Security update for haproxy (moderate)

openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2019:2555-1 Rating: moderate References: 1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for haproxy ...

OPENSUSE-SU-2019:2556-1 Security update for haproxy

This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues: Security issue fixed: - CVE-2019-14241: Fixed a cookie memory corruption problem. bsc1142529 The update to 2.0.5 brings lots of features and bugfixes: - new internal native HTTP representation called HTX, was alrea...

About the security content of SwiftNIO SSL 2.4.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Information disclosure

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

CVE-2019-15704

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

CVE-2019-15704

Fortinet FortiClient for macOS is affected by a local information-disclosure vulnerability in which plaintext-sensitive data logged to the console can be read by an attacker when connecting to an SSL VPN Gateway. Affected component is FortiClient for macOS; root cause involves storing sensitive i...

Python SSL Denial of Service (CVE-2019-5010)

A denial of service vulnerability exists in the Python SSL module. The vulnerability is due to improper handling of malformed DistributionPoint extension within X.509 certificates. Successful exploitation of this vulnerability could lead to denial-of-service conditions on the target server...

openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

A microprocessor side-channel vulnerability was found on SMT e.g, Hyper-Threading architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information...

Improper Hostname Validation

nusoap does not properly validate hostnames. This is due to incorrect configuration of the CURLOPTSSLVERIFYHOST parameter, leading to improper validation of hostname of a certificat3e and allowing an attacker to perform Man-in-the-Middle MitM attacks...

Clario: Lack of HTTPS in service communications

Summary: Lack of HTTPS in login page http://translate.kromtech.com/user/login Steps To Reproduce: http://translate.kromtech.com/user/login site, that allows accessing unencrypted of the site without SSL/TLS certificate...

OpenWrt ustream-ssl library information disclosure vulnerability (CNVD-2019-42439)

OpenWrt is a Linux operating system for embedded devices. ustream-ssl is one of the cryptographic libraries. The ustream-ssl library in OpenWrt version 18.06.4 and 15.05.1 is vulnerable to an information disclosure vulnerability that can be exploited by an attacker to attack vulnerable components...

The vulnerabilities in the functions of ec_err.c and ec_lib.c from the OpenSSL library allow a malicious individual to gain unauthorized access to protected information.

The vulnerability in the functions of ecerr.c and eclib.c from the OpenSSL library is related to the lack of data encryption measures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2019-5102

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...

CVE-2019-5102

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...

CVE-2019-5101

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...

Information disclosure

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...

Information disclosure

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...

CVE-2019-5102

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...

CVE-2019-5102

OpenWrt ustream-ssl information disclosure (CVE-2019-5102) affects OpenWrt 18.06.4 and 15.05.1. The ustream-ssl library does not properly terminate or validate server certificates, allowing a man-in-the-middle to intercept data on the first request despite certificate checks. Talos notes this beh...

CVE-2019-5101

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by...