SUSE SLES15 Security Update : slurm_17_11 (SUSE-SU-2020:3878-1)

This update for slurm1711 fixes the following issues : CVE-2020-27745: Fixed potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Fixed %posttrans macro resupdate to cope...

OPENSUSE-SU-2020:2286-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: Security issues fixed: - CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was...

Security update for slurm_18_08 (important)

openSUSE Security Update: Security update for slurm1808 Announcement ID: openSUSE-SU-2020:2286-1 Rating: important References: 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available.Descriptio...

SUSE-SU-2020:3878-1 Security update for slurm_17_11

This update for slurm1711 fixes the following issues: - CVE-2020-27745: Fixed potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. - Fixed %posttrans macro resupdate to...

SUSE-SU-2020:3877-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: Security issues fixed: - CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891...

SUSE SLES12 Security Update : slurm_18_08 (SUSE-SU-2020:3863-1)

This update for slurm1808 fixes the following issues : Security issues fixed : CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Note that Tenable...

SUSE-SU-2020:3863-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: Security issues fixed: - CVE-2020-27745: Fixed a potential buffer overflow from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891...

CVE-2020-27199

The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for...

CVE-2020-27199

The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for...

Authentication flaw

The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for...

CVE-2020-27199

The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for...

CVE-2020-27199

CVE-2020-27199 affects Magic Home Pro on Android (1.5.1). The issue is an Authentication Bypass enabling full control of a victim’s device group via token forgery and endpoint enumeration. Attack chain described includes: (1) enumerate bound users by mac address to obtain userName/userUniID/binde...

Magic Pro Home License Issue Vulnerability

Magic Pro Home is a mobile software from China-based Magic Pro that allows intelligent control of LED light illumination. A security vulnerability exists in Magic Pro Home application 1.5.1, which stems from allowing authentication to be bypassed. The application currently has security controls...

Denial of Service Vulnerability in Softmedia Rubik's Cube

SoftMedia Magic is a system optimization software. SoftMedia Magic has a denial of service vulnerability that can be exploited by attackers to cause a computer crash BSOD with a constructed program...

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability

Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic LIM for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation OpenEXR suffers from a buffer overflow vulnerability that can be exploited to cause a denial of service via a...

SUSE SLES15 Security Update : slurm (SUSE-SU-2020:3505-1)

This update for slurm fixes the following issues : CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Note that Tenable Network...

Industrial Light And Magic OpenEXR 缓冲区错误漏洞

Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic LIM for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation OpenEXR suffers from a buffer overflow vulnerability that can be exploited to cause a denial of service via a...

UBUNTU-CVE-2020-27746

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem...

Security update for slurm (important)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:2033-1 Rating: important References: 1178890 1178891 Cross-References: CVE-2020-27745 CVE-2020-27746 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description:...

SchedMD Slurm Competition Condition Problem Vulnerability

Schedmd SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD Schedmd, USA. A security vulnerability exists in SchedMD Slurm versions prior to 19.05.8 and versions prior to 20.02.6 of the 20.x series, which...