SUSE-SU-2021:2295-1 Security update for slurm_20_11

This update for slurm2011 fixes the following issues: Updated to 20.11.7 Summary of new features: CVE-2021-31215: Fixed a remote code execution as SlurmUser bsc1186024. slurmd - handle configless failures gracefully instead of hanging indefinitely. select/constres - fix Dragonfly topology not...

CVE-2021-20424

IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309...

SUSE-SU-2021:1785-2 Security update for postgresql13

This update for postgresql13 fixes the following issues: - Upgrade to version 13.3: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

Funds are sent twice on callTo errors

Handle cmichel Vulnerability details Vulnerability Details The fulfill transaction on the receiving chain tries to call the addFunds and execute actions on txData.callTo. When any of the calls reverts, the funds are sent to the txData.receivingAddress. The txData.callTo is user-controlled and an...

The vulnerability of the mysql-wsrep component of the MariaDB database lies in errors during the processing of input data during syntax analysis. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mysql-wsrep component of the MariaDB database is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2021-32526

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

The vulnerability of the decode_frame function in the libavcodec/exr.c component of the FFmpeg multimedia library involves an operation that outputs values within acceptable buffer data limits. This allows a malicious actor to cause a service failure.

The vulnerability of the decodeframe function in the libavcodec/exr.c component is related to errors in calculations. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the fly-fm file manager, related to errors in its code, allows a perpetrator to gain access to confidential data.

The vulnerability of the fly-fm file manager is related to an incorrect password request from the user for accessing the password storage. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the MinIO object storage server, related to authentication errors, allows attackers to bypass the readOnly policy and compromise the integrity of the protected information.

The vulnerability of the MinIO object storage server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the readOnly policy and compromise the integrity of the protected information by creating a temporary URL address “mc share upload”...

The vulnerability of Intel microprogramming software, related to security configuration errors, allows attackers to disclose protected information.

The vulnerability of Intel microprogramming software is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose protected information...

Users unable to relaunch the published applications, error "Citrix workspace will try to reconnect..."

Users get disconnected from their active published app session When attempting to relaunch the same app, they get a popup saying 'Citrix Workspace app will try to reconnect for xxx more minutes. Click Disconnect if you want to stop'...

Advisory ROSA-SA-2021-1882

Software: libpcap 1.5.3 OS: Cobalt 7.9 CVE-ID: CVE-2019-15165 CVE-Crit: MEDIUM CVE-DESC: sf-pcapng.c in libpcap before 1.9.1 incorrectly checks the length of the PHB header before allocating memory. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2019-15161 CVE-Crit: MEDIUM CVE-DESC: rpcapd /...

CVE-2021-22351

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may induce users to grant permissions on modifying items in the configuration table,causing system exceptions...

CVE-2021-22351

CVE-2021-22351 is reported across multiple sources as aCredentials Management Errors vulnerability in Huawei smartphones (EMUI/Magic UI). The connected documents describe a trust/credentials management issue where an attacker could coerce users into granting permissions to modify items in the dev...

CVE-2021-22367

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

Authentication flaw

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

CVE-2021-22367

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

CVE-2021-22367

CVE-2021-22367 is described across multiple sources as a Huawei Smartphone vulnerability titled “Key Management Errors,” with potential authentication bypass. The documents consistently cite the affected product (Huawei Smartphone) and the impact (authentication bypass) but do not provide detaile...

CVE-2021-22370

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...