SUSE-SU-2020:1528-1 Security update for osc

This update for osc fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths bsc1122675...

CVE-2020-9366

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact...

CVE-2020-9366

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact...

CVE-2020-9366

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact...

PT-2020-20614

Name of the Vulnerable Software and Affected Versions GNU Screen versions prior to 4.8.0 Description A buffer overflow issue was discovered in the way GNU Screen handles the special escape OSC 49. This could be triggered by specially crafted output or a special program, potentially corrupting...

CVE-2020-9366: Out-of-bounds Write

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact...

openSUSE: Security Advisory for osc (openSUSE-SU-2019:1844-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

Open redirect

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

UBUNTU-CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

CVE-2019-3685 Missing TLS certificate validation for HTTPS connections in osc

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

CVE-2019-3685

Open Build Service osc client did not validate TLS certificates for HTTPS connections before version 0.165.4. Affected components: osc binary used by Open Build Service. Impact: potential trust/security risk due to improper TLS validation (CVSS data in sources indicates high severity). Remediatio...

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

CVE-2019-3685: Improper Certificate Validation

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

OPENSUSE-SU-2019:1844-1 Security update for osc

This update for osc to version 0.165.4 fixes the following issues: Security issue fixed: - CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack bsc1142518. Non-security issues fixed: - support different token operations runservice, release and rebuild...

Security update for osc (important)

openSUSE Security Update: Security update for osc Announcement ID: openSUSE-SU-2019:1844-1 Rating: important References: 1129889 1138977 1140697 1142518 1142662 1144211 Cross-References: CVE-2019-3685 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has 5 fixes is...

SUSE-SU-2019:2067-1 Security update for osc

This update for osc to version 0.165.4 fixes the following issues: Security issue fixed: - CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack bsc1142518. Non-security issues fixed: - support different token operations runservice, release and rebuild...

PT-2019-4778

Name of the Vulnerable Software and Affected Versions Open Build Service versions prior to 0.165.4 Description The issue is related to errors in certificate authentication. It may allow a remote attacker to bypass existing security restrictions and implement a "man-in-the-middle" attack. The...