Security update for prosody (important)

openSUSE Security Update: Security update for prosody Announcement ID: openSUSE-SU-2021:0728-1 Rating: important References: 1186027 Cross-References: CVE-2021-32917 CVE-2021-32918 CVE-2021-32919 CVE-2021-32920 Affected Products: openSUSE Leap 15.2 An update that fixes four vulnerabilities is now...

openSUSE: Security Advisory for nagios (openSUSE-SU-2021:0715-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : chromium (openSUSE-2021-513)

This update for chromium fixes the following issues : Update to 89.0.4389.114 boo1184256 - CVE-2021-21194: Use after free in screen capture - CVE-2021-21195: Use after free in V8 - CVE-2021-21196: Heap buffer overflow in TabStrip - CVE-2021-21197: Heap buffer overflow in TabStrip - CVE-2021-21198...

openSUSE Security Update : chromium (openSUSE-2021-173)

This update for chromium fixes the following issues : chromium was updated to 88.0.4324.96 boo1181137 - CVE-2021-21117: Insufficient policy enforcement in Cryptohome - CVE-2021-21118: Insufficient data validation in V8 - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free in...

openSUSE: Security Advisory for tmux (openSUSE-SU-2020:1834-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : chromium (openSUSE-2020-1499)

This update for chromium fixes the following issues : Chromium was updated to version 85.0.4183.102 bsc1176306 fixing : - CVE-2020-6573: Use after free in video. - CVE-2020-6574: Insufficient policy enforcement in installer. - CVE-2020-6575: Race in Mojo. - CVE-2020-6576: Use after free in...

openSUSE Security Update : chromium (openSUSE-2020-1206)

This update for chromium fixes the following issues : - Chromium updated to 84.0.4147.125 boo1175085 - CVE-2020-6542: Use after free in ANGLE - CVE-2020-6543: Use after free in task scheduling - CVE-2020-6544: Use after free in media - CVE-2020-6545: Use after free in audio - CVE-2020-6546:...

openSUSE Security Update : chromium (openSUSE-2020-893)

This update for chromium fixes the following issues : Chromium was updated to 83.0.4103.116 boo1173251 : - CVE-2020-6509: Use after free in extensions Chromium was updated to 83.0.4103.106 boo1173029 : - CVE-2020-6505: Use after free in speech - CVE-2020-6506: Insufficient policy enforcement in...

openSUSE Security Update : pdns-recursor (openSUSE-2020-698)

This update for pdns-recursor fixes the following issues : - update to 4.1.16 - fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated CVE-2020-12244, boo1171553 - fixes an issue where invalid hostname on the server can result in...

openSUSE Security Update : mailman (openSUSE-2020-661)

This update for mailman fixes the following issues : Security issue fixed : - CVE-2020-12108: Fixed a content injection bug boo1171363. Non-security issue fixed : - Don't default to invalid hosts for DEFAULTEMAILHOST boo682920 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE: Security Advisory for mailman (openSUSE-SU-2020:0661-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libredwg (openSUSE-2020-96)

This update for libredwg fixes the following issues : libredwg was updated to release 0.10 : API breaking changes : - Added a new int isnewp argument to all dynapi utf8text getters, if the returned string is freshly malloced or not. - removed the UNKNOWN supertype, there are only UNKNOWNOBJ and...

Security update for ffmpeg-4 (moderate)

openSUSE Security Update: Security update for ffmpeg-4 Announcement ID: openSUSE-SU-2020:0024-1 Rating: moderate References: 1100345 1133123 1133153 1133155 1149839 Cross-References: CVE-2017-17555 CVE-2018-13305 CVE-2019-11338 CVE-2019-11339 CVE-2019-15942 Affected Products: openSUSE Leap 15.1...

openSUSE Security Update : rdesktop (openSUSE-2019-2135)

This update for rdesktop fixes the following issues : rdesktop was updated to 1.8.6 : - Fix protocol code handling new licenses rdesktop was updated to 1.8.5 : - Add bounds checking to protocol handling in order to fix many security problems when communicating with a malicious server. rdesktop wa...

UPDATE: SILENTTRINITY v0.3.0

PenTestIT RSS Feed Just yesterday, I wrote about this open source post-exploitation C2 framework and a new release is already available. The post was titled - List of Open Source C2 Post-Exploitation Frameworks. We now have SILENTTRINITY v0.3.0 amongst us, which was in the works for a long time!...

openSUSE Security Update : lxc (openSUSE-2019-596)

This update for lxc fixes the following issues : The following security vulnerability was fixed : - CVE-2018-6556: Fixed an information leak and possible open side effects to regular users via lxc-user-nic boo988348 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : chromium (openSUSE-2019-701)

This update for Chromium to version 69.0.3497.100 fixes the following issues : - Security relevant fixes from internal audits, fuzzing and other initiatives booboo1108774 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SQL injection vulnerability in joomla! Boo*** component len***_req***_bl*** function

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the lenreqbl function of the joomla! Boo component. The vulnerability allows attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in joomla! Boo*** Component Sho*** Functionality

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the joomla! Boo component's sho function. The vulnerability allows attackers to obtain sensitive information about the database...

openSUSE Security Update : phpMyAdmin (openSUSE-2019-194)

This update for phpMyAdmin to version 4.8.5 fixes the following issues : Security issues fixed : - CVE-2019-6799: Fixed an arbitrary file read vulnerability boo1123272 - CVE-2019-6798: Fixed a SQL injection in the designer interface boo1123271 Other changes : - Fix rxport to SQL format not...