[SECURITY] [DSA 5626-2] pdns-recursor regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5626-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2024 https://www.debian.org/security/faq -...

CVE-2021-40642

Textpattern CMS v4.8.7 and older vulnerability exists through Sensitive Cookie in HTTPS Session Without 'Secure' Attribute via textpattern/lib/txplibmisc.php. The secure flag is not set for txplogin session cookie in the application. If the secure flag is not set, then the cookie will be...

CVE-2021-40642

CVE-2021-40642 affects Textpattern CMS v4.8.7 and earlier. The issue is a missing Secure attribute on the txp_login session cookie in textpattern/lib/txplib_misc.php, allowing the cookie to be transmitted in clear-text over HTTP within the cookie’s scope. An attacker could induce this by sending ...