EulerOS 2.0 SP2 : cups (EulerOS-SA-2021-1286)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.CVE-2018-4180 - In macOS...

EulerOS 2.0 SP2 : squid (EulerOS-SA-2021-1363)

According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack c...

EulerOS 2.0 SP2 : spice (EulerOS-SA-2021-1361)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...

EulerOS 2.0 SP2 : oddjob (EulerOS-SA-2021-1334)

According to the version of the oddjob packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during the home...

EulerOS 2.0 SP2 : nss (EulerOS-SA-2021-1333)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of...

EulerOS 2.0 SP2 : perl-XML-Twig (EulerOS-SA-2021-1344)

According to the version of the perl-XML-Twig package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External...

EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2021-1367)

According to the version of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.CVE-2020-8037 Note that Tenable Network Security has...

Security update for php7 (important)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2021:0305-1 Rating: important References: 1182049 Cross-References: CVE-2021-21702 CVSS scores: CVE-2021-21702 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update tha...

openSUSE Security Update : openvswitch (openSUSE-2021-283)

This update for openvswitch fixes the following issues : - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package...

2021-02 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 for x64 (KB4602961)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 (KB4602961)

Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 KB4602961 Notice Revised 6/8/2021 On June 8th, 2021, this update was released to replace a previous update to address a “revocation server was offline” error that may occur during installation. If you've already installed a...

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4603005)

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4603005 Notice Revised 6/8/2021 On June 8th, 2021, this update was released to replace a previous update to address a “revocation server was offline” error that may occur during installation. If you'...

openSUSE Security Update : openvswitch (openSUSE-2021-239)

This update for openvswitch fixes the following issues : - openvswitch was updated to 2.13.2 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : tomcat (openSUSE-2021-43)

This update for tomcat fixes the following issue : - CVE-2020-17527: Fixed a HTTP/2 request header mix-up bsc1179602. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

openSUSE Security Update : PackageKit (openSUSE-2020-2344)

This update for PackageKit fixes the following issue : - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313 This update was imported from the...

openSUSE Security Update : ovmf (openSUSE-2020-2314)

This update for ovmf fixes the following issues : - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : nodejs14 (openSUSE-2021-66)

This update for nodejs14 fixes the following issues : - New upstream LTS version 14.15.4 : - CVE-2020-8265: use-after-free in TLSWrap High bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap objec...

openSUSE Security Update : gdk-pixbuf (openSUSE-2021-150)

This update for gdk-pixbuf fixes the following issues : - CVE-2020-29385: Fixed an infinite loop in lzw.c in the function writeindexes bsc1180393. - Fixed an integer underflow in the GIF loader bsc1174307. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network...

openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2310)

This update for webkit2gtk3 fixes the following issues : -webkit2gtk3 was updated to version 2.30.3 bsc1179122 bsc1179451 : - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code...

openSUSE Security Update : crmsh (openSUSE-2021-55)

This update for crmsh fixes the following issue : - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...