[SECURITY] [DLA 2412-1] openjdk-8 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2412-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 23, 2020 https://wiki.debian.org/LTS -...

OPENSUSE-SU-2020:1270-1 Security update for gettext-runtime

This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 - Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of...

SUSE-SU-2020:2296-1 Security update for gettext-runtime

This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 - Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of...

DLA-2300-1 kdepim-runtime - security update

Bulletin has no description...

OPENSUSE-SU-2019:2434-1 Security update for docker-runc

This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 This update was imported from the SUSE:SLE-15:Update update project...

Security Bulletin: Security vulnerabilities have been identified in IBM Java shipped with IBM Tivoli Security Policy Manager(CVE-2019-2426, CVE-2018-12547, CVE-2018-1890)

Summary IBM Tivoli Security Policy Manager TSPM is affected through IBM WebSphere Application Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

Security Bulletin: Security vulnerabilities have been identified in IBM Java shipped with IBM Tivoli Security Policy Manager (CVE-2018-3180)

Summary IBM Tivoli Security Policy Manager TSPM is affected through IBM WebSphere Application Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

ThreatList: One-Third of Firms Say Their Container Security Lags

Even as companies move to embrace cloud deployments and containers, most organizations with such deployments don’t feel prepared to adequately secure cloud-native applications. According to StackRox’ State of Container Security report, which polled about 230 respondents in the U.S., more than a...

Security Bulletin: A security vulnerability has been identified in the IBM HTTP server component of IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2017-12618)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Tivoli Security Policy Manager TSPM. Information about a security vulnerabilities affecting IBM WebSphere Application Server have been published in a security bulletin. Vulnerability Details Please consult the security...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2017-1381)

Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Tivoli Security Policy Manager TSPM. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security...

Unspecified Vulnerability in Oracle JD Edwards Products JD Edwards EnterpriseOne Tools Component

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...

CVE-2018-2659

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime SEC. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2018-2659

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime SEC. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

Oracle JD Edwards EnterpriseOne Tools Remote Vulnerability

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...

CVE-2017-3517

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime SEC. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

Oracle JD Edwards EnterpriseOne Technology Remote Vulnerability

Oracle JD Edwards EnterpriseOne is a fully integrated suite of enterprise resource planning management software that provides application modules for financial management, project management and asset lifecycle management. A security vulnerability exists in the Web Runtime Security subcomponent o...

CVE-2015-0475

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security...

Design/Logic Flaw

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security...

CVE-2015-0475

CVE-2015-0475 bases on an Oracle JD Edwards EnterpriseOne Technology vulnerability in the Web Runtime Security subcomponent of JD Edwards Products 9.1. CNVD-2015-02642 describes a remote-authenticated path that can read data and compromise confidentiality via this subcomponent. NVD notes an unspe...

CVE-2015-0475

Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security...