openSUSE Security Update : openvswitch (openSUSE-2021-239)

This update for openvswitch fixes the following issues : - openvswitch was updated to 2.13.2 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : tomcat (openSUSE-2021-43)

This update for tomcat fixes the following issue : - CVE-2020-17527: Fixed a HTTP/2 request header mix-up bsc1179602. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

openSUSE Security Update : PackageKit (openSUSE-2020-2344)

This update for PackageKit fixes the following issue : - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313 This update was imported from the...

openSUSE Security Update : gdk-pixbuf (openSUSE-2021-150)

This update for gdk-pixbuf fixes the following issues : - CVE-2020-29385: Fixed an infinite loop in lzw.c in the function writeindexes bsc1180393. - Fixed an integer underflow in the GIF loader bsc1174307. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network...

openSUSE Security Update : crmsh (openSUSE-2021-55)

This update for crmsh fixes the following issue : - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

openSUSE Security Update : nodejs14 (openSUSE-2021-66)

This update for nodejs14 fixes the following issues : - New upstream LTS version 14.15.4 : - CVE-2020-8265: use-after-free in TLSWrap High bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap objec...

openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2310)

This update for webkit2gtk3 fixes the following issues : -webkit2gtk3 was updated to version 2.30.3 bsc1179122 bsc1179451 : - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code...

openSUSE Security Update : ovmf (openSUSE-2020-2314)

This update for ovmf fixes the following issues : - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SUSE SLED15 / SLES15 Security Update : open-iscsi (SUSE-SU-2021:0127-1)

This update for open-iscsi fixes the following issues : Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc1179908, including : - uip: check for TCP urgent pointer past end of frame - uip: check for u8 overflow when processing TCP options - uip: check for header length underflow during...

January 12, 2021—KB4598287 (Security-only update)

None None...

Microsoft Excel Security Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft Office 2013 Service Pack 1...

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4598503)

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4598503 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 IMPORTANT Verify that you have installed the required updates...

Security update for xen (moderate)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:2331-1 Rating: moderate References: 1027519 1176782 1179496 1179498 1179501 1179502 1179506 1179514 1179516 Cross-References: CVE-2020-29480 CVE-2020-29481 CVE-2020-29483 CVE-2020-29484 CVE-2020-29566 CVE-2020-295...

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2020:2310-1 Rating: important References: 1171531 1177087 1179122 1179451 Cross-References: CVE-2020-13543 CVE-2020-13584 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 Affected Products: openSUSE Leap 15.2 An updat...

Trend Micro InterScan Web Security Virtual Appliance CSRF Protection Bypass Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance 6....

CVE-2020-27010

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3764-1)

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-15436: Fixed a use after free vulnerability in fs/blockdev.c which could have allowed local users to gain privileges or cause a denial of service...

Security update for curl (moderate)

openSUSE Security Update: Security update for curl Announcement ID: openSUSE-SU-2020:2238-1 Rating: moderate References: 1179398 1179399 1179593 Cross-References: CVE-2020-8284 CVE-2020-8285 CVE-2020-8286 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

Security update for rpmlint (moderate)

openSUSE Security Update: Security update for rpmlint Announcement ID: openSUSE-SU-2020:2232-1 Rating: moderate References: 1169614 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for rpmlint fixes the followin...

SUSE-SU-2020:3698-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-2437 fixes one issue. The following security issue was fixed: - CVE-2020-25668: Fixed a concurrency use-after-free in confontop bsc1178622...