OMERO before 5.6.1 makes the details of each user available to all users.

Published at: June 17, 2020 at 01:15PM
View on website

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.

Published at: June 17, 2020 at 12:15PM
View on website

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.

Published at: June 17, 2020 at 12:15PM
View on website

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.

Published at: June 17, 2020 at 01:15PM
View on website

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames.

Published at: June 17, 2020 at 01:15PM
View on website