suse/venv-openstack-freezer&distro=SUSE OpenStack Cloud 8

Vulnerabilities (139)

• CVE-2020-1733Mar 11, 2020
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is cr

• CVE-2020-1737Mar 9, 2020
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip module as the extracted file(s) are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by cra

• CVE-2020-9402Mar 5, 2020
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possibl

• CVE-2020-1734Mar 3, 2020
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitr

• CVE-2019-18901Mar 2, 2020
  affected < 5.0.0.0~xrc2~dev2-10.18.2fixed 5.0.0.0~xrc2~dev2-10.18.2

  A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Li

• CVE-2020-5247Feb 28, 2020
  affected < 5.0.0.0~xrc2~dev2-10.20.1fixed 5.0.0.0~xrc2~dev2-10.20.1

  In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e. `CR`, `LF` or`/r`, `/n`) to end the header and inject malicious content, such as additional headers or an entir

• CVE-2020-7471Feb 3, 2020
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitabl

• CVE-2019-16792Jan 22, 2020
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally.

• CVE-2020-7595Jan 21, 2020
  affected < 5.0.0.0~xrc2~dev2-10.18.2fixed 5.0.0.0~xrc2~dev2-10.18.2

  xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

• CVE-2020-2574Jan 15, 2020
  affected < 5.0.0.0~xrc2~dev2-10.18.2fixed 5.0.0.0~xrc2~dev2-10.18.2

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple prot

• CVE-2020-5390Jan 13, 2020
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in different places and thus

• CVE-2019-19911Jan 5, 2020
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. Ho

• CVE-2020-5312Jan 3, 2020
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.

• CVE-2020-5313Jan 3, 2020
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.

• CVE-2019-14864Jan 2, 2020
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any s

• CVE-2019-16789Dec 26, 2019
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests contain

• CVE-2019-16785Dec 20, 2019
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if

• CVE-2019-16786Dec 20, 2019
  affected < 5.0.0.0~xrc2~dev2-10.22.1fixed 5.0.0.0~xrc2~dev2-10.22.1

  Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separ

• CVE-2019-19844Dec 18, 2019
  affected < 5.0.0.0~xrc2~dev2-10.24.1fixed 5.0.0.0~xrc2~dev2-10.24.1

  Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token fo

• CVE-2019-16770Dec 5, 2019
  affected < 5.0.0.0~xrc2~dev2-10.18.2fixed 5.0.0.0~xrc2~dev2-10.18.2

  In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait p