kernel security, bug fix, and enhancement update

4.18.0-80.7.10.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-80.7.10 - x86 Update stepping values for Whiskey Lake U/Y David Arcari...

47pages-keystone (>=0.0.1, <=0.0.5), @abtnode/mongoose-nedb (1.0.16) +1543 more potentially affected by CVE-2018-16490 via mpath (>=0.1.1, <=0.5.0)

mpath NPM version =0.1.1, =0.0.1, =0.0.1, =0.7.15, =1.0.7, =0.0.0-alpha.1, =0.0.0, =0.0.1, =2.0.8, =1.2.17, =0.7.6-1, =0.7.6 and more Source cves: CVE-2018-16490 Source advisory: OSV:GHSA-H466-J336-74WX...

GHSA-H466-J336-74WX Prototype Pollution in mpath

Versions of mpath before 0.5.1 are vulnerable to prototype pollution. Provided certain input mpath can add or modify properties of the Object prototype. These properties will be present on all objects. Recommendation Update to version 0.5.1 or later...

Prototype Pollution in mpath

Versions of mpath before 0.5.1 are vulnerable to prototype pollution. Provided certain input mpath can add or modify properties of the Object prototype. These properties will be present on all objects. Recommendation Update to version 0.5.1 or later...

47pages-keystone (>=0.0.1, <=0.0.5), @abtnode/mongoose-nedb (1.0.16) +1543 more potentially affected by CVE-2018-16490 via mpath (>=0.1.1, <=0.5.0)

mpath NPM version =0.1.1, =0.0.1, =0.0.1, =0.7.15, =1.0.7, =0.0.0-alpha.1, =0.0.0, =0.0.1, =2.0.8, =1.2.17, =0.7.6-1, =0.7.6 and more Source cves: CVE-2018-16490 Source advisory: GHSA-H466-J336-74WX...

Prototype Pollution

Overview Versions of mpath before 0.5.1 are vulnerable to prototype pollution. Provided certain input mpath can add or modify properties of the Object prototype. These properties will be present on all objects. Recommendation Update to version 0.5.1 or later. References - HackerOne Report - GitHu...

CVE-2018-16490

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

Prototype Pollution

mpath is vulnerable to prototype pollution. An attacker is able to inject arbitrary properties into Object.prototype to add or modify the path values...

CVE-2018-16490

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

CVE-2018-16490

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

Buffer overflow

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

CVE-2018-16490

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

CVE-2018-16490

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

CVE-2018-16490

CVE-2018-16490 affects the mpath npm package prior to version 0.8.4, where a prototype pollution flaw can lead to arbitrary properties being injected onto Object.prototype. The root cause is a type handling mismatch in ignoreProperties.indexOf(parts[i]); when parts[i] is proto , the code path use...

47pages-keystone (>=0.0.1, <=0.0.5), @abtnode/mongoose-nedb (1.0.16) +1543 more potentially affected by CVE-2018-16490 via mpath (>=0.1.1, <=0.5.0)

mpath NPM version =0.1.1, =0.0.1, =0.0.1, =0.7.15, =1.0.7, =0.0.0-alpha.1, =0.0.0, =0.0.1, =2.0.8, =1.2.17, =0.7.6-1, =0.7.6 and more Source cves: CVE-2018-16490 Source advisory: MEND:CVE-2018-16490...

CVE-2018-16490: Uncontrolled Resource Consumption

A prototype pollution vulnerability was found in module mpath 0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

PT-2019-9312

Name of the Vulnerable Software and Affected Versions mpath versions prior to 0.5.1 Description A prototype pollution issue allows an attacker to inject arbitrary properties onto Object.prototype given certain input to mpath. This results in the added or modified properties being present on all...

Node.js third-party modules: Prototype Pollution Vulnerability in mpath Package

I would like to report prototype pollution vulnerability in mpath. It allows an attacker to inject arbitrary properties on Object.prototype. Module module name: mpath version: 0.4.1 npm page: https://www.npmjs.com/package/mpath Module Description G,Set javascript object values using MongoDB-like...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0121)

The remote OracleVM system is missing necessary patches to address critical security updates : - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366024 CVE-2017-7645 - dm mpath: allow ioctls to trigger pg init Mikulas Patocka Orabug: 25645229 - xen/manage: Always freeze/tha...

Unbreakable Enterprise kernel security update

2.6.39-400.297.3 - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366024 CVE-2017-7645 2.6.39-400.297.2 - dm mpath: allow ioctls to trigger pg init Mikulas Patocka Orabug: 25645229 - xen/manage: Always freeze/thaw processes when suspend/resuming Ross Lagerwall Orabug:...