SUSE-RU-2020:0775-1 Recommended update for python-botocore

This update for python-boto3, python-botocore and python-futures fixes the following issues: python-botocore was updated to 1.13.33: - Fix for python3-botocore versioning issues between SLES12 SP3 Teradata and Public Cloud Module. bsc1129696 - Remove the broken attempt to avoid using the bundled...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and WebSphere Message Broker

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8.0.5.5 and IBM® Runtime Environment Java™ Versions 7.0.10.15 & 7.0.10.10 used by IBM Integration Bus. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details If...

PT-2020-12343

Name of the Vulnerable Software and Affected Versions Nagios XI version 5.6.11 Description The issue allows for XSS via the username parameter in the includes/components/ldap ad integration/ endpoint. Recommendations For Nagios XI version 5.6.11, avoid using the username parameter in the affected...

Apex One OfficeScan Code Execution

The vulnerability of the Apex One and OfficeScan anti-virus software components is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unspecified Vulnerabilities in Trend Micro Apex One, OfficeScan XG and Worry-Free Business Security

Trend Micro OfficeScan XG is a suite of distributed anti-virus software, Apex One is a suite of endpoint security software that provides automated threat detection and response, and Worry-Free. Business Security is a suite of enterprise-class information security protection solutions. A security...

ICU: Integer overflow in UnicodeString::doAppend()

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

CVE-2020-8468: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication...

USN-4305-1: ICU vulnerability

André Bargull discovered that ICU incorrectly handled certain strings. An attacker could possibly use this issue to execute arbitrary code...

VulnCheck KEV: CVE-2020-8468

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components...

Microsoft Windows Graphics Components Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. A privilege escalation vulnerabilit...

CVE-2020-10531

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

CVE-2020-10531

ICU for C/C++ up to version 66.1 is affected by CVE-2020-10531: an integer overflow in UnicodeString::doAppend() in common/unistr.cpp can cause a heap-based buffer overflow. Public disclosures and vendor advisories (e.g., ALAS2-2020-1418/ALSA-2020:1317, CESA/DSA advisories) reference this vulnera...

CVE-2020-10531

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

CVE-2020-10531: Integer Overflow or Wraparound

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

Microsoft Windows Graphics Component Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. A privilege vulnerability exists in...

Guarding against supply chain attacks—Part 3: How software becomes compromised

Do you know all the software your company uses? The software supply chain can be complex and opaque. It’s comprised of software that businesses use to run operations, such as customer relationship management CRM, enterprise resource planning ERP, and project management. It also includes the...

SUSE-SU-2020:0642-1 Security update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-designate, openstack-heat, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-horizon-plugin-octavia-ui, openstack-ironic, openstack-ironic-python-agent, openstack-keystone, openstack-magnum, openstack-monasca-agent, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-sahara, openstack-swift, python-amqp, python-ironic-lib, python-keystoneauth1, python-keystoneclient, python-keystonemiddleware, python-ovs, supportutils-plugin-suse-openstack-cloud, rubygem-crowbar-client, rubygem-puma, venv-openstack-horizon

This update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, openstack-barbica...

March 10, 2020—KB4541505 (Security-only update)

March 10, 2020—KB4541505 Security-only update Applies To Windows 8.1 Windows Server 2012 R2 Windows Embedded 8.1 Industry Enterprise Windows Embedded 8.1 Industry Pro Improvements and fixes This security update includes quality improvements. Key changes include: Security updates to Windows App...

Servicing stack update for Windows 10, version 1903 and 1909: March 10, 2020

Servicing stack update for Windows 10, version 1903 and 1909: March 10, 2020 Applies To Windows 10, version 1903, all editions Windows 10, version 1909, all editions Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates...

March 10, 2020—KB4540705 (OS Build 15063.2313)

March 10, 2020—KB4540705 OS Build 15063.2313 Applies To Windows 10, version 1703, all editions Note Current status of Windows 10, version 1703 Windows 10, version 1703 has reached end of service for all editions. To continue receiving security and quality updates, Microsoft recommends updating to...