CVE-2019-11689

CVE-2019-11689 affects ASUSTOR exFAT Driver up to version 1.0.0.r20. During license validation, the components exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, enabling code execution as root. Red Hat and NVD entries corroborate the ...

CVE-2019-11688

ASUSTOR exFAT Driver (affected: 1.0.0.r20 and earlier) contains a Missing SSL Certificate Validation flaw in license validation paths. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com, enabling potential interception or tampering during license checks. Con...

Updated kernel packages fix security vulnerabilities

This update is based on upstream 5.5.9 and fixes at least the following security vulnerabilities: In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu...