CVE-2019-11728

CVE-2019-11728 affects Mozilla Firefox prior to 68. The issue arises from the Alt-Svc (HTTP Alt-Svc) header which a malicious site can leverage to scan all TCP ports of hosts reachable by a user when web content is loaded. Impact is limited to information exposure via port discovery; no explicit ...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

Security fix for the ALT Linux 9 package wireshark version 3.0.3-alt1

July 22, 2019 Anton Farygin 3.0.3-alt1 - 3.0.3 - fixes: ASN.1 BER and related dissectors crash. CVE-2019-13619...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2019-29579)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 68. A remote attacker can exploit this vulnerability to bypass security restrictions and scan all TCP ports on any host using the...

Security fix for the ALT Linux 10 package wireshark version 3.0.3-alt1

July 22, 2019 Anton Farygin 3.0.3-alt1 - 3.0.3 - fixes: ASN.1 BER and related dissectors crash. CVE-2019-13619...

Security fix for the ALT Linux 10 package firefox-esr version 68.0.1-alt1

July 19, 2019 Andrey Cherepanov 68.0.1-alt1 - New ESR version 68.0.1. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI...

Security fix for the ALT Linux 9 package squid version 4.8-alt1

4.8-alt1 built July 16, 2019 Alexey Shabalin in task 234609 --- July 15, 2019 Alexey Shabalin - Updated to 4.8 - Fixes: + CVE-2019-12854 Denial of Service issue in cachemgr.cgi + CVE-2019-12529 Denial of Service in HTTP Basic Authentication + CVE-2019-12525 Denial of Service in HTTP Digest...

Security fix for the ALT Linux 8 package samba-DC version 4.9.10-alt1

July 16, 2019 Evgeny Sinelnikov 4.9.10-alt1 - Update to latest summer release of samba-4.9 backported to p8 - Security fixes: + CVE-2019-12435 Samba AD DC Denial of Service in DNS management server dnsserver + CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum + CVE-2018-16852 NULL...

Security fix for the ALT Linux 9 package python3-module-django version 2.2.3-alt1

July 15, 2019 Alexey Shabalin 2.2.3-alt1 - 2.2.3 - build python3 only - rename package to python3-module-django2.2 - Fixes for the following security vulnerabilities: + CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting via HTTPS + CVE-2019-12308 AdminURLFieldWidget XSS +...

Security fix for the ALT Linux 10 package python3-module-django version 2.2.3-alt1

July 15, 2019 Alexey Shabalin 2.2.3-alt1 - 2.2.3 - build python3 only - rename package to python3-module-django2.2 - Fixes for the following security vulnerabilities: + CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting via HTTPS + CVE-2019-12308 AdminURLFieldWidget XSS +...

UBUNTU-CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

CVE-2019-11728

The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a user when web content is loaded. This vulnerability affects Firefox 68...

Security fix for the ALT Linux 9 package kernel-image-tegra version 4.9.140-alt2

4.9.140-alt2 built July 10, 2019 Valery Inozemtsev in task 234165 --- June 18, 2019 Valery Inozemtsev - fixed CVE-2019-11478, CVE-2019-11477, CVE-2019-11833, CVE-2019-3882, CVE-2019-3819, CVE-2019-7222, CVE-2019-3701, CVE-2018-19985...

Security fix for the ALT Linux 10 package thunderbird version 60.8.0-alt1

July 10, 2019 Andrey Cherepanov 60.8.0-alt1 - New version 60.8.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugi...

Security fix for the ALT Linux 10 package firefox-esr version 60.8.0-alt1

July 9, 2019 Andrey Cherepanov 60.8.0-alt1 - New ESR version 60.8.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI...

Security fix for the ALT Linux 8 package postgresql11 version 11.4-alt0.M80P.1

11.4-alt0.M80P.1 built July 1, 2019 Alexei Takaseev in task 232693 June 20, 2019 Alexei Takaseev - 11.4 Fixes CVE-2019-10164...

Security fix for the ALT Linux 8 package postgresql10 version 10.9-alt0.M80P.1

10.9-alt0.M80P.1 built July 1, 2019 Alexei Takaseev in task 232693 June 20, 2019 Alexei Takaseev - 10.9 Fixes CVE-2019-10164...

CVE-2019-13054

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z...

CVE-2019-13054

The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z...