SUSE-SU-2020:0854-1 Security update for python3

This update for python3 fixes the following issue: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen. Now an InvalidURL exception is raised bsc1155094. - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs bsc1162825. - CVE-2020-8492...

MGASA-2020-0150 Updated phpmyadmin packages fix security vulnerability

Some SQL injections via table names and parameters were fixed...

OPENSUSE-SU-2020:0427-1 Security update for phpMyAdmin

This update for phpMyAdmin to version 4.9.5 fixes the following issues: - phpmyadmin was updated to 4.9.5: - CVE-2020-10804: Fixed an SQL injection in the user accounts page, particularly when changing a password boo1167335 PMASA-2020-2. - CVE-2020-10802: Fixed an SQL injection in the search...

OPENSUSE-SU-2020:0405-1 Security update for phpMyAdmin

This update for phpMyAdmin to version 4.9.5 fixes the following issues: - phpmyadmin was updated to 4.9.5: - CVE-2020-10804: Fixed an SQL injection in the user accounts page, particularly when changing a password boo1167335 PMASA-2020-2. - CVE-2020-10802: Fixed an SQL injection in the search...

SUSE-SU-2020:0750-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen. Now an InvalidURL exception is raised bsc1155094...

SUSE-SU-2019:3248-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship bsc1156321...

OPENSUSE-SU-2019:2599-1 Security update for phpMyAdmin

This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.2: CVE-2019-18622: SQL injection in Designer feature boo1157614 Fixes for 'Failed to set session cookie' error Advisor with MySQL 8.0.3 and newer Fix PHP deprecation errors Fix a situation where exporting users...

SUSE-SU-2019:2893-1 Security update for samba

This update for samba fixes the following issue: - CVE-2019-10218: Fixed a path injection caused by filenames containing path separators bso14071 bsc1144902...

SUSE-SU-2019:14202-1 Security update for samba

This update for samba fixes the following issue: - CVE-2019-10218: Fixed a path injection caused by filenames containing path separators bso14071 bsc1144902...

SUSE-SU-2019:2335-1 Security update for python-Django1

This update for python-Django1 to version 1.11.23 fixes the following issues: - CVE-2019-14232: Fixed a denial of service in 'django.utils.text.Truncator' bsc1142880. - CVE-2019-14233: Fixed a denial of service in striptags bsc1142882. - CVE-2019-14234: Fixed an SQL injection in key and index...

OPENSUSE-SU-2019:2078-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. This update was imported from the SUSE:SLE-15:Update update...

SUSE-SU-2019:2261-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2019:2052-1 Rating: important References: 1140709 Cross-References: CVE-2019-12838 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for slurm to...

OPENSUSE-SU-2019:2039-1 Security update for python-SQLAlchemy

This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the orderby parameter bsc1124593. - CVE-2019-7548: Fixed SQL Injection via the groupby parameter bsc1124593. This update was imported from the SUSE:SLE-15:Update update...

OPENSUSE-SU-2019:1861-1 Security update for phpMyAdmin

This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.0.1: Several issues with SYSTEM VERSIONING tables Fixed json encode error in export Fixed JavaScript events not activating on input sql bookmark issue Show Designer combo boxes when adding a constraint Fix edit...

OPENSUSE-SU-2019:1839-1 Security update for python-Django

This update for python-Django fixes the following issues: Security issues fixed: - CVE-2019-11358: Fixed prototype pollution. - CVE-2019-12308: Fixed XSS in AdminURLFieldWidget bsc1136468 - CVE-2019-12781: Fixed incorrect HTTP detection with reverse-proxy connecting via HTTPS bsc1139945. -...

OPENSUSE-SU-2019:1395-1 Security update for python-Jinja2

This update for python-Jinja2 to version 2.10.1 fixes the following issues: Security issues fixed: - CVE-2019-8341: Fixed a command injection in fromstring bsc1125815. - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format bsc1132323. This update was imported from t...

SUSE-SU-2019:1156-1 Security update for python-Jinja2

This update for python-Jinja2 to version 2.10.1 fixes the following issues: Security issues fixed: - CVE-2019-8341: Fixed a command injection in fromstring bsc1125815. - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format bsc1132323...

OPENSUSE-SU-2019:0194-1 Security update for phpMyAdmin

This update for phpMyAdmin to version 4.8.5 fixes the following issues: Security issues fixed: - CVE-2019-6799: Fixed an arbitrary file read vulnerability boo1123272 - CVE-2019-6798: Fixed a SQL injection in the designer interface boo1123271 Other changes: Fix rxport to SQL format not available F...

Quiz Deluxe,3.7.4,SQL Injection

Quiz Deluxe by joomplace, 3.7.4, SQL Injection resolution: update to 3.7.5 update notice: https://www.joomplace.com/blog/secure-your-quiz.html...