1073 matches found
MGASA-2021-0305 Updated p7zip package fixes security vulnerabilities
In p7zip-17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStream-Write where a memcpy uses a NULL pointer as destination address, leading to a crash CVE-2021-3465. Null pointer dereference in function Reserve found in p7zip 16.02 rhbz1951218. Null...
DSA-4934-1 intel-microcode - security update
Bulletin has no description...
Hitachi Virtual File Platform vulnerable to OS command injection
Overview Hitachi Virtual File Platform provided by Hitachi contains an OS command injection vulnerability CWE-78 due to a flaw in processing parameters of the HTTP requests. Hiroki MATSUKUMA of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
SUSE-SU-2021:1970-1 Security update for postgresql10
This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. - Don't u...
DSA-4928-1 htmldoc - security update
Bulletin has no description...
OPENSUSE-SU-2021:0845-1 Security update for inn
This update for inn fixes the following issues: - CVE-2021-31998: change user to news before calling innupgrade, which could have allow local privilege escalation. boo1182321 This update was imported from the openSUSE:Leap:15.2:Update update project...
SUSE-SU-2021:1806-1 Security update for python-httplib2
This update for python-httplib2 fixes the following issues: - Update to version 0.19.0 bsc1182053. - CVE-2021-21240: Fixed regular expression denial of service via malicious header bsc1182053. - CVE-2020-11078: Fixed unescaped part of uri where an attacker could change request headers and body...
DSA-4918-1 ruby-rack-cors - security update
Bulletin has no description...
DLA-2656-1 hivex - security update
Bulletin has no description...
DSA-4913-1 hivex - security update
Bulletin has no description...
OPENSUSE-SU-2021:0692-1 Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. - CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal bsc1185410. - CVE-2021-3516: Fixed a use after free in...
OPENSUSE-SU-2021:0630-1 Security update for virtualbox
This update for virtualbox fixes the following issues: - Version bump to 6.1.20 released April 20 2021 by Oracle Fixes boo1183329 'virtualbox 6.1.18 crashes when it runs nested VM' Fixes boo1183125 'Leap 15.3 installation in Virtualbox without VBox integration' Fixes CVE-2021-2264 and boo1184542...
DLA-2638-1 jackson-databind - security update
Bulletin has no description...
DLA-2627-1 xorg-server - security update
Bulletin has no description...
DSA-4891-1 tomcat9 - security update
Bulletin has no description...
DLA-2617-1 php-nette - security update
Bulletin has no description...
DLA-2616-1 libxstream-java - security update
Bulletin has no description...
UNIVERGE Aspire series PBX vulnerable to denial-of-service (DoS)
Overview Remote system maintenance feature of UNIVERGE Aspire series PBX contain an issue in handling commands, which may cause a denial-of-service DoS. NEC Platforms, Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NEC Platforms, Ltd. coordinate...