PT-2021-4278

Name of the Vulnerable Software and Affected Versions aaugustin websockets library versions prior to 9.1 Description The issue is related to an Observable Timing Discrepancy in the aaugustin websockets library when HTTP Basic Authentication is enabled using basic auth protocol...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0840-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...

OPENSUSE-SU-2021:0825-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 91.0.4472.77 boo1186458: Support Managed configuration API for Web Applications WebOTP API: cross-origin iframe support CSS custom counter styles Support JSON Modules Clipboard: read-only files support Remove webkitBeforeTextInserted &...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0825-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...

io.undertow:undertow-servlet (1.0.0.beta26), io.undertow:undertow-websockets-jsr (1.0.0.beta26) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.beta26)

io.undertow:undertow-core MAVEN version 1.0.0.beta26 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta26 - io.undertow:undertow-websockets-jsr 1.0.0.beta26 Source...

io.undertow:undertow-servlet (1.0.0.beta31), io.undertow:undertow-websockets-jsr (1.0.0.beta31) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.beta31)

io.undertow:undertow-core MAVEN version 1.0.0.beta31 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta31 - io.undertow:undertow-websockets-jsr 1.0.0.beta31 Source...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.0.0.beta11), io.undertow:undertow-websockets-jsr (1.0.0.beta11) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.beta11)

io.undertow:undertow-core MAVEN version 1.0.0.beta11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta11 - io.undertow:undertow-websockets-jsr 1.0.0.beta11 Source...

io.undertow:undertow-servlet (1.0.0.alpha20), io.undertow:undertow-websockets-jsr (1.0.0.alpha20) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha20)

io.undertow:undertow-core MAVEN version 1.0.0.alpha20 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha20 - io.undertow:undertow-websockets-jsr 1.0.0.alpha20 Source...

io.undertow:undertow-servlet (1.0.0.alpha17), io.undertow:undertow-websockets-jsr (1.0.0.alpha17) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha17)

io.undertow:undertow-core MAVEN version 1.0.0.alpha17 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha17 - io.undertow:undertow-websockets-jsr 1.0.0.alpha17 Source...

io.undertow:undertow-servlet (1.0.0.alpha10), io.undertow:undertow-websockets-jsr (1.0.0.alpha10) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha10)

io.undertow:undertow-core MAVEN version 1.0.0.alpha10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha10 - io.undertow:undertow-websockets-jsr 1.0.0.alpha10 Source...

io.undertow:undertow-http2-test-suite (1.1.0.beta8), io.undertow:undertow-servlet (1.1.0.beta8) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.1.0.beta8)

io.undertow:undertow-core MAVEN version 1.1.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.1.0.beta8 - io.undertow:undertow-servlet 1.1.0.beta8 -...

io.undertow:undertow-http2-test-suite (1.2.1.final), io.undertow:undertow-servlet (1.2.1.final) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.2.1.final)

io.undertow:undertow-core MAVEN version 1.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.1.final - io.undertow:undertow-servlet 1.2.1.final -...

io.undertow:undertow-servlet (1.0.0.alpha11), io.undertow:undertow-websockets-jsr (1.0.0.alpha11) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha11)

io.undertow:undertow-core MAVEN version 1.0.0.alpha11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha11 - io.undertow:undertow-websockets-jsr 1.0.0.alpha11 Source...

io.undertow:undertow-servlet (1.0.0.beta19), io.undertow:undertow-websockets-jsr (1.0.0.beta19) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.beta19)

io.undertow:undertow-core MAVEN version 1.0.0.beta19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta19 - io.undertow:undertow-websockets-jsr 1.0.0.beta19 Source...

io.undertow:undertow-servlet (1.0.0.alpha13), io.undertow:undertow-websockets-jsr (1.0.0.alpha13) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha13)

io.undertow:undertow-core MAVEN version 1.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha13 - io.undertow:undertow-websockets-jsr 1.0.0.alpha13 Source...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

io.undertow:undertow-dist (1.0.0.alpha1), io.undertow:undertow-servlet (1.0.0.alpha1) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.alpha1)

io.undertow:undertow-core MAVEN version 1.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-dist 1.0.0.alpha1 - io.undertow:undertow-servlet 1.0.0.alpha1 -...

io.undertow:undertow-servlet (1.0.0.beta8), io.undertow:undertow-websockets-jsr (1.0.0.beta8) potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.0.beta8)

io.undertow:undertow-core MAVEN version 1.0.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta8 - io.undertow:undertow-websockets-jsr 1.0.0.beta8 Source cves:...

io.undertow:undertow-http2-test-suite (1.2.0.cr1), io.undertow:undertow-servlet (1.2.0.cr1) +11 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.2.0.cr1)

io.undertow:undertow-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.cr1 - io.undertow:undertow-servlet 1.2.0.cr1 -...