openSUSE: Security Advisory for the (openSUSE-SU-2021:0579-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Photon OS 3.0: Linux PHSA-2021-3.0-0221

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0221. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148901;...

SUSE-SU-2021:1266-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-29154: Fixed incorrect computation of branch displacements, allowing arbitrary code execution bsc1184391. - CVE-2020-25670, CVE-2020-25671,...

OPENSUSE-SU-2021:0579-1 Security update for the Linux Kernel

The openSUSE Linux Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3483: Fixed a use-after-free in nosy.c bsc1184393. - CVE-2021-30002: Fixed a memory leak for large arguments in videousercopy bsc1184120. - CVE-2021-29154:...

SUSE: Security Advisory (SUSE-SU-2021:1248-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1248-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed multiple bugs in NFC subsytem bsc1178181. CVE-2020-36311: Fixed a denial of service so...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:0579-1 Rating: important References: 1047233 1065729 1113295 1152489 1154353 1155518 1156395 1167574 1175995 1178181 1181507 1183405 1184074 1184120 1184194 1184211 1184388 1184391 1184393 1184485...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1210-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0...

CVE-2020-3483

CVE-2020-3483 affects Duo Network Gateway (DNG). Root cause: certificate and private key values uploaded for DNG-protected applications were logged in plain-text due to incomplete exclusion in the logging logic. Affected versions: 1.3.3 through 1.5.7. Impact: if attackers gained access to DNG log...

CVE-2019-3483

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3483

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3483

CVE-2019-3483 concerns ArcSight Logger prior to 6.7. The related documents indicate an information-disclosure vulnerability in ArcSight Logger versions before 6.7 and that mitigation exists for those versions. No exploitation details or patch version are explicitly provided in the connected docum...

Ubuntu 14.04 LTS / 16.04 LTS : procmail vulnerability (USN-3483-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3483-1 advisory. Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to...

CVE-2017-3483

CVE-2017-3483 affects Oracle FLEXCUBE Enterprise Limits and Collateral Management (subcomponent: Limits and Collateral). Affected versions are 12.0.0 and 12.1.0. The vulnerability allows a high-privilege, logon-local attacker to compromise the product and potentially obtain unauthorized access to...

CVE-2016-3483

CVE-2016-3483 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PeopleTools component (versions 8.53–8.55). The vulnerability resides in the File Processing subcomponent of PeopleTools and enables remote attackers to impact confidentiality and availability, as indicated b...

[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2982-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 19, 2014 http://www.debian.org/security/faq -...

Fedora Update for rubygem-activerecord FEDORA-2014-8065

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : rubygem-activerecord-4.0.0-4.fc20 (2014-8065)

Fix for CVE-2014-3483 rubygem-activerecord: SQL injection vulnerability in 'range' quoting and its regression Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Updated ruby-actionpack packages fix security issues

Updated ruby-actionpack and ruby-activerecord packages fix security vulnerabilities: Directory traversal vulnerability in actionpack/lib/abstractcontroller/base.rb in the implicit-render implementation in Ruby on Rails before 4.0.5, when certain route globbing configurations are enabled, allows...

[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2982-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 19, 2014 http://www.debian.org/security/faq -...