Day: 30 diciembre, 2019

It was discovered that the Title blacklist functionality in MediaWiki,a website engine for collaborative work, could by bypassed. More info: https://www.debian.org/security/2019/dsa-4592

It was found that freeimage, a graphics library, was affected by thefollowing two security issues: More info: https://www.debian.org/security/2019/dsa-4593

Guido Vranken discovered an overflow bug in the x64_64 Montgomerysquaring procedure used in exponentiation with 512-bit moduli. More info: https://www.debian.org/security/2019/dsa-4594

It was discovered that debian-lan-config, a FAI config space for theDebian-LAN system, configured too permissive ACLs for the Kerberos adminserver, which allowed password changes for other user principals. More info: https://www.debian.org/security/2019/dsa-4595

Several issues were discovered in the Tomcat servlet and JSP engine, whichcould result in session fixation attacks, information disclosure, cross-sitescripting, denial of service via resource exhaustion and insecureredirects. More info: https://www.debian.org/security/2019/dsa-4596

Several issues were discovered in the Tomcat servlet and JSP engine, whichcould result in session fixation attacks, information disclosure, cross-sitescripting, denial of service via resource exhaustion and insecureredirects. More info: https://www.debian.org/security/2019/dsa-4596