java-17-openjdk security, bug fix, and enhancement update

1:17.0.4.0.8-0.2.ea - Add rpminspect.yaml to turn off Java bytecode inspections - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode - Resolves: rhbz2109106 1:17.0.4.0.8-0.2.ea - Revert the following changes until copy-java-configs has adapted to relative...

java-1.8.0-openjdk security, bug fix, and enhancement update

1.8.0.342.b07-1.0.1 - Replace upstream references Orabug: 34340145 1:1.8.0.342.b07-1 - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with...

Security Vulnerabilities fixed in Firefox ESR 91.12 — Mozilla

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. When visiting directory listings for chrome:// URLs as source text, some parameters were reflected...

java-11-openjdk security, bug fix, and enhancement update

1:11.0.16.0.8-1.0.1 - Replace upstream references Orabug: 34340155 1:11.0.16.0.8-1 - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upstreamed - Print release file during build,...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security, bug fix, and enhancement update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-28471

This affects the package properties-reader before 2.2.0...

CVE-2020-28471

This affects the package properties-reader before 2.2.0...

Design/Logic Flaw

This affects the package properties-reader before 2.2.0...

CVE-2020-28471 Prototype Pollution

This affects the package properties-reader before 2.2.0...

CVE-2020-28471

CVE-2020-28471 affects the Node.js package properties-reader before v2.2.0 and is a prototype pollution vulnerability. Public docs confirm the issue as a prototype pollution in properties-reader, with Bitbucket Data Center/Server references noting the vulnerability in 8.19.x releases and advising...

sunnylaiproperties.com Cross Site Scripting vulnerability OBB-2814919

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

properties-reader 安全漏洞

properties-reader is a Node.js property reader compatible with ini files by Steve King, a personal developer. A security vulnerability exists in properties-reader prior to version 2.2.0, which stems from the package's susceptibility to prototype contamination, and which can be exploited by an...

java-1.8.0-openjdk security, bug fix, and enhancement update

1:1.8.0.342.b07-1 - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use 'git apply' with...

Important: Red Hat Security Advisory: java-11-openjdk security and bug fix update

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: java-11-openjdk security, bug fix, and enhancement update

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

java-11-openjdk security, bug fix, and enhancement update

1:11.0.16.0.8-1 - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Updat...

nodejs: Prototype pollution via console.table properties

Due to the formatting logic of the "console.table" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto". The prototype pollution has...

Properties-Reader before v2.2.0 vulnerable to prototype pollution

Properties-Reader prior to version 2.2.0 is vulnerable to prototype pollution. Version 2.2.0 contains a patch for this issue...

GHSA-JXVF-M3X5-MXWQ Properties-Reader before v2.2.0 vulnerable to prototype pollution

Properties-Reader prior to version 2.2.0 is vulnerable to prototype pollution. Version 2.2.0 contains a patch for this issue...

@achingbrain/appmetrics-dash (>=4.0.1 <=4.0.2), @adobe/aio-app-scripts (>=0.6.0 <=2.3.0) +190 more potentially affected by CVE-2020-28471 via properties-reader (>=0.0.10 <=2.1.1)

properties-reader NPM version =0.0.10, =4.0.1, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =0.0.3, =0.0.2, =0.1.1, =0.2.0, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =0.1.2, =0.0.1, =0.0.10 and more Source cves: CVE-2020-28471 Source advisory: OSV:GHSA-JXVF-M3X5-MXWQ...