SUSE SLED15 / SLES15 Security Update : rust, rust-cbindgen (SUSE-SU-2020:2041-1)

"This update for rust, rust-cbindgen fixes the following issues : rust was updated for use by Firefox 76ESR. Fixed miscompilations with rustc 1.43 that lead to LTO failures bsc1173202 Update to version 1.43.1 Updated openssl-src to 1.1.1g for CVE-2020-1967. Fixed the stabilization of AVX-512...

DEBIAN-CVE-2019-11252

The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes...

The vulnerability of the VM-Series network interface cards is related to insufficient protection of registration data, which allows attackers to disclose sensitive information and cause service failures.

The vulnerability of the VM-Series network firewalls is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...

The vulnerability of the SAP NetWeaver software integration platform, which arises due to insufficient validation of input data, allows a perpetrator to trigger service failures.

The vulnerability of the SAP NetWeaver software integration platform exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the cpSeparateBufToContigBuf function in software for viewing, editing, and converting TIFF files relates to writing beyond the buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cpSeparateBufToContigBuf function in software for viewing, editing, and converting TIFF files relates to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

The vulnerability of the jpeg_mem_available() function in the libjpeg library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the jpegmemavailable function jmemnobs.c in the libjpeg image processing library involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the jdhuff.c component in the libjpeg image processing library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the jdhuff.c component in the libjpeg library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the PuTTY encryption protection mechanism, which stems from insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the PuTTY encryption protection tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the read_pixel function in the libjpeg library allows a hacker to induce a service failure.

The vulnerability of the readpixel function in the image processing library libjpeg is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:1798-1)

This update for mariadb-100 fixes the following issues : mariadb-100 was updated to version 10.0.44 bsc1171550 CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. CVE-2020-2812: Fixed an issue which could have resulted in unauthorized abilit...

openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0945-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for rust, rust-cbindgen (moderate)

openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0945-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has two fixes is now...

openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0933-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for rust, rust-cbindgen (moderate)

openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0933-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now...

The vulnerability of the X509_NAME_oneline function (crypto/x509/x509_obj.c) in the OpenSSL library allows a hacker to gain unauthorized access to confidential data or cause service failures.

The vulnerability of the X509NAMEoneline function in the OpenSSL library is related to the execution of operations within acceptable buffer data limits. Exploitation of this vulnerability could allow a malicious actor to gain unauthorized access to confidential data or cause service failures...

The vulnerability of many components of the OpenOffice.org module of the LibreOffice office software package allows a hacker to trigger a service failure.

The vulnerability of many components of the OpenOffice.org module of the LibreOffice office software package is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential...

The vulnerability of the OpenOffice.org component of the Office software suite LibreOffice, related to the operation of exceeding the allowed data buffer limits, allows a hacker to trigger a service failure.

The vulnerability of the OpenOffice.org component of the LibreOffice office software package is related to the operation of functions that exceed acceptable data buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a specially...

Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.

The vulnerability of the Connected User Experience and Telemetry Service services in Microsoft Windows operating systems is related to insufficient verification of permission assignment for critical resources. Exploiting this vulnerability can allow attackers to cause service failures...

The Fear of Vendor Lock-in Leads to Cloud Failures

Vendor lock-in has been an often-quoted risk since the mid-1990’s. Fear that by investing too much with one vendor, an organization reduces their options in the future. Was this a valid concern? Is it still today? The Risk Organizations walk a fine line with their technology vendors. Ideally, you...