Fedora 29: guacamole-server Security Update
Mar12
on March 12, 2019
at 11:13 pm
Posted In: Uncategorized
Update to 1.0.0, which includes fixes for CVE-2018-1340
Comment
Archive for March 12th, 2019
20 results.
xen: various flaws (#1685577) grant table transfer issues on large hosts [XSA-284] race with pass-through device hotplug [XSA-285] x86: steal_page violates page_struct access discipline [XSA-287] x86: Inconsistent PV IOMMU discipline [XSA-288] missing preemption in x86 PV page table unvalidation [XSA-290] x86/PV: page type reference counting issue with failed IOMMU update
Fedora 29: postgresql-jdbc Security Update
Mar12
on March 12, 2019
at 10:59 pm
Posted In: Uncategorized
new upstream version, to fix CVE-2018-10936
Fedora 28: postgresql-jdbc Security Update
Mar12
on March 12, 2019
at 10:36 pm
Posted In: Uncategorized
new upstream version, to fix CVE-2018-10936
Fedora 28: guacamole-server Security Update
Mar12
on March 12, 2019
at 10:01 pm
Posted In: Uncategorized
Update to 1.0.0, which includes fixes for CVE-2018-1340
Debian: DSA-4406-1: waagent security update
Mar12
on March 12, 2019
at 9:55 pm
Posted In: Uncategorized
Francis McBratney discovered that the Windows Azure Linux Agent created swap files with world-readable permissions, resulting in information disclosure.
Ubuntu 3908-1: Linux kernel vulnerability
Mar12
on March 12, 2019
at 9:46 pm
Posted In: Uncategorized
The system could be made to run programs as an administrator.
Debian: DSA-4407-1: xmltooling security update
Mar12
on March 12, 2019
at 9:34 pm
Posted In: Uncategorized
Ross Geerlings discovered that the XMLTooling library didn’t correctly handle exceptions on malformed XML declarations, which could result in denial of service against the application using XMLTooling.
Several security issues were fixed in PHP.
Ubuntu 3907-1: WALinuxAgent vulnerability
Mar12
on March 12, 2019
at 6:37 pm
Posted In: Uncategorized
WALinuxAgent could be made to expose sensitive information.
As a part of an ongoing initiative to improve user experience in our product, in cPanel & WHM Version 78 we introduced cPanel Analytics. This functionality is intentionally built with ease of use and privacy in mind. It provides us with deeper insight into how our customers utilize cPanel, WHM, and Webmail without compromising the privacy of those users. We tested the feature directly with a few customers on cPanel & WHM Version 74, made some adjustments in …
[20190301] – Core – XSS in com_config JSON handler
Mar12
on March 12, 2019
at 3:00 pm
Posted In: Uncategorized
- Project: Joomla!
- SubProject: CMS
- Impact: Low
- Severity: Low
- Versions: 3.2.0 through 3.9.3
- Exploit type: XSS
- Reported Date: 2019-March-04
- Fixed Date: 2019-March-12
- CVE Number: CVE-2019-9712
Description
The JSON handler in com_config lacks input validation, leading to XSS vulnerability.
Affected Installs
Joomla! CMS versions 3.2.0 through 3.9.3
Solution
Upgrade to version 3.9.4
Contact
The JSST at the Joomla! Security Centre.
Reported By: Mario Korth, Hackmanit
[20190302] – Core – XSS in item_title layout
Mar12
on March 12, 2019
at 3:00 pm
Posted In: Uncategorized
- Project: Joomla!
- SubProject: CMS
- Impact: Low
- Severity: Low
- Versions: 3.0.0 through 3.9.3
- Exploit type: XSS
- Reported Date: 2019-February-25
- Fixed Date: 2019-March-12
- CVE Number: CVE-2019-9711
Description
The item_title layout in edit views lacks escaping, leading to a XSS vulnerability.
Affected Installs
Joomla! CMS versions 3.2.0 through 3.9.3
Solution
Upgrade to version 3.9.4
Contact
The JSST at the Joomla! Security Centre.
Reported By: Fouad Maakor
[20190303] – Core – XSS in media form field
Mar12
on March 12, 2019
at 3:00 pm
Posted In: Uncategorized
- Project: Joomla!
- SubProject: CMS
- Impact: Low
- Severity: Low
- Versions: 3.0.0 through 3.9.3
- Exploit type: XSS
- Reported Date: 2019-February-25
- Fixed Date: 2019-March-12
- CVE Number: CVE-2019-9714
Description
The media form field lacks escaping, leading to a XSS vulnerability.
Affected Installs
Joomla! CMS versions 3.2.0 through 3.9.3
Solution
Upgrade to version 3.9.4
Contact
The JSST at the Joomla! Security Centre.
Reported By: Fouad Maakor
[20190304] – Core – Missing ACL check in sample data plugins
Mar12
on March 12, 2019
at 3:00 pm
Posted In: Uncategorized
- Project: Joomla!
- SubProject: CMS
- Impact: Moderate
- Severity: High
- Versions: 3.8.0 through 3.9.3
- Exploit type: XSS
- Reported Date: 2019-February-28
- Fixed Date: 2019-March-12
- CVE Number: CVE-2019-9713
Description
The sample data plugins lack ACL checks, allowing unauthorized access.
Affected Installs
Joomla! CMS versions 3.8.0 through 3.9.3
Solution
Upgrade to version 3.9.4
Contact
The JSST at the Joomla! Security Centre.
Reported By: Sven Hurt, Benjamin Trenkle
Joomla 3.9.4 is now available. This is a security fix release for the 3.x series of Joomla which addresses 4 security vulnerabilities and contains 28 bug fixes and improvements.
LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file.
Fake EV certificates used in Steam trade phishing attacks
Mar12
on March 12, 2019
at 12:19 pm
Posted In: Uncategorized
An extremely convincing phishing attack that impersonates a multi-game skin trade bot appears to be using a fake Extended Validation TLS certificate to steal Steam accounts. The ongoing phishing attack impersonates TradeIt.gg, which facilitates the trading of skins, weapons and other in-game commodities within popular games like CS:GO, TF2 and DOTA. When a victim attempts […]
New Kolab Releases (1): The Seafile Extension
Mar12
on March 12, 2019
at 9:03 am
Posted In: Uncategorized
Kolab now integrates with Seafile, a cloud storage system. Find out what benefits this brings Plesk Premium Email customers.
The post New Kolab Releases (1): The Seafile Extension appeared first on Plesk.
WordPress 5.1.1 Security and Maintenance Release
Mar12
on March 12, 2019
at 3:34 am
Posted In: Uncategorized
WordPress 5.1.1 is now available! This security and maintenance release introduces 10 fixes and enhancements, including changes designed to help hosts prepare users for the minimum PHP version bump coming in 5.2. This release also includes a pair of security fixes that handle how comments are filtered and then stored in the database. With a maliciously […]