Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 17

• High 7.5
  CVE-2019-20916

  Path Traversal in pip

  The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _d…

  python-pip pip python-pip Debian Ubuntu PyPI
  Sep 4, 2020
• Medium 6.8
  CVE-2020-11078

  CRLF injection in httplib2

  In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

  httplib2 httplib2 httplib2 python-httplib2 Debian Ubuntu Azure Linux PyPI
  May 20, 2020
• Medium 6.3
  CVE-2020-10737

  A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 w…

  Red Hat oddjob oddjob oddjob Debian Ubuntu
  May 27, 2020
• Medium 5.3
  CVE-2019-15165

  sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

  libpcap libpcap libpcap Debian Ubuntu Alpine
  Oct 3, 2019
• Unscored —
  CVE-2019-13627

  It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.…

  grub2 libgcrypt20 libgcrypt20 libgcrypt11 Debian Ubuntu Azure Linux Alpine
  Sep 25, 2019
• Unscored —
  CVE-2019-14559

  Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service v…

  edk2 edk2 Debian Ubuntu
  Nov 23, 2020
• Unscored —
  CVE-2019-15892

  An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure …

  varnish varnish Debian Alpine
  Sep 3, 2019
• Unscored —
  CVE-2019-16167

  sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.

  sysstat Debian
  Sep 9, 2019
• Unscored —
  CVE-2019-16680

  An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename con…

  file-roller file-roller Debian Ubuntu
  Sep 21, 2019
• Unscored —
  CVE-2019-20446

  In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when pass…

  librsvg librsvg librsvg Debian Ubuntu Alpine
  Feb 2, 2020
• Unscored —
  CVE-2019-20637

  An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It doe…

  varnish varnish Debian Ubuntu
  Apr 8, 2020
• Unscored —
  CVE-2020-10759 Public exploit

  A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmwar…

  fwupd fwupd libjcat Debian Ubuntu
  Sep 15, 2020
• Unscored —
  CVE-2020-11653

  An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occ…

  varnish varnish Debian Ubuntu
  Apr 8, 2020
• Unscored —
  CVE-2020-11736

  fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lac…

  file-roller file-roller Debian Ubuntu
  Apr 13, 2020
• Unscored —
  CVE-2020-12831

  An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, t…

  frr Debian
  May 13, 2020
• Unscored —
  CVE-2020-14382

  A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, th…

  cryptsetup cryptsetup cryptsetup Debian Ubuntu Alpine
  Sep 16, 2020
• Unscored —
  CVE-2020-14928

  evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sen…

  evolution-data-server evolution-data-server Debian Ubuntu
  Jul 17, 2020

Revision history

1. 2023-09-27 #42

   Neue Updates von Amazon aufgenommen

2. 2022-11-10 #41

   Neue Updates von NetApp aufgenommen

3. 2022-08-24 #40

   Neue Updates von Ubuntu aufgenommen

4. 2022-08-03 #39

   Neue Updates von CentOS aufgenommen

5. 2022-06-29 #38

   Neue Updates von Oracle Linux aufgenommen

6. 2022-06-28 #37

   Neue Updates von Red Hat aufgenommen

7. 2022-06-08 #36

   Neue Updates von Ubuntu aufgenommen

8. 2022-03-10 #35

   Neue Updates von Red Hat aufgenommen

9. 2022-03-09 #34

   Neue Updates von Oracle Linux aufgenommen

10. 2022-02-22 #33

    Neue Updates von Red Hat aufgenommen

11. 2021-12-26 #32

    Neue Updates von Debian aufgenommen

12. 2021-11-09 #31

    Neue Updates von Red Hat aufgenommen

13. 2021-11-07 #30

    Neue Updates von Oracle Linux aufgenommen

14. 2021-08-05 #29

    Neue Updates von Red Hat aufgenommen

15. 2021-05-31 #28

    Neue Updates von SUSE aufgenommen

16. 2021-05-27 #27

    Neue Updates von SUSE aufgenommen

17. 2021-05-26 #26

    Neue Updates von Red Hat aufgenommen

18. 2021-05-24 #25

    Neue Updates von Amazon aufgenommen

19. 2021-05-19 #24

    Neue Updates von SUSE aufgenommen

20. 2021-05-18 #23

    Neue Updates von Red Hat aufgenommen

21. 2021-04-29 #22

    Neue Updates von Debian aufgenommen

22. 2021-04-08 #21

    Neue Updates von SUSE aufgenommen

23. 2021-03-24 #20

    Neue Updates von SUSE aufgenommen

24. 2021-03-21 #19

    Neue Updates von SUSE aufgenommen

25. 2021-02-24 #18

    Neue Updates von Red Hat aufgenommen

References

• Amazon Linux Security Advisory ALASANSIBLE2-2023-007 vom 2023-09-27
  https://alas.aws.amazon.com/AL2/ALASANSIBLE2-2023-007.html
• SUSE Security Update SUSE-SU-2021:0891-1 vom 2021-03-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-March/008525.html
• SUSE Security Update SUSE-SU-2021:0949-1 vom 2021-03-24
  https://lists.suse.com/pipermail/sle-security-updates/2021-March/008554.html
• SUSE Security Update SUSE-SU-2021:1107-1 vom 2021-04-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-April/008596.html
• Red Hat Security Advisory RHSA-2021:2021 vom 2021-05-19
  https://access.redhat.com/errata/RHSA-2021:2021
• SUSE Security Update SUSE-SU-2021:1637-1 vom 2021-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2021-May/008783.html
• Red Hat Security Advisory RHSA-2020:4432 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4432
• Red Hat Security Advisory RHSA-2020:4436 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4436
• Red Hat Security Advisory RHSA-2020:4482 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4482
• Red Hat Security Advisory RHSA-2020:4542 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4542
• Red Hat Security Advisory RHSA-2020:4547 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4547
• Red Hat Security Advisory RHSA-2020:4605 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4605
• Red Hat Security Advisory RHSA-2020:4619 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4619
• Red Hat Security Advisory RHSA-2020:4638 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4638
• Red Hat Security Advisory RHSA-2020:4649 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4649
• Red Hat Security Advisory RHSA-2020:4687 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4687
• Red Hat Security Advisory RHSA-2020:4709 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4709
• Red Hat Security Advisory RHSA-2020:4805 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4805
• Red Hat Security Advisory RHSA-2020:4820 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4820
• Red Hat Security Advisory RHSA-2020:4756 vom 2020-11-03
  https://access.redhat.com/errata/RHSA-2020:4756
• Red Hat Security Advisory RHSA-2020:4900 vom 2020-11-04
  https://access.redhat.com/errata/RHSA-2020:4900
• Red Hat Security Advisory RHSA-2020:5004 vom 2020-11-10
  https://access.redhat.com/errata/RHSA-2020:5004
• Red Hat Security Advisory RHSA-2020:5003 vom 2020-11-10
  https://access.redhat.com/errata/RHSA-2020:5003
• Oracle Linux Security Advisory ELSA-2020-5003 vom 2020-11-12
  http://linux.oracle.com/errata/ELSA-2020-5003.html
• Oracle Linux Security Advisory ELSA-2020-4542 vom 2020-11-11
  https://linux.oracle.com/errata/ELSA-2020-4542.html
• CentOS Security Advisory CESA-2020:5003 vom 2020-11-18
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-5003-Low-CentOS-7-fence-agents-Security-Update-tp4646065.html
• CentOS Security Advisory CESA-2020:5004 vom 2020-11-18
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-5004-Low-CentOS-7-resource-agents-Security-Update-tp4646038.html
• Red Hat Security Advisory RHSA-2020:5149 vom 2020-11-18
