:3869 An update for pcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

CentOS Errata and Security Advisory CESA-2020:3958 An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2020:3861 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

@adeunis/codecs (>=1.3.0, <=1.4.0), @koalarx/utils (>=3.0.7, <=3.0.8) +5 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0, <=2.2.0)

doc-path NPM version =2.0.0, =1.3.0, =3.0.7, =1.0.5, =3.2.0, =1.1.4, =1.2.3 Source cves: CVE-2020-7772 Source advisory: SNYK:JS-DOCPATH-1011952...

20190403-utils (1.0.0), 3dio (>=1.0.0-beta.32, <=2.1.0) +4786 more potentially affected by CVE-2020-15168 via node-fetch (>=2.0.0, <=2.6.0)

node-fetch NPM version =2.0.0, =1.0.0-beta.32, =0.24.0, =0.0.0-alpha.1, =1.0.43, =0.0.80, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =2.0.0-alpha10, =1.0.0-beta, =0.1.0, =0.2.0 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

Important: kernel

Issue Overview: A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system. CVE-2020-14356 A flaw was found in the Lin...

@aoboxinda/budget (>=0.1.155, <=0.1.186), @coobo/skeleton (>=1.0.0-a, <=1.0.0) +5 more potentially affected by unknown CVE via express-fileupload (>=1.0.0, <=1.1.5)

express-fileupload NPM version =1.0.0, =0.1.155, =1.0.0-a, =0.0.1-alpha.151, =0.0.1-alpha.44, =1.1.0, =1.0.0, =1.0.9 Source cves: unknown CVE Source advisory: OSV:GHSA-Q3W9-G74Q-VP5F...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H726-X36V-RX45...

@27works/posto (2.0.2), @asephermann/capacitor-filechooser (0.0.1) +161 more potentially affected by unknown CVE via eco (>=1.0.3, <=1.1.0-rc-3)

eco NPM version =1.0.3, =0.0.9, =1.0.1, =0.0.1, =0.0.73, =0.0.1, =1.2.1, =0.0.1, =0.2.5, =1.0.0, =0.1.0, =0.2.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R32X-JHW5-G48P...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4939 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4939 Source advisory: OSV:GHSA-MJ87-8XF8-FP4W...

amino-deploy (>=0.0.1, <=0.1.1), amino-drone (>=0.0.1, <=0.1.2) +65 more potentially affected by CVE-2013-4116 via npm (>=1.1.70, <=1.3.1)

npm NPM version =1.1.70, =0.0.1, =0.0.1, =0.3.4, =0.0.0, =0.12.3, =6.5.1-dev, =0.0.2, =1.0.30, =0.0.0, =0.0.1, =0.0.1, =0.2.0, =0.2.6 and more Source cves: CVE-2013-4116 Source advisory: OSV:GHSA-V3JV-WRF4-5845...

10er10 (0.23.0), 7th-setin (1.0.2) +404 more potentially affected by CVE-2015-7982 via gm (>=1.0.5, <=1.20.0)

gm NPM version =1.0.5, =0.0.13, =0.0.1, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =0.3.4, =0.5.0, =0.3.1, =0.0.1, =1.3.0, =3.9.1-patch1, =3.11.2-patch1 and more Source cves: CVE-2015-7982 Source advisory: OSV:GHSA-PJH3-JV7W-9JPR...

@hytong-yarn/cli (1.4.0), @yym-yarn/cli (1.0.0) +10 more potentially affected by CVE-2013-6393 via libyaml (>=0.0.2, <=0.2.2)

libyaml NPM version =0.0.2, =0.3.0, =1.0.24, =2.0.8, =0.0.1, =0.1.2, =0.0.10, =0.0.4, =0.0.5 Source cves: CVE-2013-6393 Source advisory: OSV:GHSA-M75H-CGHQ-C8H5...

@aqsi/ui (>=3.22.0-rc.0, <=4.15.1), @ausbom/charts (>=0.1.0, <=0.1.2) +6 more potentially affected by unknown CVE via highcharts (>=8.0.0, <=8.1.0)

highcharts NPM version =8.0.0, =3.22.0-rc.0, =0.1.0, =0.0.0, =1.3.0, =7.0.0-alpha1, =16.8.1, =1.2.8, =1.0.6, =1.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-GR4J-R575-G665...

@decentverse/server (>=0.0.1, <=0.0.148), @swapscanner/truffle-hdwallet-provider-klaytn (1.4.2) +18 more potentially affected by CVE-2020-7717 via dot-notes (3.1.1)

dot-notes NPM version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dot-notes and may be impacted: - @decentverse/server =0.0.1, =1.0.0, =1.0.0, =1.0.1-rc.4, =1.4.0-rc.1, =1.0.0, =1.6.4, =0.0.1, =1.0.0, =0.0.1, =0.1.1 and more Source cves:...

@abstract.tech/brad-cli (>=0.0.4, <=1.0.1), @bandwidth/shared-components (>=6.0.2, <=6.2.2) +106 more potentially affected by CVE-2020-36632 via flat (>=4.0.0, <=4.1.0)

flat NPM version =4.0.0, =0.0.4, =6.0.2, =1.0.7, =4.2.2, =1.2.10, =2.1.31, =1.0.11, =2.0.11, =1.1.11, =1.0.27, =2.0.8, =1.0.0, =0.0.6, =0.0.1, =0.0.2, =0.0.8 and more Source cves: CVE-2020-36632 Source advisory: SNYK:JS-FLAT-596927...

@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)

dot-prop NPM version =4.0.0, =1.0.1, =0.0.1, =0.0.1-dev.9, =0.0.3, =0.0.4, =1.1.0, =1.0.0-alpha.5, =0.10.1, =3.0.0, =1.0.0-beta.1, =0.1.12, =1.0.0, =1.0.2 - falcor-array 0.0.1 - flipcache 0.0.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...

Introspection in schema validation in Apollo Server

We encourage all users of Apollo Server to read this advisory in its entirety to understand the impact. The Resolution section contains details on patched versions. Impact If subscriptions: false is passed to the ApolloServer constructor options, there is no impact. If implementors were not...

@enhavo/form (>=0.1.2, <=0.8.5), @enhavo/translation (>=0.8.4, <=0.8.5) +22 more potentially affected by CVE-2019-1010091 via tinymce (>=5.0.6, <=5.2.1)

tinymce NPM version =5.0.6, =0.1.2, =0.8.4, =0.18.0, =15.0.1, =0.0.46, =0.0.14, =1.0.11-beta.17, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...