Project: Drupal coreDate: 2022-June-10Security risk: Moderately critical 13∕25 AC:Complex/A:None/CI:Some/II:Some/E:Theoretical/TD:UncommonVulnerability: Third-party librariesCVE IDs: CVE-2022-31042CVE-2022-31043Description: Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. Guzzle has released two security advisories:Failure to strip the Cookie header on change in host or HTTP downgradeFix failure to strip Authorization header on
More info:
https://www.drupal.org/sa-core-2022-011
Java SE vulnerabilities CVE-2019-2973 and CVE-2019-2981 Security Advisory Security Advisory Description CVE-2019-2973 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE ( ...
More info:
https://support.f5.com/csp/article/K41913011?utm_source=f5support&utm_medium=RSS
Java SE vulnerabilities CVE-2019-2602, CVE-2019-2698, CVE-2019-2945, and CVE-2019-2962 Security Advisory Security Advisory Description CVE-2019-2602 Vulnerability in the Java SE, Java SE Embedded ...
More info:
https://support.f5.com/csp/article/K07519400?utm_source=f5support&utm_medium=RSS
Java SE vulnerabilities CVE-2019-2987, CVE-2019-2988, and CVE-2019-2992 Security Advisory Security Advisory Description CVE-2019-2987 Vulnerability in the Java SE product of Oracle Java SE ( ...
More info:
https://support.f5.com/csp/article/K40264570?utm_source=f5support&utm_medium=RSS
Java SE vulnerabilities CVE-2019-2978 and CVE-2019-2989 Security Advisory Security Advisory Description CVE-2019-2978 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE ( ...
More info:
https://support.f5.com/csp/article/K55136511?utm_source=f5support&utm_medium=RSS
Java SE vulnerability CVE-2019-2964 Security Advisory Security Advisory Description Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported ...
More info:
https://support.f5.com/csp/article/K01106224?utm_source=f5support&utm_medium=RSS
Java SE vulnerability CVE-2019-2999 Security Advisory Security Advisory Description Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are ...
More info:
https://support.f5.com/csp/article/K54193041?utm_source=f5support&utm_medium=RSS
Java SE vulnerability CVE-2019-2983 Security Advisory Security Advisory Description Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported ...
More info:
https://support.f5.com/csp/article/K64928095?utm_source=f5support&utm_medium=RSS
