VMware Security Advisory 2018-0009 - vRealize Automation (vRA) updates address multiple security issues.
6a6602eeda730fc84750765190a39b07f1ecdeed4845afb7555b78ba5f17a2e9Red Hat Security Advisory 2018-1124-01 - The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Issues addressed include a bypass vulnerability.
373d3c840e3e13c9100fe89bf988b5d9d961b6c51e3797706f20e7260afd8e97Red Hat Security Advisory 2018-1125-01 - The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Issues addressed include a bypass vulnerability.
69e4f2ec093114c78bb5114762cef0781c483b82c5319db0d33397f47ef33923Debian Linux Security Advisory 4079-2 - It was discovered that the poppler upload for the oldstable distribution (jessie), released as DSA-4079-1, did not correctly address CVE-2017-9776 and additionally caused regressions when rendering PDFs embedding JBIG2 streams. Updated packages are now available to correct this issue.
c8f0a7c6a2983d72a16c61d8659dc8919bd9d8c6c9e9d07f33a178540687969fThe IMP XForm version 2.0 DatalifeEngine module suffers from a remote SQL injection vulnerability.
4ea7bbd809af487f7550f2a6fe33f7ca59d94102a1633f0018aecbef20510c31Joomla Convert Forms extension version 2.0.3 suffers from a CSV formula injection vulnerability.
6c5b90968bae14c2eecfa5b07dafcf9bf889352b022e9e950bd0cf59d4a6edfeClam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a commandline scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.
c5c5edaf75a3c53ac0f271148fd6447310bce53f448ec7e6205124a25918f65c
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed