1071 matches found
XSS Vulnerability in HTML Writer
This is: - X a bugfix - a new feature Checklist: - X Changes are covered by unit tests - X Code style is respected - X Commit message explains why the change is made see https://github.com/erlang/otp/wiki/Writing-good-commit-messages - X CHANGELOG.md contains a short summary of the change -...
SUSE-SU-2020:3760-1 Security changes in Kubernetes, etcd, and helm; Bugfix in cri-o package
= Required Actions == Kubernetes & etcd Security fixes This fix involves an upgrade of Kubernetes and some add-ons. See https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/clusterupdates.htmlupdatingkubernetescomponents for the upgrade procedure. == Skuba & helm/helm3 In order to updat...
Updated virtualbox packages fix security vulnerabilities
Vulnerabilities in the Oracle VM VirtualBox are fixed in version 6.1.16. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability which can lead to execute code in the context of the hypervisor. CVE-2020-14872. An...
Nextcloud: Acting under any different user via DB-stored credentials
The issue is related to all Nextcloud versions. It is not patched yet. All versions 18-20 seems to be vulnerable. The issue came up in the following environment: - nextcloud docker image 20.0.2 and 20.0.3 - LDAP authentication - external SMB shares via DB stored credentials The problem came up...
CakePHP 4.0.10 Released
CakePHP 4.0.10 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 4.0.10. This release contains security fixes and is a recommended upgrade for all applications still using 4.0.x. The security fixes address a vulnerability in the CsrfProtectionMiddleware tha...
docker-cli docker-engine security update
docker-cli 19.03.11-7 - Fix for CVE-2020-15257 19.03.11-6 - Fix for CVE-2020-15157 19.03.11-5 - Bugfix for 'docker images name' not working on docker 19.03.11-ol - Address CVE-2020-16845 19.03.11-4 - added patch for registry list 19.03.11-3 - update to 19.03.11 for CVE-2020-13401 19.03.1-1.0.0 -...
openSUSE Security Update : MozillaThunderbird (openSUSE-2020-2022)
This update for MozillaThunderbird fixes the following issues : - Mozilla Thunderbird 78.4.2 MFSA 2020-49 bsc1178611 - CVE-2020-26950 bmo1675905 Write side effects in MCallGetProperty opcode not accounted for - Mozilla Thunderbird 78.4.1 - new: Thunderbird prompts for an address to use when...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5154
Upstream security update. Follow RHBA-2020:5154 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5005
Upstream security update. Follow RHBA-2020:5005 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5042
Upstream security update. Follow RHBA-2020:5042 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5049
Upstream security update. Follow RHBA-2020:5049 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5006
Upstream security update. Follow RHBA-2020:5006 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5007
Upstream security update. Follow RHBA-2020:5007 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5027
Upstream security update. Follow RHBA-2020:5027 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5014
Upstream security update. Follow RHBA-2020:5014 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5028
Upstream security update. Follow RHBA-2020:5028 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5047
Upstream security update. Follow RHBA-2020:5047 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2020:5036
Upstream security update. Follow RHBA-2020:5036 for details...