OPENSUSE-SU-2024:10665-1 build-20210902-1.2 on GA media

These are all security issues fixed in the build-20210902-1.2 package on the GA media of openSUSE Tumbleweed...

CVE-2021-34352

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later...

Qnap Qvr 命令注入漏洞

Qnap Qvr is a Qnap monitoring system control center from China Weilian Technology Qnap. A command injection vulnerability exists in versions prior to Qnap Qvr 5.1.5 build 20210902, which can be exploited by a remote attacker to run arbitrary commands...