Vulnerability of the Server component: The Oracle MySQL Server database management system’s packaging, which allows a hacker to trigger a service failure.

The vulnerability of the Oracle MySQL Server component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Security Bulletin: Vulnerability in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An unspecified...

Snapd Flaw Lets Attackers Gain Root Access On Linux Systems

Ubuntu and some other Linux distributions suffer from a severe privilege escalation vulnerability that could allow a local attacker or a malicious program to obtain root privileges and total control over the targeted system. Dubbed "DirtySock" and identified as CVE-2019-7304, the vulnerability wa...

openSUSE Security Update : zeromq (openSUSE-2019-87)

This update for zeromq fixes the following issues : Security issue fixed : - CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow bsc1121717 The following tracked packaging change is included : - boo1082318: correctly mark license files as licence instead of...

Security update for zeromq (important)

openSUSE Security Update: Security update for zeromq Announcement ID: openSUSE-SU-2019:0087-1 Rating: important References: 1082318 1121717 Cross-References: CVE-2019-6250 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available. Descriptio...

USN-3863-1 apt vulnerability

Max Justicz discovered that APT incorrectly handled certain parameters during redirects. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages...

openSUSE Security Update : libunwind (openSUSE-2019-61)

This update for libunwind fixes one minor security issue and one bug. The following security issue was fixed : - CVE-2015-3239: off-by-one error that could be triggered when reading untrusted binaries boo936786 The following packaging bug was fixed : - boo1122012: The 32 bit were not generated on...

openSUSE: Security Advisory for libunwind (openSUSE-SU-2019:0061-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libunwind (low)

openSUSE Security Update: Security update for libunwind Announcement ID: openSUSE-SU-2019:0061-1 Rating: low References: 1122012 936786 Cross-References: CVE-2015-3239 Affected Products: openSUSE Leap 42.3 An update that solves one vulnerability and has one errata is now available. Description:...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-26717)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Packaging subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.13 and earlier. An...

PT-2019-1319 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.13 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: Packaging subcomponent. It allows a high-privileged attacker with logon to the...

Fedora 29 : flatpak (2018-009a65a873)

flatpak 1.0.5 release. There was a sandbox bug in the previous version where parts of the runtime /etc was not mounted read-only. In case the runtime was installed as the user not the default this means that the app could modify files on the runtime. Nothing in the host uses the runtime files, so...

Fedora 28 : 1:php-pear (2018-50e3877b63)

ArchiveTar version 1.4.4 - Fix Bug 21058: Long symlinks are not supported mrook - Fix Bug 23782: Prevent phar:// files from being extracted mrook --- PEAR version 1.10.7 - PR 79: Prevent Unable to find the wrapper 'channel' Warning - PR 80: fix Warning: 'continue' targeting switch is equivalent t...

SmartWorks Systems Pakistan 1.0 SQL Injection

Exploit Title : SmartWorks Systems Pakistan 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : smartworks.pk Tested On : Windows Exploit Risk : Medium Category : WebApps Version Information : Nginx 1.14.1 - jQuery 1.11.1 - jQuery UI 1.10.4 CWE : CWE-89...

Fedora 27 : flatpak (2018-9b7d7a155b)

flatpak 1.0.6 release. This release fixes an issue that lets system-wide installed applications create setuid root files inside their app dir somewhere in /var/lib/flatpak/app. Setuid support is disabled inside flatpaks, so such files are only a risk if the user runs them manually outside flatpak...

Security update for chromium (moderate)

This update contains Chromium 70.0.3538.102 and fixes security issues and bugs. Vulnerabilities fixed: - CVE-2018-17478: Out of bounds memory access in V8 boo1115537 - Various fixes from internal audits, fuzzing and other initiatives Packaging changes: - noto-emoji-fonts is no longer a recommende...

OPENSUSE-SU-2018:3835-1 Security update for chromium

This update contains Chromium 70.0.3538.102 and fixes security issues and bugs. Vulnerabilities fixed in 70.0.3538.102: - CVE-2018-17478: Out of bounds memory access in V8 boo1115537 Vulnerabilities fixed in 70.0.3538.67 bsc1112111: - CVE-2018-17462: Sandbox escape in AppCache - CVE-2018-17463:...

Security update for chromium (moderate)

This update contains Chromium 70.0.3538.102 and fixes security issues and bugs. Vulnerabilities fixed: - CVE-2018-17478: Out of bounds memory access in V8 boo1115537 - Various fixes from internal audits, fuzzing and other initiatives Packaging changes: - noto-emoji-fonts is no longer a recommende...

openSUSE: Security Advisory for chromium (openSUSE-SU-2018:3805-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The...