4322 matches found
[SECURITY] Fedora 27 Update: python2-2.7.15-4.fc27
Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...
SUSE-SU-2018:3253-1 Security update for libssh
This update for libssh fixes the following issues: Security issue fixed: - CVE-2018-10933: Fixed a server mode authentication bypass bsc1108020. Non security issue fixed: - Fix popd syntax to be compatible with newer versions of the bash shell...
Drupal Core - Multiple Vulnerabilities - SA-CORE-2018-006
Content moderation - Moderately critical - Access bypass - Drupal 8 In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass. In order to fix this issue, the following changes have been made to content moderation which may have...
OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)
The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which...
Microsoft Office: Block opening of pre-release versions of file formats new to PowerPoint 2013
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officepptconverters.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Block Opening of Pre-Release Versions of File Formats New to PowerPoint Through the Compatibility Pack for Office and PowerPoint Converter Authors:...
Microsoft Office Compatibility Pack Multiple Vulnerabilities (KB4092444)
This host is missing an important security update according to Microsoft KB4092444 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office: Block opening of pre-release versions of file formats new to Excel 2013
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeexcelconverters.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Block opening of pre-release versions of file formats new to Excel 2013 through the Compatibility Pack for Office 2013 and Excel 2013 Converter...
[SECURITY] Fedora 29 Update: nng-1.0.1-2.fc29
nng nanomsg next generation is a socket library that provides several common communication patterns. It aims to make the networking layer fast, scalable, and easy to use. Implemented in C, it works on a wide range of operating systems with no further dependencies. The communication patterns, also...
Fedora 27 : php-tcpdf (2018-187e212568)
Version 6.2.25 - Fix support for image URLs. ---- Version 6.2.24 - Support remote urls when checking if file exists. ---- Version 6.2.23 - Simplify fileexists function. ---- Version 6.2.20 - Fix for security vulnerability: Using the phar:// wrapper it was possible to trigger the unserialization o...
Wi-Fi Gets Simplified Version Numbers and Next Version is Wi-Fi 6
Do you know what is the latest version of Wi-Fi? It's okay if you don't know. It is — Wi-Fi is 802.11ac. I am sure many of us can't answer this question immediately because the Wi-Fi technology doesn't have a traditional format of version numbers… at least until yesterday. The Wi-Fi Alliance—the...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational DOORS Web Access
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8, which are used by IBM Rational DOORS Web Access. IBM Rational DOORS Web Access has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The IBM Java Runtime Environment...
Compatibility Subsystem Execution Linux Windows
The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems is related to errors in character registry handling. Exploiting this vulnerability allows an attacker to replace or delete any files using a specially created application...
[SECURITY] Fedora 28 Update: visualboyadvance-m-2.1.0-2.fc28
VisualBoyAdvance-M is a Nintendo Game Boy Emulator with high compatibility with commercial games. It emulates the Nintendo Game Boy Advance hand held conso le, in addition to the original Game Boy hand held systems and its Super and Co lor variants. VBA-M is a continued development of the now...
Microsoft Edge - Sandbox Escape
Content process - Privileged content process firststage.js When spawning a new Edge content process, its privilege is determined by its URL. This URL check is performed by the LCIEUrlPolicy::GetPICForPrivilegedInternalPage method in eModel.dll. The method calls several another methods to check...
[SECURITY] Fedora 27 Update: visualboyadvance-m-2.1.0-2.fc27
VisualBoyAdvance-M is a Nintendo Game Boy Emulator with high compatibility with commercial games. It emulates the Nintendo Game Boy Advance hand held conso le, in addition to the original Game Boy hand held systems and its Super and Co lor variants. VBA-M is a continued development of the now...
September 26, 2018—KB4457136 (OS Build 16299.699)
None None...
Compatibility subsystem Windows Code Execution
The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...
September 20, 2018—KB4457139 (Preview of Monthly Rollup)
None None...