rootserverprojekt.de

Package : yaws
CVE ID : CVE-2020-24379 CVE-2020-24916

Two vulnerabilities were discovered in yaws, a high performance HTTP 1.1 webserver written in Erlang.

CVE-2020-24379

The WebDAV implementation is prone to a XML External Entity (XXE)
…

Package : httpcomponents-client
CVE ID : CVE-2020-13956

Priyank Nigam discovered that HttpComponents Client, a Java HTTP agent implementation, could misinterpret malformed authority component in a request URI and pick the wrong target host…

Package : spice
CVE ID : CVE-2020-14355
Debian Bug : 971750

Frediano Ziglio discovered multiple buffer overflow vulnerabilities in the QUIC image decoding process of spice, a SPICE protocol client and server library, which could result in…

Package : thunderbird
CVE ID : CVE-2020-15673 CVE-2020-15676 CVE-2020-15677
CVE-2020-15678

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service.

Debian follows the…

Package : xen
CVE ID : CVE-2020-25595 CVE-2020-25596 CVE-2020-25597
CVE-2020-25599 CVE-2020-25600 CVE-2020-25601
CVE-2020-25602 CVE-2020-25603 CVE-2020-25604

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could…

Package : firefox-esr
CVE ID : CVE-2020-15673 CVE-2020-15676 CVE-2020-15677 CVE-2020-15678

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code,…

Package : mediawiki
CVE ID : CVE-2020-15005 CVE-2020-25812 CVE-2020-25813 CVE-2020-25814
CVE-2020-25815 CVE-2020-25827 CVE-2020-25828

Multiple security issues were discovered in MediaWiki, a website engine for collaborative work:…

Package : rails
CVE ID : CVE-2020-8162 CVE-2020-8164 CVE-2020-8165 CVE-2020-8166
CVE-2020-8167 CVE-2020-15169

Multiple security issues were discovered in the Rails web framework which could result in cross-site scripting, information leaks,…

Package : modsecurity
CVE ID : CVE-2020-15598

Ervin Hegedues discovered that ModSecurity v3 enabled global regular expression matching which could result in denial of service. For additional information please refer to …

Package : inspircd
CVE ID : CVE-2019-20917 CVE-2020-25269
Debian Bug : 960650

Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service.

For the stable…