Security update for libu2f-host (moderate)

openSUSE Security Update: Security update for libu2f-host Announcement ID: openSUSE-SU-2021:0799-1 Rating: moderate References: 1124781 1128140 1184648 ECO-3687 Cross-References: CVE-2018-20340 CVE-2019-9578 CVSS scores: CVE-2018-20340 NVD : 6.8 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

[SECURITY] Fedora 33 Update: slapi-nis-0.56.7-1.fc33

This package provides two plugins for Red Hat and 389 Directory Server. The NIS Server plugin allows the directory server to act as a NIS server for clients, dynamically generating and updating NIS maps according to its configuration and the contents of the DIT, and serving the results to clients...

[SECURITY] Fedora 34 Update: slapi-nis-0.56.7-1.fc34

This package provides two plugins for Red Hat and 389 Directory Server. The NIS Server plugin allows the directory server to act as a NIS server for clients, dynamically generating and updating NIS maps according to its configuration and the contents of the DIT, and serving the results to clients...

SUSE-SU-2021:1755-1 Security update for libu2f-host

This update for libu2f-host fixes the following issues: This update ships the u2f-host package jscECO-3687 bsc1184648 Version 1.1.10 released 2019-05-15 - Add new devices to udev rules. - Fix a potentially uninitialized buffer CVE-2019-9578, bsc1128140 Version 1.1.9 released 2019-03-06 - Fix CID...

HPESBST04138 rev.1 - HPE 3Par and Primera StoreServ Management Console (SSMC) using sudo, Local Buffer Overflow

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR StoreServ Management and Core Software Media SSMC prior to 3.8 are vulnerable CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

dovecot security and bug fix update

1:2.3.8-9 - fix CVE-2020-24386 IMAP hibernation function allows mail access 1913534 1:2.3.8-8 - fix CVE-2020-25275 denial of service via mail MIME parsing 1914019 1:2.3.8-7 - change run directory from /var/run to /run 1805947 1:2.3.8-6 - fix mail storage block count parsing 1894418 - MIME parser...

Important: Red Hat Security Advisory: slapi-nis security and bug fix update

An update for slapi-nis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

GHSA-PMQP-H87C-MR78 XML Entity Expansion and Improper Input Validation in Kubernetes API server

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming...

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming...

PYSEC-2021-745

TensorFlow is an end-to-end open source platform for machine learning. Passing invalid arguments e.g., discovered via fuzzing to tf.rawops.SparseCountSparseOutput results in segfault. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow...

What does WiFi stand for?

We use WiFi to connect to the Internet, but what is it, and what does it stand for? How does it have such a catchy name, and why do we sometimes have a weak Internet connection with a strong WiFi signal and vice versa? Read on to answer these questions and more. What does WiFi mean? Many people...

Open redirect

In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host...

Security update for redis (important)

openSUSE Security Update: Security update for redis Announcement ID: openSUSE-SU-2021:0682-1 Rating: important References: 1178205 1182657 1185729 1185730 ECO-2417 ECO-2867 PM-1547 PM-1615 PM-1622 PM-1681 SLE-11578 SLE-12821 Cross-References: CVE-2021-21309 CVE-2021-29477 CVE-2021-29478 CVSS...

CVE-2021-31409

The CVE-2021-31409 entry concerns Vaadin’s EmailValidator in the com.vaadin:vaadin-compatibility-server module (versions 8.0.0–8.12.4). A RegEx-based input validation flaw can lead to uncontrolled resource consumption (DoS) when processing malicious email addresses. The referenced advisories and ...

com.github.elhoce:vaadin-signaturefield-v8 (2.0.9), com.github.ilgun:expandingtextarea (2.0) +35 more potentially affected by CVE-2021-31409 via com.vaadin:vaadin-compatibility-server (>=8.0.0, <=8.12.4)

com.vaadin:vaadin-compatibility-server MAVEN version =8.0.0, =0.5.1, =1.7-1, =8.0.0, =8.0.0, =7.3.0, =1.5.0, =1.0.2, =3.4.0, =1.4.3, =1.4.3, =1.5.0, =6.3.0 and more Source cves: CVE-2021-31409 Source advisory: MEND:CVE-2021-31409...

CVE-2021-31409

Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 Vaadin versions 8.0.0 through 8.12.4 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

CVE-2021-31409: Uncontrolled Resource Consumption

Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 Vaadin versions 8.0.0 through 8.12.4 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

com.github.elhoce:vaadin-signaturefield-v8 (2.0.9), com.github.ilgun:expandingtextarea (2.0) +35 more potentially affected by CVE-2021-31409 via com.vaadin:vaadin-compatibility-server (>=8.0.0, <=8.12.4)

com.vaadin:vaadin-compatibility-server MAVEN version =8.0.0, =0.5.1, =1.7-1, =8.0.0, =8.0.0, =7.3.0, =1.5.0, =1.0.2, =3.4.0, =1.4.3, =1.4.3, =1.5.0, =6.3.0 and more Source cves: CVE-2021-31409 Source advisory: GHSA-C332-W4JM-55WV...

com.github.elhoce:vaadin-signaturefield-v8 (2.0.9), com.github.ilgun:expandingtextarea (2.0) +35 more potentially affected by CVE-2021-31409 via com.vaadin:vaadin-compatibility-server (>=8.0.0, <=8.12.4)

com.vaadin:vaadin-compatibility-server MAVEN version =8.0.0, =0.5.1, =1.7-1, =8.0.0, =8.0.0, =7.3.0, =1.5.0, =1.0.2, =3.4.0, =1.4.3, =1.4.3, =1.5.0, =6.3.0 and more Source cves: CVE-2021-31409 Source advisory: OSV:GHSA-C332-W4JM-55WV...

GHSA-C332-W4JM-55WV Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8

Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 Vaadin versions 8.0.0 through 8.12.4 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...