Fedora
(Fedoraproject)| Date | ID | Summary | Products | Score | Patch |
|---|---|---|---|---|---|
| 2019-11-25 | CVE-2012-5617 | gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation | Fedora, Gksu\-Polkit | N/A | |
| 2019-11-21 | CVE-2019-18889 | An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. Serializing certain cache adapter interfaces could result in remote code injection. This is related to symfony/cache. | Fedora, Symfony | N/A | |
| 2019-11-21 | CVE-2019-18888 | An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidated user input as the file for which MIME type validation should occur, then arbitrary arguments are passed to the underlying file command. This is related to symfony/http-foundation (and symfony/mime in 4.3.x). | Fedora, Symfony | N/A | |
| 2019-11-21 | CVE-2019-18887 | An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. The UriSigner was subject to timing attacks. This is related to symfony/http-kernel. | Fedora, Symfony | N/A | |
| 2019-11-22 | CVE-2019-18622 | An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature. | Fedora, Backports_sle, Leap, Phpmyadmin | N/A | |
| 2019-11-25 | CVE-2019-14891 | A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host. | Fedora, Cri\-O, Openshift_container_platform | N/A | |
| 2019-11-25 | CVE-2019-13723 | Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | Fedora, Chrome, Enterprise_linux_desktop, Enterprise_linux_server, Enterprise_linux_workstation | N/A | |
| 2019-11-15 | CVE-2014-0021 | Chrony before 1.29.1 has traffic amplification in cmdmon protocol | Chrony, Debian_linux, Fedora | N/A | |
| 2019-11-25 | CVE-2012-5644 | libuser has information disclosure when moving user's home directory | Debian_linux, Fedora, Libuser, Enterprise_linux | N/A | |
| 2019-11-25 | CVE-2012-5630 | libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees. | Fedora, Libuser, Enterprise_linux | N/A |