SUSE-SU-2018:2891-2 Security update for wireshark

This update for wireshark to version 2.4.9 fixes the following issues: Wireshark was updated to 2.4.9 bsc1094301, bsc1106514. Security issues fixed: - CVE-2018-16058: Bluetooth AVDTP dissector crash wnpa-sec-2018-44 - CVE-2018-16056: Bluetooth Attribute Protocol dissector crash wnpa-sec-2018-45 -...

CVE-2018-3182

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

Design/Logic Flaw

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Logging. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2018-21802)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Parser subcomponent of the MySQL Server component of Oracle MySQL. An attacker can exploit this...

Unspecified Vulnerability in Oracle GlassFish Server (CNVD-2019-38557)

Oracle Fusion Middleware is a digital business platform for enterprise and cloud computing, and Oracle GlassFish Server is an implementation of the Java Platform Enterprise Edition Java EE 6 specification that provides a flexible, lightweight, production-ready Java EE 6 application server. An...

Oracle Open Design Alliance Drawings SDK Buffer Overflow Vulnerability (CNVD-2019-37385)

The Open Design Alliance Drawings SDK is a software development kit SDK for .dwg and .dgn interoperability. A buffer overflow vulnerability exists in Oracle Open Design Alliance Drawings SDK. An attacker could exploit this vulnerability to obtain sensitive information in process memory or cause a...

End of support for Office 2016 and Office 2019

None None...

USN-3783-1: Apache HTTP Server vulnerabilities

Robert Swiecki discovered that the Apache HTTP Server HTTP/2 module incorrectly destroyed certain streams. A remote attacker could possibly use this issue to cause the server to crash, leading to a denial of service. CVE-2018-1302 Craig Young discovered that the Apache HTTP Server HTTP/2 module...

Foxit Reader < 9.3 Multiple Vulnerabilities - Windows

Foxit Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:reader";...

Adobe Acrobat and Reader Heap Overflow (APSB18-30: CVE-2018-12846)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Heap Overflow (APSB18-30: CVE-2018-12833)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Heap Overflow (APSB18-30: CVE-2018-12837)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Heap Overflow (APSB18-30: CVE-2018-12836)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Adobe Acrobat and Reader Heap Overflow (APSB18-30: CVE-2018-12851)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

SUSE-SU-2018:2891-1 Security update for wireshark

This update for wireshark to version 2.4.9 fixes the following issues: Wireshark was updated to 2.4.9 bsc1094301, bsc1106514. Security issues fixed: - CVE-2018-16058: Bluetooth AVDTP dissector crash wnpa-sec-2018-44 - CVE-2018-16056: Bluetooth Attribute Protocol dissector crash wnpa-sec-2018-45 -...

Belkin Wemo Insight Smart Plug Buffer Overflow (CVE-2018-6692)

A buffer overflow vulnerability exists in Belkin Wemo Insight Smart Plug. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

389-ds-base security and bug fix update

1.3.7.5-28 - Bump version to 1.3.7.5-28 - Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search - Resolves: Bug 1628677 - Crash in deletepasswdPolicy when persistent search connections are terminated unexpectedly 1.3.7.5-27 - Bump version to...

firefox security update

60.2.0-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 60.2.0-1 - Update to 60.2.0 ESR 60.1.0-9 - Do not set user agent rhbz1608065 - GTK dialogs are localized now rhbz1619373 - JNLP association works again rhbz1607457 60.1.0-8 - Fixed...

September 20, 2018—KB4457133 (Preview of Monthly Rollup)

None None...

Description of the Communicator 2007 R2 cumulative update: January 2010

Describes the issue that is fixed in the Communicator 2007 R2 cumulative update that is dated January 2010.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issue that is fixed in the cumulative update that is dated January 2010.This article describes the following items abo...