Fedora: Security Advisory for mingw-glib-networking (FEDORA-2020-a83c8cd358)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for glib-networking (FEDORA-2020-98ebbd1397)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mingw-glib-networking (FEDORA-2020-cadbc5992f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : mingw-glib-networking (2020-cadbc5992f)

Security fix for CVE-2020-13645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 32 : mingw-glib-networking (2020-a83c8cd358)

Security fix for CVE-2020-13645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +55 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0167...

[SECURITY] Fedora 31 Update: mingw-glib-networking-2.62.4-1.fc31

This package contains modules that extend the networking support in GIO...

[SECURITY] Fedora 32 Update: mingw-glib-networking-2.64.3-1.fc32

This package contains modules that extend the networking support in GIO...

[SECURITY] Fedora 31 Update: glib-networking-2.62.4-1.fc31

This package contains modules that extend the networking support in GIO. In particular, it contains libproxy- and GSettings-based GProxyResolver implementations and a gnutls-based GTlsConnection implementation...

Fedora 31 : glib-networking (2020-98ebbd1397)

Fix CVE-2020-13645, fail connections when server identity is unset Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters

A vulnerability was found in affected container networking implementations that allow malicious containers in Kubernetes clusters to perform man-in-the-middle MitM attacks. A malicious container can exploit this flaw by sending “rogue” IPv6 router advertisements to the host or other containers, t...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.3.25 containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters

A vulnerability was found in affected container networking implementations that allow malicious containers in Kubernetes clusters to perform man-in-the-middle MitM attacks. A malicious container can exploit this flaw by sending “rogue” IPv6 router advertisements to the host or other containers, t...

Treck TCP/IP IPv6 Component Input Validation Error Vulnerability

Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. An input validation error vulnerability exists in the Treck TCP/IP IPv6 component. An attacker could exploit the vulnerability to cause an out-of-bound...

HPSBPI03666 rev. 3 - Certain HP and Samsung-branded Print Products - Network Stack Potential Vulnerabilities

Potential Security Impact Remote Code Execution, Denial of Service, and Multiple other Potential Vulnerabilities VULNERABILITY SUMMARY Multiple potential vulnerabilities may exist in the Treck Inc. networking stack used in certain HP and Samsung-branded printers. These may include, but not be...

Important Photon OS Security Update - PHSA-2020-0103

Updates of 'kibana', 'glib-networking', 'glibc', 'linux-esx', 'openssh', 'systemd', 'linux', 'elasticsearch', 'linux- secure', 'linux-aws', 'gnutls' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0103

Updates of 'linux-aws', 'systemd', 'openssh', 'linux', 'glib-networking', 'elasticsearch', 'linux-secure', 'linux-esx', 'kibana', 'glibc', 'gnutls' packages of Photon OS have been released...

kernel: denial of service via ioctl call in network tun handling

A flaw was found in the Linux kernel's implementation of networking tunnel device ioctl. A local attacker can cause a denial of service NULL pointer dereference and panic via an ioctl TUNSETIFF call with a dev name containing a / character...

CVE-2020-0137

In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Security feature bypass

In setIPv6AddrGenMode of NetworkManagementService.java, there is a possible bypass of networking permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...