728 matches found
SUSE-RU-2021:1414-1 Recommended update for boost-legacy
This update for boost-legacy fixes the following issues: Create a new boost-legacy package with version 1.66.0. bsc1175886, jscSLE-17304, jscECO-3147 - Remove duplicate license package that we get from original Boost - Add a backport of Boost.Optional::hasvalue for LibreOffice - Use %license...
SUSE SLES12 Security Update : nghttp2 (SUSE-SU-2021:0932-1) (Data Dribble) (Resource Loop)
This update for nghttp2 fixes the following issues : Security issues fixed : CVE-2020-11080: HTTP/2 Large Settings Frame DoS bsc1181358. CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service bsc1146184. CVE-2019-9511: Fixed...
SUSE-SU-2021:0601-1 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD. bsc1181944...
OSV-2018-417 UNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539 Crash type: UNKNOWN READ Crash state: boost::submatch ::submatch ZNSt316vectorIN5boost9submatchINS11wrapiterIPKcEEEENS9allocatorIS7EEE1 boost::matchresults, std::1::allocatorboo...
OSV-2018-389 UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708 Crash type: UNKNOWN READ Crash state: boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo boost::redetailNUMBER::basicregexcreatorchar, boost::regextraitschar, boo...
PT-2021-27600
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with details provided in a crash state. The crash involves boost::sub match and boost::match result...
PT-2021-27594
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with details provided in a crash state. The crash involves boost::re detail NUMBER::basic regex...
Easy Emulator Personal Edition suffers from a local boost vulnerability
The business scope of Shanghai Maiwei Software Technology Co., Ltd. includes: engaging in technology development, technology transfer, technical consultation, technical services in the field of communication technology, computer technology, computers, software and auxiliary equipment. There is a...
boost bug fix and enhancement update
An update is available for boost. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...
Security update for pdns (moderate)
openSUSE Security Update: Security update for pdns Announcement ID: openSUSE-SU-2020:1556-1 Rating: moderate References: 1156196 1176312 1176535 Cross-References: CVE-2020-17482 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 SU...
OPENSUSE-SU-2020:1556-1 Security update for pdns
This update for pdns fixes the following issues: - Build with libmaxminddb instead of the obsolete GeoIP boo1156196 - CVE-2020-17482: Fixed an error that can result in leaking of uninitialised memory through crafted zone records boo1176535 - Backported compilation fix vs. latest Boost 1.74...
A week in security (August 17 – 23)
Last week on Malwarebytes Labs, we looked at the impact of COVID-19 on healthcare cybersecurity, dug into some pandemic stats in terms of how workforces coped with going remote, and served up a crash course on malware detection. Our most recent Lock and Code podcast explored the safety of parenta...
boost-geometry.203548.n3.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1186751 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
boost.2283326.n4.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181769 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Pichi Trust Management Issues Vulnerabilities
Pichi is a rule-based proxy software. A security vulnerability in the boost ASIO wrapper in the net/asio.cpp file in versions prior to Pichi 1.3.0 stems from the program's failure to check for TLS hostnames. No details of the vulnerability are provided at this time...
CVE-2020-13616
CVE-2020-13616 affects Pichi prior to 1.3.0: the boost ASIO wrapper in net/asio.cpp does not verify TLS hostnames, enabling hostname validation bypass over TLS. CVSS data from NVD indicates a Network attack vector with MEDIUM base impact for confidentiality (PARTIAL) and no integrity/availability...
CVE-2020-13616
The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...
CVE-2020-13616: Improper Certificate Validation
The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...
PT-2020-13617
Name of the Vulnerable Software and Affected Versions Pichi versions prior to 1.3.0 Description The issue is related to the boost ASIO wrapper in the net/asio.cpp file, which lacks TLS hostname verification. Recommendations For versions prior to 1.3.0, update to version 1.3.0 or later to resolve...
