99 matches found
USN-5293-1: c3p0 vulnerability
Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application's XML configuration file could cause a denial of service...
[SECURITY] Fedora 33 Update: python-urllib3-1.25.8-5.fc33
Python HTTP module with connection pooling and file POST abilities...
Moderate: python-urllib3 security update
The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fixes: python-urllib3: CRLF injection via HTTP request method CVE-2020-26137 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
Security update for python-mysql-connector-python (moderate)
openSUSE Security Update: Security update for python-mysql-connector-python Announcement ID: openSUSE-SU-2020:0430-1 Rating: moderate References: 1122204 Cross-References: CVE-2019-2435 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available...
openSUSE Security Update : haproxy (openSUSE-2019-2555)
This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues : Security issue fixed : - CVE-2019-14241: Fixed a cookie memory corruption problem. bsc1142529 The update to 2.0.5 brings lots of features and bugfixes : - new internal native HTTP representation called HTX, was...
OPENSUSE-SU-2019:2556-1 Security update for haproxy
This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues: Security issue fixed: - CVE-2019-14241: Fixed a cookie memory corruption problem. bsc1142529 The update to 2.0.5 brings lots of features and bugfixes: - new internal native HTTP representation called HTX, was alrea...
SUSE-SU-2019:3001-1 Security update for haproxy
This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues: Security issue fixed: - CVE-2019-14241: Fixed a cookie memory corruption problem. bsc1142529 The update to 2.0.5 brings lots of features and bugfixes: - new internal native HTTP representation called HTX, was alrea...
[SECURITY] Fedora 29 Update: python-urllib3-1.24.3-1.fc29
Python HTTP module with connection pooling and file POST abilities...
Fedora Update for python-urllib3 FEDORA-2019-fbda9f1e49
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 30 Update: python-urllib3-1.24.3-1.fc30
Python HTTP module with connection pooling and file POST abilities...
[SECURITY] Fedora 29 Update: c3p0-0.9.5.4-1.fc29
c3p0 is an easy-to-use library for augmenting traditional JDBC drivers with JNDI-bindable DataSources, including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 standard extension...
[SECURITY] Fedora 30 Update: c3p0-0.9.5.4-1.fc30
c3p0 is an easy-to-use library for augmenting traditional JDBC drivers with JNDI-bindable DataSources, including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 standard extension...
[SECURITY] Fedora 28 Update: python-urllib3-1.24.2-1.fc28
Python HTTP module with connection pooling and file POST abilities...
[SECURITY] Fedora 29 Update: python-urllib3-1.24.2-1.fc29
Python HTTP module with connection pooling and file POST abilities...
[SECURITY] Fedora 27 Update: python-urllib3-1.24.1-2.fc27
Python HTTP module with connection pooling and file POST abilities...
[SECURITY] Fedora 28 Update: python-urllib3-1.24.1-2.fc28
Python HTTP module with connection pooling and file POST abilities...
CVE-2018-1337
In Apache Directory LDAP API before 1.0.2, a bug in the way the SSL Filter was setup made it possible for another thread to use the connection before the TLS layer has been established, if the connection has already been used and put back in a pool of connections, leading to leaking any informati...