OPENSUSE-SU-2024:0037-1 Security update for mbedtls

This update for mbedtls fixes the following issues: - Update to version 2.28.7: - Resolves CVE-2024-23170 boo1219336 - Update to 2.28.6: Changes: Mbed TLS is now released under a dual Apache-2.0 OR GPL-2.0-or-later license. Users may choose which license they take the code under. - Update to...

Leads-5050 Visitor Insights < 1.0.4 - Unauthenticated License Change

The leads5050setlicense AJAX action was available to unauthenticated users allowing them to set an arbitrary license in the plugins settings POST /wordpress/wp-admin/admin-ajax.php HTTP/1.1 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip,...

Leads-5050 Visitor Insights < 1.1.0 - Unauthorised License Change

The leads5050setlicense AJAX action is available to authenticated users, but is missing any capability and CSRF checks. This could allow any low privilege users subscriber+ to set an arbitrary license in the plugins settings POST /wordpress/wp-admin/admin-ajax.php HTTP/1.1 Accept: application/jso...

Leads-5050 Visitor Insights < 1.1.0 - Unauthorised License Change

The leads5050setlicense AJAX action is available to authenticated users, but is missing any capability and CSRF checks. This could allow any low privilege users subscriber+ to set an arbitrary license in the plugins settings PoC POST /wordpress/wp-admin/admin-ajax.php HTTP/1.1 Accept:...

Leads-5050 Visitor Insights < 1.0.4 - Unauthenticated License Change

The leads5050setlicense AJAX action was available to unauthenticated users allowing them to set an arbitrary license in the plugins settings PoC POST /wordpress/wp-admin/admin-ajax.php HTTP/1.1 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-GB,en;q=0.5 Accept-Encoding:...

Security update for privoxy (moderate)

openSUSE Security Update: Security update for privoxy Announcement ID: openSUSE-SU-2021:0016-1 Rating: moderate References: 1157449 Affected Products: openSUSE Backports SLE-15-SP1 An update that contains security fixes can now be installed. Description: This update for privoxy fixes the followin...

Scientific Linux Security Update : trousers on SL6.x i386/x86_64 (20141014)

A flaw was found in the way tcsd, the daemon that manages Trusted Computing resources, processed incoming TCP packets. A remote attacker could send a specially crafted TCP packet that, when processed by tcsd, could cause the daemon to crash. Note that by default tcsd accepts requests on localhost...

RHEL 3 / 4 / 5 : java-1.4.2-bea (RHSA-2008:1043)

java-1.4.2-bea as shipped in Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary, contains security flaws and should not be used. This update has been rated as having important security impact by the Red Hat Security Response Team. Th...

RHEL 4 / 5 : java-1.5.0-bea (RHSA-2008:1044)

java-1.5.0-bea as shipped in Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary, contains security flaws and should not be used. This update has been rated as having important security impact by the Red Hat Security Response Team. The BEA WebLogic JRockit JRE and SDK...

Fedora 7 : claws-mail-3.0.0-1.fc7 (2007-2009)

Mon Sep 3 2007 Andreas Bierfert - 3.0.0-1 - version upgrade - new license tag upstream switch to GPLv3+ - fix 254121 CVE-2007-2958 - Wed Aug 22 2007 Andreas Bierfert - 2.10.0-4 - new license tag - Wed Jul 18 2007 Andreas Bierfert - 2.10.0-3 - build against libSM 248675 - Mon Jul 16 2007 Andreas...

Fedora 7 : nagios-plugins-1.4.8-9.fc7 (2007-2713)

Fri Oct 26 2007 Mike McGrath 1.4.8-9 - Fix for Bug 348731 and CVE-2007-5623 - Wed Aug 22 2007 Mike McGrath 1.4.8-7 - Rebuild for BuildID - License change - Fri Aug 10 2007 Mike McGrath 1.4.8-6 - Fix for checklinuxraid - 234416 - Fix for checkidedisk - 251635 - Tue Aug 7 2007 Mike McGrath 1.4.8-2...