GitLab Duo Chat SSO Unauthorized Access

The vulnerability of the Single Sign-On SSO authentication mechanism in the GitLab Duo Chat web interface of the git-based software platform for collaborative code development in GitLab is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker,...

Huly Platform Cross-Site Script Vulnerabilities

Huly Platform is an open source all-in-one project management platform. A cross-site scripting vulnerability exists in Huly Platform version v.0.6.202 that originates from allowing an attacker to execute arbitrary code by uploading a crafted SVG file to issues...

OPENSUSE-SU-2019:2628-1 Security update for calamares

This update for calamares fixes the following issues: - Launch with 'pkexec calamares' in openSUSE Tumbleweed, but launch with 'xdg-su -c calamares' in openSUSE Leap 15. Update to Calamares 3.2.15: - 'displaymanager' module now treats 'sysconfig' as a regular entry in the 'displaymanagers' list,...