314 matches found
MGASA-2019-0265 Updated squid packages fix security vulnerabilities
Updated squid packages fix security vulnerabilities: It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service CVE-2019-12525. It was discovered that Squid incorrectly handled...
LenovoEMC Storage Gear Leaks Sensitive Financial Data
Researchers are warning of a vulnerability in LenovoEMC storage hardware and legacy Iomega-branded network attached storage NAS appliances that could lead to a breach of data stored on the devices. The bug, disclosed Tuesday by Lenovo, is rated high-severity and can be triggered via specially...
April 9, 2019—KB4493472 (Monthly Rollup)
None None...
SUSE-SU-2019:0888-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2018-17199: A bug in Apache's 'modsessioncookie' lead to an issue where the module did not respect a cookie's expiry time. bsc1122839 CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout...
SUSE-SU-2018:2843-1 Security update for pam_pkcs11
This update for pampkcs11 fixes the following security issues: - It was possible to replay an authentication by using a specially prepared smartcard or token bsc1105012 - Prevent buffer overflow if a user has a home directory with a length of more than 512 bytes bsc1105012 - Memory not cleaned...
PT-2018-1486
Name of the Vulnerable Software and Affected Versions OpenSSH versions 7.7 and earlier Description The issue is related to a user enumeration vulnerability. It is caused by the server's different responses to authentication requests when valid and invalid user accounts are present. An attacker ca...
June 21, 2018—KB4284822 (OS Build 16299.522)
None None...
June 21, 2018—KB4284830 (OS Build 15063.1182)
None None...
SUSE-SU-2018:1464-1 Security update for ntp
This update for ntp fixes the following issues: - Update to 4.2.8p11 bsc1082210: CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. CVE-2018-7182: ctlgetitem: buffer read overrun...
May 21, 2018—KB4103714 (OS Build 16299.461)
None None...
SUSE-SU-2018:0807-1 Security update for memcached
This update for memcached fixes the following issues: Security issues fixed: - CVE-2011-4971: remote DoS bsc817781. - CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode bsc798458. - CVE-2013-7239: SASL authentication allows wrong credentials to access memcache bsc857188. -...
February 22, 2018—KB4077528 (OS Build 15063.936)
None None...
Tenable University: Nessus Certificate of Proficiency
Yesterday I finished "Nessus Certificate of Proficiency" learning plan at Tenable University and passed the final test. Here I would like to share my impressions. First of all, few words about my motivation. I use Nessus literally every day at work. So, it was fun to check my knowledge. I already...
MGASA-2017-0475 Updated freerdp packages fix security vulnerabilities
An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle...
SUSE-SU-2017:2356-1 Security update for postgresql96
This update for postgresql96 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...
MGASA-2017-0308 Updated heimdal packages fix security vulnerability
Transit path validation inadvertently caused the previous hop realm to not be added to the transit path of issued tickets. This may, in some cases, enable bypass of capath policy in Heimdal versions 1.5 through 7.2 CVE-2017-6594. Note, this may break sites that rely on the bug. With the bug some...
OPENSUSE-SU-2017:2209-1 Security update for MozillaThunderbird
This update for MozillaThunderbird to version 52.3 fixes security issues and bugs. The following vulnerabilities were fixed: - CVE-2017-7798: XUL injection in the style editor in devtools - CVE-2017-7800: Use-after-free in WebSockets during disconnection - CVE-2017-7801: Use-after-free with marqu...
How to Enable AuthManager logging in Citrix Workspace App for Linux
This article describes the procedure to enable AuthManager daemon logging which is responsible for Authentication of the client with the WebInterface/Storefront. This will be useful in troubleshooting Authentication Issues...
Critical Flaws Found in Network Management Systems
Eleven critical vulnerabilities have been patched in network management systems NMS from four leading manufacturers: Cloudview, Netikus, Paessler and Opmantek. The flaws enable remote cross-site scripting and command-injection attacks. Public disclosure of the vulnerabilities coincided with a...