  https://access.redhat.com/errata/RHSA-2020:5149
• Oracle Linux Security Advisory ELSA-2020-5947 vom 2020-11-24
  https://linux.oracle.com/errata/ELSA-2020-5947.html
• AVAYA Security Advisory ASA-2020-191 vom 2020-11-25
  https://downloads.avaya.com/css/P8/documents/101072549
• SUSE Security Update SUSE-SU-2020:3565-1 vom 2020-11-30
  https://lists.suse.com/pipermail/sle-security-updates/2020-November/007889.html
• SUSE Security Update SUSE-SU-2020:3566-1 vom 2020-11-30
  https://lists.suse.com/pipermail/sle-security-updates/2020-November/007890.html
• SUSE Security Update SUSE-SU-2020:3596-1 vom 2020-12-02
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007903.html
• SUSE Security Update SUSE-SU-2020:3597-1 vom 2020-12-02
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007904.html
• AVAYA Security Advisory ASA-2020-171 vom 2020-12-07
  https://downloads.avaya.com/css/P8/documents/101072804
• AVAYA Security Advisory ASA-2020-173 vom 2020-12-07
  https://downloads.avaya.com/css/P8/documents/101072802
• AVAYA Security Advisory ASA-2020-170 vom 2020-12-07
  https://downloads.avaya.com/css/P8/documents/101072805
• AVAYA Security Advisory ASA-2020-196 vom 2020-12-08
  https://downloads.avaya.com/css/P8/documents/101072837
• SUSE Security Update SUSE-SU-2020:3737-1 vom 2020-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007949.html
• Amazon Linux Security Advisory ALAS-2021-1639 vom 2021-05-24
  https://alas.aws.amazon.com/AL2/ALAS-2021-1639.html
• AVAYA Security Advisory ASA-2020-166 vom 2020-12-15
  https://downloads.avaya.com/css/P8/documents/101072982
• Red Hat Security Advisory RHSA-2021:0146 vom 2021-01-14
  https://access.redhat.com/errata/RHSA-2021:0146
• Red Hat Security Advisory RHSA-2021:0258 vom 2021-01-26
  https://access.redhat.com/errata/RHSA-2021:0258
• Red Hat Security Advisory RHSA-2021:2116 vom 2021-05-26
  https://access.redhat.com/errata/RHSA-2021:2116
• Red Hat Security Advisory RHSA-2021:0281 vom 2021-02-03
  https://access.redhat.com/errata/RHSA-2021:0281
• Red Hat Security Advisory RHSA-2021:0308 vom 2021-02-08
  https://access.redhat.com/errata/RHSA-2021:0308
• Red Hat Security Advisory RHSA-2021:0310 vom 2021-02-08
  https://access.redhat.com/errata/RHSA-2021:0310
• SUSE Security Update SUSE-SU-2021:0344-1 vom 2021-02-08
  https://lists.suse.com/pipermail/sle-security-updates/2021-February/008282.html
• Red Hat Security Advisory RHSA-2021:0313 vom 2021-02-09
  https://access.redhat.com/errata/RHSA-2021:0313
• Debian Security Advisory DLA-2645 vom 2021-04-29
  https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
• Red Hat Security Advisory RHSA-2020:5635 vom 2021-02-24
  https://access.redhat.com/errata/RHSA-2020:5635
• Red Hat Security Advisory RHSA-2020:5633 vom 2021-02-24
  https://access.redhat.com/errata/RHSA-2020:5633
• SUSE Security Update SUSE-SU-2021:1779-1 vom 2021-05-27
  https://lists.suse.com/pipermail/sle-security-updates/2021-May/008868.html
• SUSE Security Update SUSE-SU-2021:1806-1 vom 2021-05-31
  https://lists.suse.com/pipermail/sle-security-updates/2021-May/008895.html
• SUSE Security Update SUSE-SU-2021:1808-1 vom 2021-05-31
  https://lists.suse.com/pipermail/sle-security-updates/2021-May/008896.html
• SUSE Security Update SUSE-SU-2021:1807-1 vom 2021-05-31
  https://lists.suse.com/pipermail/sle-security-updates/2021-May/008894.html
• Red Hat Security Advisory RHSA-2021:3016 vom 2021-08-06
  https://access.redhat.com/errata/RHSA-2021:3016
• Oracle Linux Security Advisory ELSA-2020-5004 vom 2021-11-05
  https://linux.oracle.com/errata/ELSA-2020-5004.html
• Red Hat Security Advisory RHSA-2021:4179 vom 2021-11-09
  https://access.redhat.com/errata/RHSA-2021:4179
• Debian Security Advisory DLA-2850 vom 2021-12-26
  https://lists.debian.org/debian-lts-announce/2021/12/msg00014.html
• Red Hat Security Advisory RHSA-2022:0633 vom 2022-02-22
  https://access.redhat.com/errata/RHSA-2022:0633
• Oracle Linux Security Advisory ELSA-2022-9204 vom 2022-03-10
  https://linux.oracle.com/errata/ELSA-2022-9204.html
• Red Hat Security Advisory RHSA-2022:0056 vom 2022-03-10
  https://access.redhat.com/errata/RHSA-2022:0056
• Ubuntu Security Notice USN-5474-1 vom 2022-06-08
  https://ubuntu.com/security/notices/USN-5474-1
• Red Hat Security Advisory RHSA-2022:5234 vom 2022-06-28
  https://access.redhat.com/errata/RHSA-2022:5234
• Oracle Linux Security Advisory ELSA-2022-5234 vom 2022-06-30
  http://linux.oracle.com/errata/ELSA-2022-5234.html
• CentOS Security Advisory CESA-2022:5234 vom 2022-08-02
  https://lists.centos.org/pipermail/centos-announce/2022-August/073616.html
• Ubuntu Security Notice USN-5474-2 vom 2022-08-24
  https://ubuntu.com/security/notices/USN-5474-2
• NetApp Security Advisory NTAP-20221111-0004 vom 2022-11-11
  https://security.netapp.com/advisory/ntap-20221111-0004/