[SECURITY] Fedora 30 Update: nginx-1.16.1-1.fc30

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

WordPress gregs-high-performance-seo plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gregs-high-performance-seo is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

SUSE-SU-2019:2192-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-14378: Security fix for heap overflow in ipreass on big packet input bsc1143794. - CVE-2019-12155: Security fix for null pointer dereference while releasing spice resources bsc1135902. - CVE-2019-13164: Security fi...

CVE-2015-9319

The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser...

CVE-2015-9319

CVE-2015-9319 concerns the WordPress plug‑in Gregs High Performance SEO (before 1.6.2) with a cross-site scripting (XSS) vulnerability in the context of an old browser. Multiple sources (NVD and vendor/security bulletins) corroborate that the flaw affects this plugin and is XSS‑related; exploitat...

openSUSE: Security Advisory for zstd (openSUSE-SU-2019:1952-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : zstd (openSUSE-2019-1952)

This update for zstd fixes the following issues : - Update to version 1.4.2 : - bug: Fix bug in zstd-0.5 decoder by @terrelln 1696 - bug: Fix seekable decompression in-memory API by @iburinoc 1695 - bug: Close minor memory leak in CLI by @LeeYoung624 1701 - misc: Validate blocks are smaller than...

Fast DNS: Zone Apex Mapping & DNSSEC

Introduction Along with its DDoS resilience and impressive global footprint, Fast DNS affords zone administrators additional technical flexibility and implementation options. One example is Zone Apex Mapping ZAM -- a feature that enables apex domains to be mapped directly to an Akamai edge IP. Th...

OPENSUSE-SU-2019:1952-1 Security update for zstd

This update for zstd fixes the following issues: - Update to version 1.4.2: bug: Fix bug in zstd-0.5 decoder by @terrelln 1696 bug: Fix seekable decompression in-memory API by @iburinoc 1695 bug: Close minor memory leak in CLI by @LeeYoung624 1701 misc: Validate blocks are smaller than size limit...

Edge DNS: Zone Apex Mapping & DNSSEC

Along with its DDoS resilience and impressive global footprint, Akamai Edge DNS offers zone administrators additional technical flexibility and implementation options to improve performance and simplify DNS operations. One example is zone apex mapping ZAM, a feature that enables top level hostnam...

Security update for zstd (moderate)

openSUSE Security Update: Security update for zstd Announcement ID: openSUSE-SU-2019:1952-1 Rating: moderate References: 1082318 1133297 1142941 Cross-References: CVE-2019-11922 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

[SECURITY] Fedora 30 Update: firefox-68.0.2-1.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat OpenStack Platform 9.0 Operational Tools for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2018-19386

SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI...

CVE-2018-19386

SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI...

Cross site scripting

SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI...

CVE-2018-19386

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected XSS in idcStateError where the page parameter is reflected into the HREF of the “Try Again” button at /iwc/idcStateError.iwc?page=. Exploitation would execute script in the victim’s browser, potentially enabling session hijack...

[SECURITY] Fedora 29 Update: squid-4.8-2.fc29

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Alleviating Digital Transformation Performance and Security Concerns

Businesses across the world are migrating applications to the cloud to reduce IT cost and complexity, and accelerate the pace of innovation. But when you move applications and services to the cloud you lose visibility and control over your infrastructure, increasing risk and uncertainty. That's w...

glibc security and bug fix update

aarch64: 2.17-292.0.2 - CR29749550 armv5 build failure - Add 3 arm patches to aarch64 tree to avoid future build/merge failures. - Rebase aarch64 patches at 30000 to avoid future conflicts. - Reviewed-by: Jose E. Marchesi - EL Errata - Add BUSMCEERRAR, BUSMCEERRAO to...