May 10, 2022-KB5013868 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

CVE-2022-24799 Cross Site Scripting in Wire Webapp

wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted in the possibility of injecting and executing arbitrary HTML code and thus also JavaScript. If a user receives and views such a malicious...

April 12, 2022-KB5012328 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

April 12, 2022—KB5012666 (Security-only update)

None None...

Microsoft Skype for Business Server 信息泄露漏洞

Microsoft Skype for Business Server is a secure, unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. An information disclosure vulnerability exists in Microsoft Skype for...

KB5013270: Servicing stack update for Windows Server 2012: April 12, 2022

KB5013270: Servicing stack update for Windows Server 2012: April 12, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that...

KB5013269: Servicing stack update for Windows 10: April 12, 2022

None None...

April 12, 2022 Security update (KB5012589)

None None...

DLA-2945-1 tryton-server - security update

Bulletin has no description...

March 8, 2022—Hotpatch KB5011580 (OS Build 20348.587)

None None...

KB5011569: Servicing stack update for Windows 10: March 8, 2022

None None...

SUSE-SU-2022:0729-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: spacewalk-java: - Version 4.2.33-1 handle npe when syncing ubuntu errata bsc1196619 susemanager-sync-data: - Version 4.2.11-1 change centos 8 eol urls to vault which still work How to apply this update: 1. Log in as root user to the SUSE Manager server. 2...

January 27, 2022 Servicing stack update (KB5009640)

None None...

January 11, 2022-KB5008876 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2

None None...

CVE-2022-21669 Bot token exposed in main.py

PuddingBot is a group management bot. In version 0.0.6-b933652 and prior, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked and new version is already running on the server. As of time of publication, the maintainers are plannin...

KB5010215: Windows Server 2012 R2 stops responding after installing the December 14, 2021 update

KB5010215: Windows Server 2012 R2 stops responding after installing the December 14, 2021 update Summary After you install the December 14, 2021 Windows update on a server that is running Windows Server 2012 R2, the server may stop responding. Additionally, you may experience a black screen, slow...

OPENSUSE-SU-2021:4136-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request length leading to out of bounds memory write. bsc1190487 - CVE-2021-4010: The handler for the Suspend reques...

OPENSUSE-SU-2021:1587-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2021-4008: Fixed Privilege Escalation Vulnerability via Out-Of-Bounds Access in SProcRenderCompositeGlyphs bsc1193030. This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2021:4064-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2021-4008: Fixed Privilege Escalation Vulnerability via Out-Of-Bounds Access in SProcRenderCompositeGlyphs bsc1193030...

Vulnerabilities fixed in Atlassian Jira Server

Atlassian has fixed two vulnerabilities in Jira Server. A authenticated malicious person could exploit the vulnerabilities to give themselves elevated privileges, gain access to sensitive data and manipulate that data. The vulnerability is in access control, which allows accounts that have been...