CVE-2019-11689

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

CVE-2019-11688

ASUSTOR exFAT Driver (affected: 1.0.0.r20 and earlier) contains a Missing SSL Certificate Validation flaw in license validation paths. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com, enabling potential interception or tampering during license checks. Con...

Updated kernel packages fix security vulnerabilities

This update is based on upstream 5.5.9 and fixes at least the following security vulnerabilities: In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu...