[월:] 2021년 09월

USN-5066-1: PySAML2 vulnerability Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly use this issue to alter SAML documents. Source: USN-5066-1: PySAML2 vulnerability

USN-5065-1: Open vSwitch vulnerability It was discovered that Open vSwitch incorrectly handled decoding RAW_ENCAP actions. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code. Source: USN-5065-1: Open vSwitch vulnerability

USN-5064-1: GNU cpio vulnerability Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use this issue to cause cpio to crash, resulting in a denial of service, or possibly execute arbitrary code. Source: USN-5064-1: GNU cpio vulnerability

USN-5063-1: HAProxy vulnerabilities Ori Hollander discovered that HAProxy incorrectly handled HTTP header name length encoding. A remote attacker could possibly use this issue to inject a duplicate content-length header and perform request smuggling attacks. Source: USN-5063-1: HAProxy vulnerabilities