Slackware Security Advisory - New file packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
dc2b2bb882c2e78e63a28c7f49612b4d270b6841136b08fba33056561a9c24a9
Debian Linux Security Advisory 4377-3 - The restrictions introduced in the security fix to address CVE-2019-1000018 also disallowed the -pf and -pt options which are used by the scp support in libssh2. This update restores support for those.
c1086ef619d30d33c973554f8c81008469bc8fd1c9b5a060a0f84560ad6b93ad
Xlight FTP Server version 3.9.1 suffers from a buffer overflow vulnerability.
ce8fe48cb271e4f707e4ff5f27e762d8813f9ae786c74f33dfe119db7ce3f7e0
Drupal versions 8.6.9 and below REST service remote code execution proof of concept exploit.
ad87476e73c4518d71a3cd360572f91df08082c7b7e3106638e51ea716e9a116
PHP Ecommerce Script version 2.0.6 suffers from cross site scripting and remote SQL injection vulnerabilities.
c932b01e48eea3df04da70d91cf6ebd554f93b8ad54a184d3ab1c3e703f05a6a
ZZZPHP CMS version 1.6.1 suffers from a remote code execution vulnerability.
227d8f4c6935572fca8c20f6ec4e31ed4c84a2ac96f17a7f5b8edce32acc4f68
Jenkins plugins Script Security version 1.49, Declarative version 1.3.4, and Groovy version 2.60 suffer from a code execution vulnerability.
1464739307633b75e322eb2e0907ec7933ce2f124fc0c0718f3077cf93613a62