Scientific Linux Security Update : krb5 on SL7.x x86_64 (20181030)

Security Fixes : - krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data CVE-2018-5729 - krb5: DN container check bypass by supplying special crafted data CVE-2018-5730 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

krb5, libkadm5 security update

CentOS Errata and Security Advisory CESA-2018:3071 An update for krb5 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

ELM Upgrade failed because of a failed dependency check for audit-libs-python

When upgrading the ELM you receive a notification that the ELM upgrade failed, and you should revert to your snapshot and try again. That doesn't help. The ELM upgrade process is logged in /var/log/Unidesk/ApplianceUpgrader.log. It's a chatty log, but you can bring it up in an editor vi, nano,...

io.snamp.features:wrapped-libs-for-tests (2.0.0) potentially affected by CVE-2016-3094 via org.apache.qpid:qpid-broker (0.32)

org.apache.qpid:qpid-broker MAVEN version 0.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.qpid:qpid-broker and may be impacted: - io.snamp.features:wrapped-libs-for-tests 2.0.0 Source cves: CVE-2016-3094 Source advisory:...

SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2018:2791-1)

This update for xorg-x11-libs fixes the following security issue : CVE-2015-9262: XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow bsc1103511 Note that Tenable Network Security has extracted the preceding descripti...

SUSE-SU-2018:2791-1 Security update for xorg-x11-libs

This update for xorg-x11-libs fixes the following security issue: - CVE-2015-9262: XcursorThemeInherits allowed remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow bsc1103511...

RHEL 7 : kernel (RHSA-2018:2389)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2389 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Modern operating systems implement...

Scientific Linux Security Update : sssd and ding-libs on SL6.x i386/x86_64 (20180619)

The ding-libs packages contain a set of libraries used by the System Security Services Daemon SSSD as well as other projects, and provide functions to manipulate file system path names libpathutils, a hash table to manage storage and access time properties libdhash, a data type to collect data in...

Oracle Linux 6 : sssd / and / ding-libs (ELSA-2018-1877)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1877 advisory. - Resolves: rhbz1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database rhel-6.10 Tenable has extracted the preceding descriptio...

PYSEC-2018-80

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

Session fixation

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

CVE-2018-1000519

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

CVE-2018-1000519

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

CVE-2018-1000519: Session Fixation

aio-libs aiohttp-session contains a Session Fixation vulnerability in loadsession function for RedisStorage see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttpsession/redisstorage.pyL42 that can result in Session Hijacking. This attack appear to be exploitable via Any method that...

sssd and ding-libs security and bug fix update

ding-libs 0.4.0-13 - Resolves: rhbz1538061 - sssd/libiniconfig cannot parse configuration file with line longer than 5102 0.4.0-12 - Related: rhbz1377213 - ding-libs dont parse lines without an equal sign sssd 1.13.3-60.0.1 - Orabug 26746822 - revert patch 0118 to fix LDAP netgroup lookup problem...

CentOS 6 : ding-libs / sssd (CESA-2018:1877)

An update for sssd and ding-libs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libbasicobjects, libcollection, libdhash, libini_config, libipa_hbac, libpath_utils, libref_array, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, python, sssd security update

CentOS Errata and Security Advisory CESA-2018:1877 An update for sssd and ding-libs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

Moderate: Red Hat Security Advisory: sssd and ding-libs security and bug fix update

An update for sssd and ding-libs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 6 : sssd and ding-libs (RHSA-2018:1877)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1877 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...

CVE-2018-11592: Out-of-bounds Read

Espruino before 1.98 allows attackers to cause a denial of service application crash with a user crafted input file via an Out-of-bounds Read during syntax parsing in which certain height validation is missing in libs/graphics/jswrapgraphics.c...