Day: 2 octubre, 2021

Netty vulnerability CVE-2021-21295 Security Advisory Security Advisory Description Netty is an open-source, asynchronous event-driven network application framework for rapid development of ... More info: https://support.f5.com/csp/article/K55834441?utm_source=f5support&utm_medium=RSS

Apache Pulsar vulnerability CVE-2021-22160 Security Advisory Security Advisory Description If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the ... More info: https://support.f5.com/csp/article/K68146245?utm_source=f5support&utm_medium=RSS

Apache vulnerability CVE-2021-30641 Security Advisory Security Advisory Description Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with MergeSlashes OFF (CVE-2021-30641) More info: https://support.f5.com/csp/article/K13815051?utm_source=f5support&utm_medium=RSS

mod_auth_openidc vulnerability CVE-2021-20718 Security Advisory Security Advisory Description mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition ... More info: https://support.f5.com/csp/article/K89941125?utm_source=f5support&utm_medium=RSS

runc vulnerability CVE-2021-30465 Security Advisory Security Advisory Description runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the ... More info: https://support.f5.com/csp/article/K33820305?utm_source=f5support&utm_medium=RSS

glibc vulnerability CVE-2020-27618 Security Advisory Security Advisory Description The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte ... More info: https://support.f5.com/csp/article/K08641512?utm_source=f5support&utm_medium=RSS

MariaDB vulnerability CVE-2020-15180 Security Advisory Security Advisory Description A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` ... More info: https://support.f5.com/csp/article/K75885190?utm_source=f5support&utm_medium=RSS

polkit vulnerability CVE-2021-3560 Security Advisory Security Advisory Description ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing ... More info: https://support.f5.com/csp/article/K41410307?utm_source=f5support&utm_medium=RSS

Apache Cassandra vulnerability CVE-2020-13946 Security Advisory Security Advisory Description In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is ... More info: https://support.f5.com/csp/article/K36212405?utm_source=f5support&utm_medium=RSS

Python-Pillow vulnerability CVE-2021-25288 Security Advisory Security Advisory Description An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i. More info: https://support.f5.com/csp/article/K71249196?utm_source=f5support&utm_medium=RSS