It was discovered that pysaml2, a Python implementation of SAML to beused in a WSGI environment, was susceptible to XML signature wrappingattacks, which could result in a bypass of signature verification.
More info:
https://www.debian.org/security/2020/dsa-4630
Multiple security issues were discovered in Pillow, a Python imaginglibrary, which could result in denial of service and potentially theexecution of arbitrary code if malformed PCX, FLI, SGI or TIFF imagesare processed.
More info:
https://www.debian.org/security/2020/dsa-4631
Ilja Van Sprundel reported a logic flaw in the Extensible AuthenticationProtocol (EAP) packet parser in the Point-to-Point Protocol Daemon(pppd). An unauthenticated attacker can take advantage of this flaw totrigger a stack-based buffer overflow, leading to denial of service(pppd daemon crash).
More info:
https://www.debian.org/security/2020/dsa-4632
More info:
https://wpvulndb.com/vulnerabilities/10082
Type: Vulnerability. PHP is prone to an insecure file-permissions vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111975&om_rssid=sr-advisories
Type: Vulnerability. Cisco Unified Contact Center Enterprise is prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111976&om_rssid=sr-advisories
Type: Vulnerability. Cisco Meeting Server is prone to a remote denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111977&om_rssid=sr-advisories
Type: Vulnerability. PHP is prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111978&om_rssid=sr-advisories
Type: Vulnerability. Multiple IBM DB2 products are prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111979&om_rssid=sr-advisories
Type: Vulnerability. PHP is prone to a heap-based buffer-overflow vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111974&om_rssid=sr-advisories