Unbreakable Enterprise kernel security update

4.14.35-1902.6.6 - RDMA/restrack: Protect from reentry to resource return path Leon Romanovsky Orabug: 30388717 4.14.35-1902.6.5 - hvnetvsc: fix vf serial matching with pci slot info Haiyang Zhang Orabug: 30373111 - rds: Use correct conn when dropping connections due to cancel Hakon Bugge Orabug:...

OPENSUSE-SU-2019:2276-1 Security update for putty

This update for putty to version 0.73 fixes the following issues: Security issues fixed: - CVE-2019-17068: Fixed the insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode boo1152753. - CVE-2019-17069: Fixed a possible information leak caus...

PT-2019-4474 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.7 Description: The issue is related to a use-after-free bug in the drivers/usb/misc/adutux.c driver of the Linux kernel. This bug can be triggered by a malicious USB device, potentially leading to a denial o...

OPENSUSE-SU-2019:2227-1 Security update for python-numpy

This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. bsc1149203 jscSLE-8532 This update was imported from the SUSE:SLE-15:Update update project...

PT-2019-5206 · Apache +1 · Netty +1

Name of the Vulnerable Software and Affected Versions: Netty versions prior to 4.1.42.Final Description: The issue is related to the incorrect handling of whitespace before the colon in HTTP headers, such as a "Transfer-Encoding : chunked" line. This can lead to HTTP request smuggling, allowing a...

PT-2024-14579

Name of the Vulnerable Software and Affected Versions POCO versions prior to 1.11.8p2 POCO versions prior to 1.12.5p2 POCO versions prior to 1.13.0 Description The issue is caused by an integer overflow and resultant stack buffer overflow in UTF32Encoding.cpp, specifically in the...

WordPress Photo Gallery 1.5.34 SQL Injection

Exploit Title: WordPress Plugin Photo Gallery by 10Web Add new and in add galleries / Gallery groups. GET request going with parameter albumid is vulnerable to Time Based Blind SQL injection. Following is the POC, 1...

SUSE-SU-2019:2330-1 Security update for mariadb, mariadb-connector-c

This update for mariadb and mariadb-connector-c fixes the following issues: mariadb: - Update to version 10.2.25 bsc1136035 - CVE-2019-2628: Fixed a remote denial of service by an privileged attacker bsc1136035. - CVE-2019-2627: Fixed another remote denial of service by an privileged attacker...

PT-2019-19147 · Apple +4 · Ios +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13 Safari versions prior to 13 Description: A logic issue was addressed with improved state management. Processing maliciously crafted web content may lead to universal cross site scripting. Recommendations: For iOS...

OPENSUSE-SU-2019:2056-1 Security update for go1.12

This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth bsc1146111. - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of...

OPENSUSE-SU-2019:2044-1 Security update for podman, slirp4netns and libcontainers-common

This is a version update for podman to version 1.4.4 bsc1143386. Additional changes by SUSE on top: - Remove fuse-overlayfs because it's currently an unsatisfied dependency on SLE bsc1143386 - Update libpod.conf to use correct infracommand - Update libpod.conf to use better versioned pause...

OPENSUSE-SU-2019:2021-1 Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker: - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot bsc1143409. - CVE-2019-13509: Fixed an information leak in the debug...

SUSE-SU-2019:2223-1 Security update for podman, slirp4netns and libcontainers-common

This is a version update for podman to version 1.4.4 bsc1143386. Additional changes by SUSE on top: - Remove fuse-overlayfs because it's currently an unsatisfied dependency on SLE bsc1143386 - Update libpod.conf to use correct infracommand - Update libpod.conf to use better versioned pause...

Fedora 29 : nfdump (2019-9013b5e75d)

2019-08-14 - Fix compile issues - Fix output buffer size for lzo1xdecompresssafe 2019-08-07 - Fix VerifyExtensionMap 179 2019-08-06 - Fix compile errors 2019-08-05 - Fix nfdump.1 man page. 175 - Fix off by 1 array. 173 - Fix use after free in ModifyCompressFile - Add bound checks in AddExporterSt...

PT-2019-10413 · WordPress · All-In-One-Schemaorg-Rich-Snippets

Name of the Vulnerable Software and Affected Versions: all-in-one-schemaorg-rich-snippets plugin versions prior to 1.5.0 Description: The issue concerns a cross-site scripting XSS flaw on the settings page. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or later to resolve...

PT-2019-8458 · WordPress · Football-Pool

Name of the Vulnerable Software and Affected Versions: WordPress football-pool plugin versions prior to 2.6.5 Description: The issue concerns multiple XSS problems. Recommendations: For versions prior to 2.6.5, update to version 2.6.5 or later to resolve the issue...

PT-2019-9041 · Yandex · Clickhouse

Name of the Vulnerable Software and Affected Versions: ClickHouse versions prior to 1.1.54131 Description: The issue is related to an incorrect configuration in the deb package, which could allow unauthorized use of the database. Recommendations: For versions prior to 1.1.54131, update to version...

OPENSUSE-SU-2019:1880-1 Security update for live555

This update for live555 fixes the following issues: - CVE-2019-9215: Malformed headers could have lead to invalid memory access in the parseAuthorizationHeader function. boo1127341 - CVE-2019-7314: Mishandled termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up could have lead t...

PT-2019-7266 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.10 Description: The issue concerns a CSRF flaw in the add/edit location feature of the wp-google-map-plugin. No information is provided about the estimated number of potentially affected devices or...

PT-2019-7267 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.10 Description: The issue concerns a CSRF flaw in the add/edit map feature of the wp-google-map-plugin. No information is provided about the estimated number of potentially affected devices or...