Important: libvncserver

Issue Overview: Integer Overflow or Wraparound leads to Heap-based Buffer Overflow CVE-2019-15690 Affected Packages: libvncserver Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

Old files are not removed after a migration of virtual machine storage in Windows 8.1 or Windows Server 2012 R2

Old files are not removed after a migration of virtual machine storage in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs after you perform a migration of virtual machine storage in Windows 8.1 or Windows Server 2012 R2. An update is available to resolve this...

You cannot start Windows Movie Maker 2012 when a graphics card that only supports DirectX 9 is installed on a Windows 7 or Windows Server 2008 R2-based computer

You cannot start Windows Movie Maker 2012 when a graphics card that only supports DirectX 9 is installed on a Windows 7 or Windows Server 2008 R2-based computer Symptoms Assume that a graphics card that only supports DirectX 9 is installed on a computer that is running Windows 7 or Windows Server...

You can't offer Remote Assistance to another user when you use a mandatory profile in Windows 8.1 or Windows Server 2012 R2

You can't offer Remote Assistance to another user when you use a mandatory profile in Windows 8.1 or Windows Server 2012 R2 This article describes an issue in which you can't offer Remote Assistance to another user when you use a mandatory profile in Windows RT 8.1, Windows 8.1, or Windows Server...

Get-StorageReliabilityCounter doesn't report correct values of temperature in Windows Server 2012 R2

Get-StorageReliabilityCounter doesn't report correct values of temperature in Windows Server 2012 R2 This article describes an issue that occurs when you run the Get-StorageReliabilityCounter PowerShell command in Windows Server 2012 R2. You can fix this issue by using the update in this article...

NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2

NLB cluster communication gets interrupted when MAC impersonation security feature is enabled in Windows Server 2012 R2 This article describes a problem in which Network Load Balancing NLB cluster communication gets interrupted randomly in Windows Server 2012 R2. An update is available to fix thi...

Application may crash with 0x8002801D error in Windows 8.1 or Windows Server 2012 R2

Application may crash with 0x8002801D error in Windows 8.1 or Windows Server 2012 R2 This article describes an issue in which an application may crash with error in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this issue. Before you install this update, se...

"Try again" error occurs and Bluetooth device cannot connect to computer in Windows 8.1 or Windows RT 8.1

"Try again" error occurs and Bluetooth device cannot connect to computer in Windows 8.1 or Windows RT 8.1 This article describes an issue that occurs when a Bluetooth device connects to a computer in Windows 8.1 or Windows RT 8.1. An update is available to resolve this issue. Before you install...

Activation doesn't work if the sppsvc.exe process doesn't start automatically in Windows 8 or Windows Server 2012

Activation doesn't work if the sppsvc.exe process doesn't start automatically in Windows 8 or Windows Server 2012 This issue occurs because the Task Scheduler does not correctly trigger certain events, including the rescheduling of events, when the computer is started after an overdue task...

DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012

DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012 This article describes a problem in which DNS client API call fails and could lead to service restart freeze in Windows Server 2012 R2 or Windows Server 2012. An update is available...

"Code 10 Device Cannot Start" error for EHCI USB Controller devices in Device Manager in Windows Server 2012 R2

"Code 10 Device Cannot Start" error for EHCI USB Controller devices in Device Manager in Windows Server 2012 R2 This article describes an issue in which you receive a "Code 10 Device Cannot Start" error message for Enhanced Host Controller Interface EHCI USB Controller devices in Device Manager i...

"Access violation" error and application that uses private keys crashes in Windows 8.1 or Windows Server 2012 R2

"Access violation" error and application that uses private keys crashes in Windows 8.1 or Windows Server 2012 R2 This article describes an issue in which an "Access violation" error occurs and an application that uses private keys crashes in Windows 8.1 or Windows Server 2012 R2. An update is...

February 25, 2020—KB4537819 (Preview of Monthly Rollup)

None None...

new module: postgresql:12

An update is available for pgaudit, postgres-decoderbufs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This enhancement update adds the postgresql:12 module...

PT-2020-15311 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.218 and earlier Jenkins LTS versions 2.204.1 and earlier Description: The issue allows users with Overall/Read access to view a JVM memory usage chart, which could potentially disclose sensitive information about the system...

Google Android Media Framework CVE-2020-0002 Multiple Remote Code Execution Vulnerabilities

Description Google Android is prone to multiple remote code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of a privileged process. Failed attacks may cause a denial-of-service condition. These issues are being tracked by Android Bug ID...

Microsoft Git for Visual Studio CVE-2019-1387 Remote Code Execution Vulnerability

Description Microsoft Git for Visual Studio is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Multiple MOTEX products vulnerable to privilege escalation

Overview LanScope Cat and LanScope An provided by MOTEX Inc. contain a privilege escalation vulnerability. Mitsuaki Mitch Shiraishi of Secureworks Japan and Yoshimasa Obana reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Embedthis GoAhead Web Server CVE-2019-5096 Remote Code Execution Vulnerability

Description Embedthis GoAhead Web Server is prone to a remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will likely cause a denial-of-service condition. Embedthis GoAhead Web Server...

Multiple Veritas Products CVE-2019-18780 Arbitrary Command Injection Vulnerability

Description Multiple Veritas products are prone to an arbitrary command-injection vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary shell commands in the context of the affected application. Failed exploit attempts...