Design/Logic Flaw

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

CVE-2021-21300

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

CVE-2021-21300

Summary: CVE-2021-21300 affects Git when cloning into case-insensitive file systems and using certain clean/smudge filters (e.g., Git LFS). A specially crafted repository containing symbolic links and files processed by these filters can cause an unchecked script to run during checkout. Affected ...

OESA-2021-1075 tomcat security update

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open developmen...

Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-24122)

Summary Multiple vulnerabilities in Open Source Apache Tomcat reported by The Apache Software Foundation affect IBM Tivoli Application Dependency Discovery Manager TADDM Vulnerability Details CVEID: CVE-2021-24122 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive...

openSUSE Security Update : MozillaFirefox (openSUSE-2021-335)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.1 ESR bsc1181848 - Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. - Buffer overflow in depth pitch calculations for compressed textures C Tenable Network...

openSUSE Security Update : tomcat (openSUSE-2021-330)

This update for tomcat fixes the following issues : - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system bsc1180947. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and...

Security update for MozillaFirefox (low)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:0335-1 Rating: low References: 1181848 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the following...

Security update for tomcat (moderate)

openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2021:0330-1 Rating: moderate References: 1180947 Cross-References: CVE-2021-24122 CVSS scores: CVE-2021-24122 NVD : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-24122 SUSE: 5.9...

SUSE-SU-2021:0531-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system bsc1180947...

SUSE-SU-2021:0530-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system bsc1180947...

SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2021:0431-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.1 ESR bsc1181848 Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. Buffer overflow in depth pitch calculations for compressed textures Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0430-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.7.1 ESR bsc1181848 Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. Buffer overflow in depth pitch calculations for compressed textures Note that Tenable Network...

MGASA-2021-0072 Updated tomcat packages fix a security vulnerability

When serving resources from a network location using the NTFS file system it was possible to bypass security constraints and/or view the source code for JSPs in some configurations. The root cause was the unexpected behaviour of the JRE API File.getCanonicalPath which in turn was caused by the...

Updated tomcat packages fix a security vulnerability

When serving resources from a network location using the NTFS file system it was possible to bypass security constraints and/or view the source code for JSPs in some configurations. The root cause was the unexpected behaviour of the JRE API File.getCanonicalPath which in turn was caused by the...

EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2021-1175)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39,...

CentOS 8 : virt:rhel (CESA-2019:3345)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3345 advisory. - QEMU: qxl: null pointer dereference while releasing spice resources CVE-2019-12155 - ntfs-3g: heap-based buffer overflow leads to local root privileg...

CentOS 8 : git (CESA-2019:4356)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:4356 advisory. - git: Arbitrary path overwriting via export-marks in-stream command feature CVE-2019-1348 - git: Recursive submodule cloning allows using git director...

CVE-2021-24122

A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath,...

Information Disclosure

apache tomcat is vulnerable to information disclosure. Security constraints can be bypassed to obtain and view JSP source code in certain configurations, when serving resources from a network location using the NTFS file system. The vulnerability is caused by the insufficient validation for the :...